last executing test programs: 15m28.452492543s ago: executing program 32 (id=952): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x10, @desc1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 15m9.424590388s ago: executing program 3 (id=1065): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000500)={'bridge0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r3 = socket$unix(0x1, 0x0, 0x0) accept$unix(r3, 0x0, &(0x7f0000000000)) 15m8.672843697s ago: executing program 3 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 15m7.437981897s ago: executing program 3 (id=1073): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 15m7.207239432s ago: executing program 3 (id=1077): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c80)={0xb0, 0x0, 0x0, [{{0x0, 0x1, 0x6, 0x8000000000000000, 0x82, 0x3, {0x0, 0x3, 0x8, 0xfffffffffffffffe, 0xbeef, 0x3, 0x4, 0xcd, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x1, 0x0, 0x5, 0xce, 'wfdno'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(&(0x7f00000010c0)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) 15m6.815491742s ago: executing program 3 (id=1079): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 15m6.615631337s ago: executing program 3 (id=1081): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = accept(r2, 0x0, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 15m6.180750638s ago: executing program 33 (id=1081): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = accept(r2, 0x0, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 8m40.01552339s ago: executing program 5 (id=2512): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@test_dummy_encryption}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=") r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x10) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10003b, &(0x7f0000002a80)=ANY=[], 0x1, 0x100c, &(0x7f0000004100)="$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") socket$alg(0x26, 0x5, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x6, 0x7fffffffeff3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) 8m35.379425275s ago: executing program 5 (id=2528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 8m34.794153559s ago: executing program 5 (id=2530): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x2000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4) 8m34.195051364s ago: executing program 5 (id=2542): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 8m31.903974419s ago: executing program 5 (id=2536): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 8m28.082696324s ago: executing program 5 (id=2549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0xa0, 0x6}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m25.678790721s ago: executing program 34 (id=2549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0xa0, 0x6}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m26.263734902s ago: executing program 7 (id=2692): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(&(0x7f0000000000)='.\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 7m23.932342109s ago: executing program 7 (id=2705): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r2}}], 0x1, 0x0, 0x0) 7m23.437752701s ago: executing program 7 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 7m21.957928156s ago: executing program 7 (id=2700): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 7m19.465399656s ago: executing program 7 (id=2712): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f0000000480)=""/83, 0x53, 0x0) 7m18.142667078s ago: executing program 7 (id=2716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m17.063061191s ago: executing program 35 (id=2716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m10.950690911s ago: executing program 6 (id=2737): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m9.921649977s ago: executing program 6 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 7m8.833300853s ago: executing program 6 (id=2743): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 7m7.33845409s ago: executing program 6 (id=2747): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 7m5.329282119s ago: executing program 6 (id=2754): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6m56.912150155s ago: executing program 6 (id=2777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m55.985685138s ago: executing program 36 (id=2777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m40.223735231s ago: executing program 8 (id=3368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = userfaultfd(0x80801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) 2m36.719399366s ago: executing program 8 (id=3372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xff1, &(0x7f0000001cc0)=""/4081, 0x41100, 0x22}, 0x94) 2m30.932066449s ago: executing program 8 (id=3379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x20, &(0x7f0000001640)={&(0x7f0000000140)=""/61, 0x3d, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x3e, r5}, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001980)={0xffffffffffffffff, r1, 0x25, 0xd, @val=@uprobe_multi={&(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)=[0xb3, 0xffffffffffffffff, 0x628, 0x9], &(0x7f0000001940)=[0x2, 0x1, 0x1, 0x1], 0x5, 0x4}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040885}, 0x4891) io_uring_setup(0x3813, &(0x7f0000000040)={0x0, 0x1000c89b, 0x8000, 0x0, 0x41}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m25.370654325s ago: executing program 8 (id=3396): socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5960, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800004, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xcb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) 2m25.205041259s ago: executing program 8 (id=3398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x10000839, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 2m21.854700761s ago: executing program 8 (id=3405): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add5", 0x32}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m20.848212135s ago: executing program 37 (id=3405): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add5", 0x32}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.094706221s ago: executing program 4 (id=3671): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r3, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3ed8c1"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) 18.904214757s ago: executing program 0 (id=3672): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 17.886839521s ago: executing program 4 (id=3675): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$eJzs3d9rU2cfAPDvSdP689UKIu/7XgzBizmcqW33w8Fg7nJsMmG7d6GNRZoaaVKxnaBezJvdDBmMMWHsD9j9LmX/wP4KYRNkSNkuxiDjpCc1tknTdtFE8/nA0efJOSfP+eY539PnyUlIAEPrePpPLuJ/EfFVEnG4ZV0+spXH17ZbfXxjJl2SqNc/+T2JJHusuX2S/X8gq/w3In7+IuJUbnO71eWV+WK5XFrM6hO1hasT1eWV05cXinOludKVqenps29OT73z9ls9i/W1C39++/H9D85+eWL1mx8fHrmbxLk4mK1rjeNfuNVaOV78OyuNxrkNG072oLFBkvT7ANiVkSzPRyO9BhyOkSzrgZffzYioA0Mqkf8wpJrjgObcvkfz4BfGo/fXJkCN2Mda48+vvTcSextzo/2ryVMzo3S+O96D9tM2fvrt3t10ia3fh9jXpQ6wI7duR8SZfH7z9T/Jrn+7d6bx5vHWNrYxbH9/oJ/up+Of19uN/3Lr459oM/450CZ3d6N7/uce9qCZjtLx37ttx7/rl67xkaz2n8aYbzS5dLlcOhMRhyLiZNS73vo4u/qg3mld6/gvXdL2m2PB7Dge5vc8vc9ssVaMiLFdhvyUR7cj/p9vF3+y3v9Jm/5PX48L22zjWOneK53WdY//2ar/EPFq2/5/0q3J1vcnJxrnw0TzrNjsjzvHfunU/pbx7+15uJuk/b9/6/jHk9b7tdWdt/H93r9Kndbt9vwfSz5tlJtJcL1Yqy1ORowlH21+fOrJvs16c/s0/pMntr7+tTv/08nXZ9uM/87ROx037ff5n8Y/u6P+33nhwYeff5c9182dx5/2/xuN0snskez61152rmz3AHvxGgIAAAAAAMCgyEXEwUhyhfVyLlcorH2+42jsz5Ur1dqpS5WlK7PR+K7seIzmmne6D7d8HmIy+zxssz61oT4dEUci4uuRfY16YaZSnu138AAAAAAAAAAAAAAAAAAAADAgDnT4/n/q15F+Hx3wzDV+2GBPv48C6IeuP/nfi196AgZS1/wHXlryH4aX/IfhJf9heMl/GF7yH4aX/IfhJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgpy6cP58u9dXHN2bS+uy15aX5yrXTs6XqfGFhaaYwU1m8WpirVObKpcJMZaHb85UrlauTU7F0faJWqtYmqssrFxcqS1dqFy8vFOdKF0ujzyUqAAAAAAAAAAAAAAAAAAAAeLFUl1fmi+VyaVGhY+G9GIjDeJYBrtnV7vlBiWJ7hUMRMQCH8VwKe9b69HbWvTvbvY8XJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY4J8AAAD//3TNLqg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 15.674659336s ago: executing program 4 (id=3678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) 15.449169441s ago: executing program 0 (id=3680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 14.333139038s ago: executing program 4 (id=3681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x9, @vifc_lcl_addr=@empty, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000004c0)="84"}) 13.245516275s ago: executing program 0 (id=3684): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 9.867889068s ago: executing program 9 (id=3691): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000000c0)={'veth0_to_bridge\x00', @ifru_addrs=@ethernet={0x1, @random="021122334455"}}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_addrs=@ethernet={0x1, @random="021122334466"}}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000140)={'bridge0\x00', @ifru_ivalue=0x2}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x13, 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'bridge0\x00', 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) sendto$packet(r2, &(0x7f0000000300)="0180c20000000011223344660028424203000000000000000000000000000000000000000000000000000000140002000f0000000000", 0x34, 0x0, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) sendto$packet(r2, &(0x7f0000000300)="0180c20000000011223344660028424203000000000000000000000000000000000000000000000000000000140002000f0000000000", 0x34, 0x0, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0180c200"}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 8.822460073s ago: executing program 9 (id=3694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r6, 0x2, 0x6}, &(0x7f0000000740)=0xc) 7.482374606s ago: executing program 9 (id=3696): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7.245790572s ago: executing program 2 (id=3698): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x8e000) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) 6.250768337s ago: executing program 1 (id=3699): sched_setscheduler(0x0, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x137) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.133059399s ago: executing program 4 (id=3700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r2, &(0x7f0000000080)="0b000300", 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.080840771s ago: executing program 9 (id=3701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 5.995383393s ago: executing program 0 (id=3702): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='Con', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) 5.910744795s ago: executing program 1 (id=3703): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, 0x0, 0x20000010) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 5.905799975s ago: executing program 2 (id=3704): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2b, 0x80801, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x6) 4.708357284s ago: executing program 1 (id=3705): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) 4.562181798s ago: executing program 0 (id=3706): socket$kcm(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.387780262s ago: executing program 1 (id=3707): ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.362076213s ago: executing program 4 (id=3708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000000)) unshare(0x2c020400) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = msgget$private(0x0, 0x240) socket$inet_udp(0x2, 0x2, 0x0) msgsnd(r5, &(0x7f0000000880)={0x2, "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"}, 0x24d, 0x0) 3.582815742s ago: executing program 9 (id=3709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, 0x0, 0x0) 3.419616356s ago: executing program 2 (id=3710): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) r2 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r2, 0x0, r3, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) dup(0xffffffffffffffff) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$MEMGETOOBSEL(r5, 0x80c84d0a, 0x0) 2.563110667s ago: executing program 1 (id=3711): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 1.61869864s ago: executing program 0 (id=3712): io_setup(0x8, &(0x7f00000000c0)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xac}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) 1.561911792s ago: executing program 9 (id=3713): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 1.2030704s ago: executing program 2 (id=3714): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r4, 0xc178fd0b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 866.669799ms ago: executing program 1 (id=3715): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 327.905062ms ago: executing program 2 (id=3716): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 0s ago: executing program 2 (id=3717): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') kernel console output (not intermixed with test programs): v6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 660.885495][ T4738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.902253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.946044][ T4322] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 660.973918][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 660.993807][T13650] device veth0_macvtap entered promiscuous mode [ 661.020995][T13650] device veth1_macvtap entered promiscuous mode [ 661.125622][T13904] netlink: 'syz.2.2605': attribute type 21 has an invalid length. [ 661.165965][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.235714][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.242931][T13901] Cannot find set identified by id 0 to match [ 661.360794][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.436168][ T4322] usb 7-1: config index 0 descriptor too short (expected 100, got 68) [ 661.517745][ T4322] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 661.673152][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.722815][ T4322] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 661.841678][T13650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.855715][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.866492][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.886721][T13650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.905265][ T4322] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.914331][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 661.922642][ T4322] usb 7-1: SerialNumber: syz [ 661.937147][T13898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 662.023243][T13650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.162641][T13898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 662.187920][T13650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.218612][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.250825][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.259526][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.268866][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.944121][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 663.313161][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.338421][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.352166][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.473941][ T4322] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 663.477360][T13650] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.508257][T13650] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.526082][T13650] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.542087][T13650] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.586022][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.657785][T13922] xt_cgroup: path and classid specified [ 663.695153][ T4739] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.780655][ T4318] usb 7-1: USB disconnect, device number 7 [ 663.801546][ T4318] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 663.822357][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.862935][ T4739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.871264][ T4739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.139676][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.180012][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.194994][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.225378][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.232969][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 665.314958][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.500462][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.616208][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.747212][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.929886][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.236630][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.364994][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.485367][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.535536][T13947] loop6: detected capacity change from 0 to 16 [ 666.594961][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.439848][ T9531] net_ratelimit: 15 callbacks suppressed [ 670.439869][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.496242][T13979] xt_cgroup: path and classid specified [ 670.584839][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.705354][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.155138][ T4739] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.265010][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.324935][ T4738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.374420][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2628'. [ 672.653626][T14018] loop2: detected capacity change from 0 to 16 [ 672.725991][T14013] device bond5 entered promiscuous mode [ 672.782548][ T4397] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.055806][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.090312][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 673.175564][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.310992][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.395359][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2640'. [ 675.711017][T14071] device hsr0 entered promiscuous mode [ 675.735385][ T4397] net_ratelimit: 14 callbacks suppressed [ 675.735395][ T4397] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.885844][ T4397] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 676.137952][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 676.886421][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.305128][ T4739] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.624261][ T4739] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.745159][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.941701][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.311115][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.787891][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2648'. [ 678.820451][T14111] jffs2: notice: (14111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 678.854855][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.586840][T14125] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14126] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14125] [ 681.329757][T14130] syz.2.2657 (14130): drop_caches: 2 [ 681.344640][ T4748] net_ratelimit: 6 callbacks suppressed [ 681.344657][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.525325][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.295118][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.644619][ T4739] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.904874][ T4749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.035635][ T4749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.154903][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.272036][ T4749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.306641][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.351598][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 683.421666][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 683.477733][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 683.540330][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.590412][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 683.657855][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 683.751582][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.876124][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.675447][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.682317][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.029616][ T27] audit: type=1800 audit(2000000068.569:453): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2667" name="bus" dev="ramfs" ino=72759 res=0 errno=0 [ 686.349285][ T5494] net_ratelimit: 17 callbacks suppressed [ 686.349301][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.505405][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.240021][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.495364][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.795036][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.983121][ T4747] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.452709][ T5493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.584930][ T5401] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.785584][ T5403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.316268][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 689.372062][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2675'. [ 689.775003][T14229] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.783819][T14229] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.792608][T14229] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.801547][T14229] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.842436][T14233] netlink: 'syz.7.2675': attribute type 10 has an invalid length. [ 690.922998][T14233] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 690.956160][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.889674][T14263] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 693.402655][T14263] CIFS: Attempting to mount \\127.0.0.1\share [ 693.533537][T14263] CIFS: VFS: Error connecting to socket. Aborting operation. [ 693.575386][T14263] CIFS: VFS: cifs_mount failed w/return code = -4 [ 698.774998][T14301] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14305] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14301] [ 700.485979][ T4749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.595196][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.753454][ T4749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.035138][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.264872][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.456342][ T5495] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.681776][ T5495] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.118706][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.270740][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.523546][ T5495] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.371665][T14338] loop7: detected capacity change from 0 to 2048 [ 703.393482][ T8715] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 703.628547][T14338] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 703.639979][T14349] loop2: detected capacity change from 0 to 32768 [ 703.682668][T14349] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2704 (14349) [ 703.912626][T14338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.259053][T14349] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 704.269320][T14349] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 704.278405][T14349] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 704.288832][T14349] BTRFS info (device loop2): use zstd compression, level 3 [ 704.296066][T14349] BTRFS info (device loop2): force clearing of disk cache [ 704.303268][T14349] BTRFS info (device loop2): enabling disk space caching [ 704.310516][T14349] BTRFS info (device loop2): disk space caching is enabled [ 704.392750][ T8715] usb 7-1: config 0 has no interfaces? [ 704.398282][ T8715] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 704.435439][ T8715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.503890][ T8715] usb 7-1: config 0 descriptor?? [ 704.522566][T14368] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 704.554365][T14349] BTRFS info (device loop2): enabling ssd optimizations [ 704.564108][T14349] BTRFS info (device loop2): rebuilding free space tree [ 704.632689][T14349] BTRFS info (device loop2): disabling free space tree [ 704.639815][T14349] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 704.650766][T14349] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 704.831393][T14349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 704.863540][T14349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 704.941368][T13650] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 704.967784][T14349] overlayfs: d_ino too big (., ino=4611686018427388161, xinobits=3) [ 704.976665][T14349] overlayfs: d_ino too big (.., ino=4611686018427388160, xinobits=3) [ 704.985945][T14349] overlayfs: d_ino too big (513, ino=9223372036854778561, xinobits=3) [ 704.996195][T14349] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 705.005060][T14349] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 705.014011][T14349] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 705.022338][T14349] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 705.337918][T13650] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 705.560357][T14349] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 705.680074][ T8715] usb 7-1: USB disconnect, device number 8 [ 705.717284][ T5495] net_ratelimit: 18 callbacks suppressed [ 705.717301][ T5495] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.869363][ T4746] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.022671][ T9531] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.135323][ T33] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.303975][ T4746] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.418002][ T5495] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.782283][ T5495] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.150711][ T33] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.163983][T14400] lo: Caught tx_queue_len zero misconfig [ 707.426562][ T5495] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.455907][ T5495] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.487705][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.558197][ T5495] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.568722][ T5495] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.599120][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.631561][ T5495] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.646174][ T5495] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.652969][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 707.669552][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 707.677803][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 707.686718][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 707.695691][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 707.710547][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.722521][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.759990][T14416] lo speed is unknown, defaulting to 1000 [ 707.834243][ T4737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.848678][T14416] chnl_net:caif_netlink_parms(): no params data found [ 707.891472][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.899872][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.908333][T14416] device bridge_slave_0 entered promiscuous mode [ 707.917090][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.924475][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.932282][T14416] device bridge_slave_1 entered promiscuous mode [ 707.953743][T14416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.964668][T14416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.986813][T14416] team0: Port device team_slave_0 added [ 707.998985][T14416] team0: Port device team_slave_1 added [ 708.016320][T14416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.023435][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.049693][T14416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.062043][T14416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.069064][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.095251][T14416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.126129][T14416] device hsr_slave_0 entered promiscuous mode [ 708.132894][T14416] device hsr_slave_1 entered promiscuous mode [ 708.139351][T14416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.147362][T14416] Cannot create hsr debugfs directory [ 708.255166][T14416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 708.264045][T14416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 708.273932][T14416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 708.282459][T14416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 708.303098][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.310211][T14416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.317593][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.324743][T14416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.371549][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.386280][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.394904][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.404483][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.426221][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.435485][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.444644][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.453538][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.460658][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.472422][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.481508][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.490082][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.497142][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.507037][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.520738][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.534261][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.545242][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.554752][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.567505][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.577077][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.588932][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.597353][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.608423][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.617904][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.628266][T14416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.780521][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.788239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.805107][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.028342][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 709.037428][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 709.057505][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 709.066334][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 709.075279][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 709.083817][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 709.093920][T14416] device veth0_vlan entered promiscuous mode [ 709.108043][T14416] device veth1_vlan entered promiscuous mode [ 709.125512][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 709.136191][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 709.144430][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 709.153397][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 709.163721][T14416] device veth0_macvtap entered promiscuous mode [ 709.173731][T14416] device veth1_macvtap entered promiscuous mode [ 709.186678][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.197462][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.207594][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.218248][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.229054][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.239968][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.252028][T14416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.260231][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 709.268990][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 709.277400][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 709.287954][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 709.298777][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.309504][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.319715][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.331814][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.341860][T14416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.352481][T14416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.367051][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.377400][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 709.386966][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 709.398193][T14416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.407292][T14416] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.415988][T14416] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.425494][T14416] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.495065][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.507233][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.515337][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 709.536471][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.544384][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.566954][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 709.792225][T14445] loop8: detected capacity change from 0 to 256 [ 709.798959][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 709.906431][T14445] exfat: Deprecated parameter 'utf8' [ 709.914980][T14445] exfat: Deprecated parameter 'namecase' [ 709.933468][T14445] exfat: Deprecated parameter 'utf8' [ 709.965791][T14445] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 710.241557][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 710.844648][ T5402] net_ratelimit: 14 callbacks suppressed [ 710.844664][ T5402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.014116][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.035873][T14464] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2733'. [ 711.235335][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.725031][T14464] tipc: Enabling of bearer rejected, failed to enable media [ 711.932674][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 712.100102][ T5402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.305818][T14484] device syzkaller0 entered promiscuous mode [ 712.328844][T14484] tipc: Resetting bearer [ 712.471215][ T33] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.593105][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.228590][ T128] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 713.243163][ T33] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.273351][T14501] loop2: detected capacity change from 0 to 16 [ 713.368198][T14340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.417542][ T128] usb 9-1: config 0 has no interfaces? [ 713.423123][ T128] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 713.446671][ T128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.474614][ T128] usb 9-1: config 0 descriptor?? [ 713.527540][ T5402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.650444][ T4397] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.196060][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 714.258108][ C1] hrtimer: interrupt took 33084 ns [ 714.549001][T14433] usb 9-1: USB disconnect, device number 2 [ 714.591653][ T5495] bond0: (slave wlan1): Releasing backup interface [ 715.041378][ T8751] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.224786][T14543] net_ratelimit: 1 callbacks suppressed [ 716.224801][T14543] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.278472][ T49] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 716.295955][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 716.346195][ T5495] device hsr_slave_0 left promiscuous mode [ 716.389915][ T5495] device hsr_slave_1 left promiscuous mode [ 717.184495][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.277221][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.325505][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.357292][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.420252][ T5495] device bridge_slave_1 left promiscuous mode [ 717.430193][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.488453][T14575] loop6: detected capacity change from 0 to 2048 [ 717.525715][T14575] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 717.585634][ T5495] device bridge_slave_0 left promiscuous mode [ 717.599439][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.612491][T14575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 718.374168][ T5495] device veth1_macvtap left promiscuous mode [ 718.487315][ T5495] device veth0_macvtap left promiscuous mode [ 718.895408][ T5495] device veth1_vlan left promiscuous mode [ 718.930397][ T5495] device veth0_vlan left promiscuous mode [ 719.121028][ T7827] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 719.190253][ T7827] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 720.355903][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 720.364775][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 720.375756][ T49] Bluetooth: hci0: hardware error 0x00 [ 720.846830][T14617] loop2: detected capacity change from 0 to 512 [ 720.885666][T14617] EXT4-fs: Ignoring removed nobh option [ 721.282173][T14617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 721.295274][T14617] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.331775][T14617] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 721.414723][T14617] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.2757: mark_inode_dirty error [ 721.464209][T14617] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 721.507688][T14624] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 721.595182][T14624] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.2757: mark_inode_dirty error [ 721.652633][T14624] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 721.674762][T14624] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2757: mark_inode_dirty error [ 721.701950][T14624] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 721.721731][T14624] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.2757: mark_inode_dirty error [ 721.926526][T14626] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.2757: corrupted inode contents [ 722.442534][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 722.552749][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 722.863386][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 723.493202][ T5495] team0 (unregistering): Port device team_slave_0 removed [ 723.721078][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.819113][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.202969][ T5495] bond0 (unregistering): Released all slaves [ 724.305141][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.380399][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2772'. [ 724.406273][T14646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.473328][T14650] loop2: detected capacity change from 0 to 2048 [ 724.524240][T14650] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 724.588485][T14650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.606238][T14646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.725327][T14655] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 724.770471][T12167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.879871][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.010370][T12167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.078315][T14660] input: syz1 as /devices/virtual/input/input8 [ 725.181480][T12167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.293342][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.390831][ T4270] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 725.422779][ T4270] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 725.464523][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.575395][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.766783][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.883821][ T4299] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.470106][T14675] cgroup: fork rejected by pids controller in /syz8 [ 729.428543][ T33] net_ratelimit: 7 callbacks suppressed [ 729.428594][ T33] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 729.725676][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.757559][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.765978][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.773817][ T5495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.785865][ T5495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.796844][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.804609][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 729.812092][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.900857][T14528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.164070][ T5495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.186747][ T5495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.237058][T14762] lo speed is unknown, defaulting to 1000 [ 730.564383][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.843555][ T5495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.853945][ T5495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.967285][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.030663][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 731.045789][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 731.054296][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 731.104765][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 731.116634][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 731.124578][ T5495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.126720][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 731.149037][ T5495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.247596][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.289680][T14776] lo speed is unknown, defaulting to 1000 [ 731.433729][T14794] tipc: Enabling of bearer rejected, failed to enable media [ 731.687953][T14762] chnl_net:caif_netlink_parms(): no params data found [ 731.861755][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 731.902769][ T5489] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.052882][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.108243][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.170799][T14762] device bridge_slave_0 entered promiscuous mode [ 732.188743][ T5495] tipc: Disabling bearer [ 732.195068][ T5495] tipc: Left network mode [ 732.196313][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.820870][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.829237][T14762] device bridge_slave_1 entered promiscuous mode [ 732.852369][T14762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.884260][ T5495] tipc: Left network mode [ 732.892747][T14776] chnl_net:caif_netlink_parms(): no params data found [ 732.989392][T14762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.023174][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2794'. [ 733.236492][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 733.272113][ T5495] device vlan3 left promiscuous mode [ 733.282889][ T5495] device ip6gretap0 left promiscuous mode [ 733.301248][ T5495] bridge0: port 3(vlan3) entered disabled state [ 733.462799][T14762] team0: Port device team_slave_0 added [ 733.577478][T14762] team0: Port device team_slave_1 added [ 733.639171][T14776] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.646489][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.655570][T14776] device bridge_slave_0 entered promiscuous mode [ 733.664767][T14776] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.672166][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.680871][T14776] device bridge_slave_1 entered promiscuous mode [ 733.708126][T14776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.022073][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 734.429286][T14776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.640939][T14762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.651309][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.815865][T14762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.357384][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 735.545727][T14762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.872397][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.946415][T14762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.979944][T14776] team0: Port device team_slave_0 added [ 736.117877][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 736.795620][T14876] xt_CT: No such helper "pptp" [ 737.036988][T14776] team0: Port device team_slave_1 added [ 737.432309][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 738.120810][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.189523][T14762] device hsr_slave_0 entered promiscuous mode [ 738.213574][T14762] device hsr_slave_1 entered promiscuous mode [ 738.220251][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 738.236202][T14762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.271587][T14762] Cannot create hsr debugfs directory [ 738.300642][T14895] device syzkaller0 entered promiscuous mode [ 738.308996][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2810'. [ 738.318530][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2810'. [ 738.704201][T14776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.747395][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.948170][T14776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.259223][ T5495] bond2: (slave gretap1): Releasing active interface [ 739.280973][T14776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.302707][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.341713][T14776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.499506][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 739.828506][T14776] device hsr_slave_0 entered promiscuous mode [ 739.847441][T14776] device hsr_slave_1 entered promiscuous mode [ 739.868221][T14776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.890448][T14776] Cannot create hsr debugfs directory [ 740.132893][T14538] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 740.511067][ T4560] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 740.743927][ T5495] bond0: (slave wlan1): Releasing backup interface [ 741.305421][ T5489] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.375619][T14820] libceph: connect (1)[c::]:6789 error -22 [ 742.410997][T14820] libceph: mon0 (1)[c::]:6789 connect error [ 742.437125][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.489600][T14945] ceph: No mds server is up or the cluster is laggy [ 742.613586][ T5495] device hsr_slave_0 left promiscuous mode [ 742.625506][ T5495] device hsr_slave_1 left promiscuous mode [ 742.657123][ T5495] device vxlan0 left promiscuous mode [ 742.668259][ T5495] bridge0: port 2(vxlan0) entered disabled state [ 742.793708][ T5495] device vlan0 left promiscuous mode [ 742.826962][ T5495] device bond0 left promiscuous mode [ 742.902415][ T5495] bridge0: port 1(vlan0) entered disabled state [ 743.326491][ T5495] device hsr_slave_0 left promiscuous mode [ 743.565110][ T5495] device hsr_slave_1 left promiscuous mode [ 743.616557][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.629074][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.668359][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.690591][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.706922][ T5495] device bridge_slave_1 left promiscuous mode [ 743.714044][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.736373][ T5495] device bridge_slave_0 left promiscuous mode [ 743.743519][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.803996][ T5495] device veth1_macvtap left promiscuous mode [ 743.811445][ T5495] device veth0_macvtap left promiscuous mode [ 743.817656][ T5495] device veth1_vlan left promiscuous mode [ 743.831791][ T5495] device veth0_vlan left promiscuous mode [ 744.032077][T14974] binder: 14973:14974 ioctl c0306201 2000000009c0 returned -14 [ 744.156872][ T5495] bond7 (unregistering): Released all slaves [ 745.191539][ T5495] bond6 (unregistering): Released all slaves [ 745.469750][ T5495] bond5 (unregistering): Released all slaves [ 745.486755][ T5495] bond4 (unregistering): Released all slaves [ 745.700015][ T5495] bond3 (unregistering): Released all slaves [ 745.870026][ T5495] bond2 (unregistering): Released all slaves [ 745.881178][ T5495] bond1 (unregistering): Released all slaves [ 747.412556][ T5495] bond0 (unregistering): Released all slaves [ 747.515121][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.527006][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.820227][ T5495] bond2 (unregistering): Released all slaves [ 748.110620][ T5495] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 748.128218][ T5495] device veth0_to_bond left promiscuous mode [ 748.135623][ T5495] bond1 (unregistering): Released all slaves [ 748.936915][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 748.986211][ T5495] team0 (unregistering): Port device team_slave_0 removed [ 749.037929][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.090513][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.463853][ T5495] bond0 (unregistering): Released all slaves [ 749.557115][ T5495] smc: removing net device lo with user defined pnetid SYZ0 [ 749.590165][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.700852][ T4748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.817003][T12167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.930425][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.080485][ T4740] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.100269][T14776] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 750.150088][T14776] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 750.184292][T14776] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 750.207889][T14776] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 750.311810][T14762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 750.342433][T14762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 750.362850][T14762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 750.379237][T14776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.413496][T14762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 750.441533][T14776] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.463009][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.483014][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.490852][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.500148][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.510037][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.517179][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.544831][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.570156][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 750.593455][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.602140][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.609231][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.617245][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 750.627715][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 750.657486][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 750.668766][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 750.678371][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 750.690451][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 750.703140][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 750.715480][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 750.724258][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 750.743556][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 750.755594][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 750.782256][T14776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 750.867645][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.895648][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.920224][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.929745][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.942450][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.954168][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.963564][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.972654][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.979751][ T5494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.988453][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 751.000229][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 751.017062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 751.025866][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.033004][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.065488][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 751.083349][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 751.122965][T14533] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.131020][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 751.147399][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.173178][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 751.192721][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 751.212948][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 751.225773][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.234192][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 751.263102][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.284841][T14762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.298479][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.321161][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.345350][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.393402][T14776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.403134][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.513107][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.610879][ T5495] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.644160][ T5495] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.702928][ T5494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.786136][ T5495] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.812986][ T5495] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.845619][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.860041][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.881398][T14762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.945746][ T5495] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.959097][ T5495] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.041867][ T5495] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.064272][ T5495] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.104305][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 752.119494][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.128675][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 752.139010][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.178733][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.189187][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.204761][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.213082][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.225350][T14762] device veth0_vlan entered promiscuous mode [ 752.234355][T14776] device veth0_vlan entered promiscuous mode [ 752.249836][T14776] device veth1_vlan entered promiscuous mode [ 752.258010][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.266321][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.274298][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.282154][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.290197][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.300973][T14762] device veth1_vlan entered promiscuous mode [ 752.356616][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.368843][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.377667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.386166][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.395267][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.412923][T14776] device veth0_macvtap entered promiscuous mode [ 752.438726][T14776] device veth1_macvtap entered promiscuous mode [ 752.451919][T14762] device veth0_macvtap entered promiscuous mode [ 752.460441][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.470046][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.479620][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.488804][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.515683][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.527318][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.544711][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.561352][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.573947][T14776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.590884][T14762] device veth1_macvtap entered promiscuous mode [ 752.600653][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.615711][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.630104][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.654795][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.665475][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.684910][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.716577][T14776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.740935][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.752554][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.780906][ T5495] tipc: Left network mode [ 752.787615][T14776] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.804345][T14776] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.813063][T14776] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.854290][T14776] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.866974][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.894687][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.914229][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.934214][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.944044][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.989091][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.015926][T14762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.023382][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 753.045988][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 753.108176][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.134499][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.144342][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.174537][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.197655][T14762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.412643][ T5495] bond1: (slave ip6gretap1): Removing an active aggregator [ 753.420743][ T5495] bond1: (slave ip6gretap1): Releasing backup interface [ 753.431582][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 753.441105][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.459626][T14762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.469375][T14762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.478201][T14762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.487015][T14762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.595422][ T5494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.619688][ T5494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.659841][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 753.680671][T14533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.696652][T14533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.734611][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 753.847150][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.855014][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.943948][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.322196][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.440700][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.462148][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 756.607447][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2831'. [ 756.922484][T15106] loop8: detected capacity change from 0 to 512 [ 757.580906][T15106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 757.632695][T15106] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 758.721159][T14416] EXT4-fs (loop8): unmounting filesystem. [ 759.688376][ T5495] bond0: (slave wlan1): Releasing backup interface [ 759.743696][ T5495] device wlan1 left promiscuous mode [ 760.849193][ T5495] device hsr_slave_0 left promiscuous mode [ 760.898840][ T5495] device hsr_slave_1 left promiscuous mode [ 760.988497][ T5495] device vlan2 left promiscuous mode [ 761.002858][ T5495] device bond0 left promiscuous mode [ 761.028492][ T5495] device bond_slave_0 left promiscuous mode [ 761.102264][ T5495] device bond_slave_1 left promiscuous mode [ 761.138843][ T5495] device macvlan2 left promiscuous mode [ 761.172396][ T5495] bridge0: port 3(vlan2) entered disabled state [ 761.981341][ T5495] device bridge_slave_1 left promiscuous mode [ 762.022999][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.093274][ T5495] device bridge_slave_0 left promiscuous mode [ 762.105828][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.338386][ T5495] device team0 left promiscuous mode [ 762.377341][ T5495] device team_slave_0 left promiscuous mode [ 762.407917][ T5495] device team_slave_1 left promiscuous mode [ 762.443082][ T5495] device veth1_macvtap left promiscuous mode [ 762.457195][ T5495] device veth0_macvtap left promiscuous mode [ 762.473248][ T5495] device veth1_vlan left promiscuous mode [ 762.483419][ T5495] device veth0_vlan left promiscuous mode [ 762.653833][T15181] binder: 15180:15181 ioctl c0306201 2000000009c0 returned -14 [ 763.443032][ T5495] bond2 (unregistering): Released all slaves [ 763.453766][T15217] Invalid ELF header magic: != ELF [ 764.180901][ T5495] bond1 (unregistering): Released all slaves [ 764.288737][ T5495] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 765.584593][T14820] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 765.859386][T14820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.901610][T14820] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.954291][T14820] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 765.972449][T14820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.989266][T14820] usb 10-1: config 0 descriptor?? [ 766.171985][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 766.231653][ T5495] team0 (unregistering): Port device team_slave_0 removed [ 766.290294][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.348010][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.434598][T14820] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 766.889922][ T5495] bond0 (unregistering): Released all slaves [ 767.070162][T15165] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 767.129531][T15003] lo speed is unknown, defaulting to 1000 [ 767.258974][T14820] isku 0003:1E7D:319C.0004: couldn't init struct isku_device [ 767.275476][T14820] isku 0003:1E7D:319C.0004: couldn't install keyboard [ 767.289082][T14820] isku: probe of 0003:1E7D:319C.0004 failed with error -71 [ 767.310094][T14820] usb 10-1: USB disconnect, device number 2 [ 767.910891][T15247] CacheFiles: Failed to register: -95 [ 769.187272][T15241] fido_id[15241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 779.619554][T15109] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 779.817274][T15109] usb 3-1: unable to get BOS descriptor or descriptor too short [ 779.953380][T15109] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 779.989612][T15109] usb 3-1: can't read configurations, error -71 [ 780.788527][ T27] audit: type=1326 audit(2000000162.825:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15406 comm="syz.8.2902" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17cc79e0d9 code=0x0 [ 780.926806][T15411] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 783.372515][T15441] hpfs: Bad magic ... probably not HPFS [ 783.892378][T15447] loop2: detected capacity change from 0 to 16 [ 784.916878][T15447] erofs: (device loop2): mounted with root inode @ nid 36. [ 786.440152][T15466] device syzkaller0 entered promiscuous mode [ 786.800935][T15472] loop2: detected capacity change from 0 to 256 [ 786.808563][T15472] FAT-fs (loop2): bogus sectors per cluster 0 [ 787.612320][T15472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 788.647554][T15487] loop8: detected capacity change from 0 to 512 [ 788.796659][T15487] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 788.887201][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2925'. [ 790.441464][ T27] audit: type=1326 audit(2000000172.483:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.532099][T14416] EXT4-fs (loop8): unmounting filesystem. [ 790.537916][ T27] audit: type=1326 audit(2000000172.483:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.608352][ T27] audit: type=1326 audit(2000000172.483:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.649661][ T27] audit: type=1326 audit(2000000172.483:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.751027][ T27] audit: type=1326 audit(2000000172.483:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.870840][ T27] audit: type=1326 audit(2000000172.483:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 790.952826][ T27] audit: type=1326 audit(2000000172.483:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 791.218635][T15532] hpfs: Bad magic ... probably not HPFS [ 792.088528][ T27] audit: type=1326 audit(2000000172.483:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 792.233144][ T27] audit: type=1326 audit(2000000172.483:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 792.733343][ T27] audit: type=1326 audit(2000000172.483:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.1.2928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519d59e0d9 code=0x7ffc0000 [ 794.714756][T15563] device syzkaller0 entered promiscuous mode [ 794.743570][T15561] tipc: Failed to remove unknown binding: 66,0,0/2723025197:2618600083/2618600085 [ 794.753298][T15556] tipc: Failed to remove unknown binding: 66,0,0/2723025197:23857870/23857871 [ 794.786597][T15556] tipc: Failed to remove unknown binding: 66,0,0/2723025197:23857870/23857871 [ 794.824639][T15563] tipc: Started in network mode [ 794.832889][T15563] tipc: Node identity 4e4b6519f469, cluster identity 4711 [ 794.858440][T15563] tipc: Enabled bearer , priority 0 [ 795.182444][T15562] tipc: Resetting bearer [ 795.653326][T15562] tipc: Disabling bearer [ 800.367041][T15628] input: syz0 as /devices/virtual/input/input9 [ 802.781388][T15655] loop2: detected capacity change from 0 to 512 [ 803.341482][T15666] hpfs: Bad magic ... probably not HPFS [ 804.052694][T15655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 804.136000][T15677] hpfs: Bad magic ... probably not HPFS [ 804.698542][T15655] EXT4-fs error (device loop2): ext4_init_orphan_info:621: comm syz.2.2964: orphan file block 0: bad magic [ 804.920976][T15655] EXT4-fs (loop2): mount failed [ 805.000609][T15687] CIFS: Attempting to mount \\::1\share [ 805.033745][T15688] device syzkaller0 entered promiscuous mode [ 805.098583][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 806.899139][T15687] CIFS: VFS: Error connecting to socket. Aborting operation. [ 806.923925][T15687] CIFS: VFS: cifs_mount failed w/return code = -4 [ 809.013132][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.023499][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.612167][T15761] loop8: detected capacity change from 0 to 128 [ 812.671867][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 812.671882][ T27] audit: type=1800 audit(2000000194.702:530): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2985" name="bus" dev="loop8" ino=1048652 res=0 errno=0 [ 812.817525][ T27] audit: type=1804 audit(2000000194.742:531): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2985" name="/newroot/62/file1/bus" dev="loop8" ino=1048652 res=1 errno=0 [ 812.840921][ T27] audit: type=1804 audit(2000000194.752:532): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2985" name="/newroot/62/file1/bus" dev="loop8" ino=1048652 res=1 errno=0 [ 813.202111][T15776] hpfs: Bad magic ... probably not HPFS [ 814.121317][T15779] syz.8.2985: attempt to access beyond end of device [ 814.121317][T15779] loop8: rw=0, sector=97, nr_sectors = 128 limit=128 [ 814.594491][ T5494] kworker/u4:30: attempt to access beyond end of device [ 814.594491][ T5494] loop8: rw=1, sector=233, nr_sectors = 464 limit=128 [ 814.851626][ T5494] kworker/u4:30: attempt to access beyond end of device [ 814.851626][ T5494] loop8: rw=1, sector=705, nr_sectors = 336 limit=128 [ 815.114208][ T5494] kworker/u4:30: attempt to access beyond end of device [ 815.114208][ T5494] loop8: rw=1, sector=697, nr_sectors = 8 limit=128 [ 816.455445][T15800] loop2: detected capacity change from 0 to 64 [ 816.502475][T15802] device syzkaller0 entered promiscuous mode [ 816.561466][T15802] tipc: Started in network mode [ 816.589815][T15802] tipc: Node identity 7aed3b550e92, cluster identity 4711 [ 816.621799][T15802] tipc: Enabled bearer , priority 0 [ 816.734972][T15801] tipc: Resetting bearer [ 816.944026][T15801] tipc: Disabling bearer [ 818.036634][T15812] device syzkaller0 entered promiscuous mode [ 818.318049][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 819.005509][T15818] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 819.102618][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2989'. [ 819.147092][T15825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 820.493517][T15835] device syzkaller0 entered promiscuous mode [ 822.970291][T15861] program syz.8.3008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.463507][T15863] device syzkaller0 entered promiscuous mode [ 826.664879][T15913] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3014'. [ 830.709995][T15945] device syzkaller0 entered promiscuous mode [ 831.053370][T15953] tipc: Enabled bearer , priority 0 [ 831.067350][T15944] tipc: Resetting bearer [ 831.192506][T15944] tipc: Disabling bearer [ 831.401822][T15960] xt_CT: No such helper "netbios-ns" [ 831.932761][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 835.793063][ T27] audit: type=1800 audit(2000000217.832:533): pid=15978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3033" name="bus" dev="ramfs" ino=79813 res=0 errno=0 [ 839.063113][ T27] audit: type=1326 audit(2000000221.092:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.221372][ T27] audit: type=1326 audit(2000000221.102:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.253012][ T27] audit: type=1326 audit(2000000221.102:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.263425][T16021] loop2: detected capacity change from 0 to 512 [ 839.363129][T16021] EXT4-fs: Ignoring removed bh option [ 839.368642][T16021] EXT4-fs: inline encryption not supported [ 839.375432][ T27] audit: type=1326 audit(2000000221.102:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.419824][T16021] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 839.468967][ T27] audit: type=1326 audit(2000000221.102:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.579030][T16021] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 839.600200][ T27] audit: type=1326 audit(2000000221.102:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.622347][T16021] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3037: bg 0: block 248: padding at end of block bitmap is not set [ 839.679631][ T27] audit: type=1326 audit(2000000221.102:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.2.3037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969ad9e0d9 code=0x7ffc0000 [ 839.770731][T16021] Quota error (device loop2): write_blk: dquota write failed [ 839.802908][T16021] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 839.846266][T16021] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.3037: Failed to acquire dquot type 1 [ 839.893965][T16021] EXT4-fs (loop2): 1 truncate cleaned up [ 839.926093][T16021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 841.303802][T14762] EXT4-fs (loop2): unmounting filesystem. [ 841.348920][T16056] syz.8.3034 (16056): drop_caches: 2 [ 842.193130][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 842.193166][ T27] audit: type=1400 audit(2000000224.222:616): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=16076 comm="syz.2.3045" [ 843.159587][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3050'. [ 845.980961][ T27] audit: type=1800 audit(2000000228.012:617): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3052" name="memory_backed" dev="configfs" ino=80109 res=0 errno=0 [ 846.298769][ T27] audit: type=1800 audit(2000000228.092:618): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3052" name="zone_nr_conv" dev="configfs" ino=80110 res=0 errno=0 [ 846.953383][ T27] audit: type=1800 audit(2000000228.122:619): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3052" name="power" dev="configfs" ino=80112 res=0 errno=0 [ 850.802044][T16166] loop9: detected capacity change from 0 to 256 [ 851.986573][T16166] FAT-fs (loop9): Directory bread(block 64) failed [ 851.993213][T16166] FAT-fs (loop9): Directory bread(block 65) failed [ 851.999812][T16166] FAT-fs (loop9): Directory bread(block 66) failed [ 852.006423][T16166] FAT-fs (loop9): Directory bread(block 67) failed [ 852.013116][T16166] FAT-fs (loop9): Directory bread(block 68) failed [ 852.019658][T16166] FAT-fs (loop9): Directory bread(block 69) failed [ 852.023097][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 852.026313][T16166] FAT-fs (loop9): Directory bread(block 70) failed [ 852.038987][T16166] FAT-fs (loop9): Directory bread(block 71) failed [ 852.045849][T16166] FAT-fs (loop9): Directory bread(block 72) failed [ 852.052392][T16166] FAT-fs (loop9): Directory bread(block 73) failed [ 855.931888][T16213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3055'. [ 857.488554][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 859.430009][T16234] loop2: detected capacity change from 0 to 512 [ 859.636491][T16234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 859.651103][T16234] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.549982][T16249] tipc: Enabling of bearer rejected, failed to enable media [ 860.817582][T16256] CacheFiles: Failed to register: -95 [ 863.448021][T14762] EXT4-fs (loop2): unmounting filesystem. [ 864.509776][T16287] o2cb: This node has not been configured. [ 864.516343][T16287] o2cb: Cluster check failed. Fix errors before retrying. [ 864.523842][T16287] (syz.4.3085,16287,0):user_dlm_register:674 ERROR: status = -22 [ 864.531625][T16287] (syz.4.3085,16287,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 866.419369][T16299] device syzkaller0 entered promiscuous mode [ 870.418644][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.425123][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.372214][T16358] device syzkaller0 entered promiscuous mode [ 877.187990][T16413] device syzkaller0 entered promiscuous mode [ 877.236029][T16412] tipc: Started in network mode [ 877.249118][T16412] tipc: Node identity 46e2f5856e4, cluster identity 4711 [ 877.308792][T16412] tipc: Enabled bearer , priority 0 [ 877.353100][T16426] device syzkaller0 entered promiscuous mode [ 878.060364][T16426] tipc: Resetting bearer [ 878.075104][T16407] tipc: Resetting bearer [ 878.180936][T16407] tipc: Disabling bearer [ 879.492714][T16455] futex_wake_op: syz.8.3119 tries to shift op by 144; fix this program [ 879.778715][T16458] loop9: detected capacity change from 0 to 8 [ 880.031044][T16463] SQUASHFS error: zlib decompression failed, data probably corrupt [ 880.039803][T16463] SQUASHFS error: Failed to read block 0x4e8: -5 [ 881.231015][ T27] audit: type=1800 audit(4147483911.269:620): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3125" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 882.751626][T16490] tipc: Enabling of bearer rejected, failed to enable media [ 883.026688][T16494] kvm [16493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffda00000100 [ 883.095902][T16494] kvm [16493]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 884.802244][T16514] futex_wake_op: syz.1.3135 tries to shift op by 144; fix this program [ 885.044228][T16517] overlayfs: failed to clone lowerpath [ 888.668193][T16564] tipc: Enabled bearer , priority 0 [ 888.675864][T16564] device syzkaller0 entered promiscuous mode [ 889.088844][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3136'. [ 889.312221][T16568] tipc: Resetting bearer [ 889.369707][T16563] tipc: Resetting bearer [ 889.545632][T16563] tipc: Disabling bearer [ 890.777745][T14820] tipc: Node number set to 1954495317 [ 907.961187][T16764] loop9: detected capacity change from 0 to 512 [ 908.611624][T16764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 908.830520][T16764] System zones: 1-12 [ 908.838167][T16764] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.3175: missing EA_INODE flag [ 908.853702][T16764] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3175: error while reading EA inode 12 err=-117 [ 908.887407][T16764] EXT4-fs (loop9): 1 orphan inode deleted [ 908.894585][T16764] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 912.464825][T14776] EXT4-fs (loop9): unmounting filesystem. [ 912.654339][T16803] loop9: detected capacity change from 0 to 512 [ 912.812392][T16803] EXT4-fs (loop9): 1 orphan inode deleted [ 912.826965][ T4563] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 912.845742][ T4563] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 1 [ 912.863085][T16803] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 913.041634][T16803] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.501045][T16776] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.508532][T16776] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.063316][T14776] EXT4-fs (loop9): unmounting filesystem. [ 915.277221][T16824] 9pnet_fd: Insufficient options for proto=fd [ 915.480586][T16776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.991843][T16776] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.001367][T16776] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.010374][T16776] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.019507][T16776] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.078090][T16840] nftables ruleset with unbound set [ 916.664013][T16789] tipc: Enabling of bearer rejected, failed to enable media [ 922.173117][ T49] Bluetooth: hci3: command 0x201b tx timeout [ 922.679119][T16893] No such timeout policy "syz1" [ 922.698623][T16893] loop8: detected capacity change from 0 to 256 [ 922.738822][T16893] vfat filesystem being mounted at /101/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 927.079904][T16937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 927.239200][T16937] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 931.024635][T16980] tipc: Enabling of bearer rejected, failed to enable media [ 931.856191][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.862525][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.446536][T17000] tipc: Enabled bearer , priority 0 [ 933.474106][T17000] device syzkaller0 entered promiscuous mode [ 933.556194][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3233'. [ 933.589178][T17000] tipc: Resetting bearer [ 933.609973][T16998] tipc: Resetting bearer [ 933.683661][T16998] tipc: Disabling bearer [ 934.880128][T17013] syz.8.3234 (17013): drop_caches: 2 [ 935.786327][T17020] device syzkaller0 entered promiscuous mode [ 936.812158][T17035] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 936.909622][T17035] 8021q: adding VLAN 0 to HW filter on device bond7 [ 937.041218][T17042] device macvlan2 entered promiscuous mode [ 937.817252][T17047] bond7: (slave ip6gretap2): making interface the new active one [ 937.833902][T17047] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 937.870889][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 938.894971][T17081] SET target dimension over the limit! [ 944.408074][T17141] tipc: Enabled bearer , priority 0 [ 944.431704][T17141] device syzkaller0 entered promiscuous mode [ 944.531701][T17141] tipc: Resetting bearer [ 944.569404][T17139] tipc: Resetting bearer [ 944.614452][T17139] tipc: Disabling bearer [ 944.912238][T17154] loop2: detected capacity change from 0 to 2048 [ 944.937191][T17154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.060382][T17162] netlink: 'syz.1.3262': attribute type 6 has an invalid length. [ 945.077100][T17164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.096387][T17152] netlink: 'syz.1.3262': attribute type 6 has an invalid length. [ 945.412174][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 945.427516][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 945.445252][ T4286] Bluetooth: hci4: hardware error 0x00 [ 947.803150][ T4286] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 949.120794][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 951.513155][T17240] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 952.900147][T17264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 953.551166][T17264] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 955.303874][T17292] netlink: 'syz.4.3289': attribute type 1 has an invalid length. [ 957.363219][T17298] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 957.417100][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3289'. [ 957.441101][ T4299] net_ratelimit: 2 callbacks suppressed [ 957.441115][ T4299] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 957.463078][T17292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 957.499680][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 957.730844][ T4299] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 959.539743][T17337] loop2: detected capacity change from 0 to 512 [ 959.551678][T17337] EXT4-fs: Ignoring removed bh option [ 959.610593][T17337] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.3302: corrupted in-inode xattr [ 959.652519][T17337] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3302: couldn't read orphan inode 15 (err -117) [ 959.723513][T17337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 960.413538][ T27] audit: type=1800 audit(4147483990.429:621): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3301" name="bus" dev="ramfs" ino=82753 res=0 errno=0 [ 960.607564][T14762] EXT4-fs (loop2): unmounting filesystem. [ 962.752679][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3310'. [ 963.691749][T17363] Set syz1 is full, maxelem 6117 reached [ 963.929679][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 963.943141][T17405] device erspan1 entered promiscuous mode [ 968.178969][T17452] Bluetooth: MGMT ver 1.22 [ 970.438356][T17446] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.445909][T17446] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.742004][T17497] overlayfs: failed to resolve './file0': -2 [ 971.865559][T17504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.164284][T17446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.237127][T17446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.503437][T17446] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.516660][T17446] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.526387][T17446] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.538851][T17446] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.561092][T17498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.627923][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'. [ 972.939446][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 972.976332][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 972.984882][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 972.994252][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 973.002142][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 973.011981][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 973.019787][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 973.132959][T15002] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 973.363374][T15002] usb 10-1: Using ep0 maxpacket: 16 [ 973.370472][T15002] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.411441][T15002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.486561][T15002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 974.628760][T15002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 974.647095][T15002] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.677666][T15002] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.482613][T15002] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.511436][T15002] usb 10-1: Manufacturer: syz [ 975.586141][T15002] usb 10-1: config 0 descriptor?? [ 975.672926][T15109] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 975.906997][T15109] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 976.002521][T15109] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 976.261737][T15109] usb 3-1: config 220 has no interface number 2 [ 976.268486][T15109] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 976.297742][T15109] usb 3-1: config 220 interface 0 has no altsetting 0 [ 976.385731][T15109] usb 3-1: config 220 interface 76 has no altsetting 0 [ 976.392642][T15109] usb 3-1: config 220 interface 1 has no altsetting 0 [ 976.506123][T15109] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 976.529930][T17574] netlink: 'syz.9.3348': attribute type 1 has an invalid length. [ 976.549324][T15109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.599171][T17574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 976.605953][T15109] usb 3-1: Product: syz [ 976.610138][T15109] usb 3-1: Manufacturer: syz [ 976.618452][T15109] usb 3-1: SerialNumber: syz [ 977.234079][T17586] SET target dimension over the limit! [ 977.246959][T17579] device macvlan2 entered promiscuous mode [ 977.265086][T17579] device bond1 entered promiscuous mode [ 977.281167][T17579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 977.294355][T17579] team0: Port device macvlan2 added [ 977.362384][T15109] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 977.371863][T15002] rc_core: IR keymap rc-hauppauge not found [ 977.386348][T15002] Registered IR keymap rc-empty [ 977.391764][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 977.392344][T17574] bond1: (slave ip6gretap1): making interface the new active one [ 977.403364][T15109] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 977.452707][T15109] usb 3-1: No valid video chain found. [ 977.462993][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 977.470591][T15109] usb 3-1: selecting invalid altsetting 0 [ 977.481392][T17574] device ip6gretap1 entered promiscuous mode [ 977.529306][T15002] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 977.570348][T17574] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 977.586491][T15109] usb 3-1: selecting invalid altsetting 0 [ 977.592257][T15109] usbtest: probe of 3-1:220.1 failed with error -22 [ 977.619788][T15002] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input10 [ 977.683083][T15109] usb 3-1: USB disconnect, device number 17 [ 978.383743][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 978.427045][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 978.468560][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 978.522892][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 978.573098][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 978.617988][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.475347][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.584245][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.652845][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.665030][T17620] loop8: detected capacity change from 0 to 256 [ 979.673261][T17627] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 979.732875][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.747768][T17627] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 979.773288][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 979.798844][T17620] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 979.803036][T15002] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 980.015274][T17620] exfat filesystem being mounted at /133/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 980.044653][T15002] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 980.112141][T15002] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 980.295416][ T27] audit: type=1800 audit(4147484010.339:622): pid=17620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3358" name="file1" dev="loop8" ino=1048654 res=0 errno=0 [ 980.316109][T15002] usb 10-1: USB disconnect, device number 3 [ 986.585446][T17665] netlink: 'syz.9.3370': attribute type 10 has an invalid length. [ 986.697671][T17665] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 986.745936][T17665] team0: Failed to send options change via netlink (err -105) [ 986.770732][T17665] team0: Port device netdevsim0 added [ 993.298069][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.306872][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.738185][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.745658][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.238131][ T4286] Bluetooth: hci1: hcon ffff888020bdc000 sent 1 < count 1025 [ 995.281663][T17707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.326646][T17707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.763040][T17707] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.771931][T17707] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.781387][T17707] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.792928][T17707] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.786135][T17707] device bond1 left promiscuous mode [ 997.791485][T17707] device ip6gretap1 left promiscuous mode [ 997.831056][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3379'. [ 998.063729][T17727] device hsr_slave_1 left promiscuous mode [ 1001.188108][T17812] loop2: detected capacity change from 0 to 512 [ 1001.248219][T17812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1001.291320][T17812] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1001.489997][T17812] EXT4-fs (loop2): 1 truncate cleaned up [ 1001.506311][T17812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1002.353545][T17812] overlayfs: upper fs needs to support d_type. [ 1002.470683][T17812] overlayfs: conflicting lowerdir path [ 1004.780839][T14762] EXT4-fs (loop2): unmounting filesystem. [ 1004.962265][T17870] loop9: detected capacity change from 0 to 256 [ 1005.784730][T17870] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 1005.803722][T17870] exfat filesystem being mounted at /102/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1008.621451][T17898] netlink: 'syz.4.3417': attribute type 14 has an invalid length. [ 1008.902327][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1008.977202][T17905] IPVS: Error connecting to the multicast addr [ 1008.997879][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1009.008600][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1009.023493][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1009.035443][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1009.045919][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1010.789801][T17918] netlink: 'syz.4.3422': attribute type 4 has an invalid length. [ 1010.812347][T17918] netlink: 'syz.4.3422': attribute type 4 has an invalid length. [ 1011.294104][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 1012.220783][T17903] chnl_net:caif_netlink_parms(): no params data found [ 1012.229193][T17942] netlink: 'syz.1.3428': attribute type 14 has an invalid length. [ 1013.543755][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 1013.615890][T17903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.623216][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.631417][T17903] device bridge_slave_0 entered promiscuous mode [ 1013.640342][T17903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.663596][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.671733][T17903] device bridge_slave_1 entered promiscuous mode [ 1013.790567][T17903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.892985][T17903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.236461][T17903] team0: Port device team_slave_0 added [ 1014.526603][T17903] team0: Port device team_slave_1 added [ 1015.448919][T17903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.479859][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.633594][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 1015.671246][T17903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.694604][T17903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.712820][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.766845][T17903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.890136][T17903] device hsr_slave_0 entered promiscuous mode [ 1015.917778][T17903] device hsr_slave_1 entered promiscuous mode [ 1016.137463][T17987] virtio-fs: tag not found [ 1016.924996][T17991] netlink: 'syz.2.3440': attribute type 14 has an invalid length. [ 1017.692895][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 1021.047098][T18019] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.056358][T18019] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.065069][T18019] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.073758][T18019] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.478313][T18019] team0: Port device vxlan0 added [ 1023.131833][T18039] netlink: 'syz.2.3451': attribute type 14 has an invalid length. [ 1024.131898][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1024.205093][ T27] audit: type=1804 audit(4147484054.248:623): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3464" name="bus" dev="ramfs" ino=84932 res=1 errno=0 [ 1024.268046][ T27] audit: type=1804 audit(4147484054.268:624): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3464" name="bus" dev="ramfs" ino=84932 res=1 errno=0 [ 1025.885571][T17903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1025.948156][T17903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.180054][T17903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.226199][T18088] loop9: detected capacity change from 0 to 128 [ 1026.469777][T17903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1026.609475][T18088] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1026.810286][T18088] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.161522][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.558379][T14776] EXT4-fs (loop9): unmounting filesystem. [ 1027.621558][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1027.640658][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1027.649906][T18101] device syzkaller0 entered promiscuous mode [ 1027.661286][T17903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.674104][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3462'. [ 1027.684654][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3462'. [ 1027.708475][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.741742][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.765405][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.772540][ T5492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.045184][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.089757][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1029.133919][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1029.176107][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.183281][ T5492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.293498][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1029.320238][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1029.500130][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1029.942960][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1030.044393][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1030.078852][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1030.099442][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1030.369460][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.246922][T17903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.313685][T17903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.291861][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.325121][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1032.353907][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.667898][T17903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.685828][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1033.701720][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1033.729843][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1033.746180][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1033.780676][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1033.792587][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1033.810343][T17903] device veth0_vlan entered promiscuous mode [ 1033.820062][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1033.839654][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1033.986757][T17903] device veth1_vlan entered promiscuous mode [ 1034.013077][ T4318] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1034.816409][T14532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1034.846897][T18161] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3475'. [ 1034.932943][ T4318] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1035.095247][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.110594][T14532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1035.123207][T14532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1035.131337][ T4318] usb 3-1: Product: syz [ 1035.135651][ T4318] usb 3-1: Manufacturer: syz [ 1035.140304][ T4318] usb 3-1: SerialNumber: syz [ 1035.157382][T17903] device veth0_macvtap entered promiscuous mode [ 1035.175498][T18175] CIFS: Attempting to mount \\127.0.0.1\share [ 1035.222298][ T4318] usb 3-1: config 0 descriptor?? [ 1035.238657][ T4318] hub 3-1:0.0: bad descriptor, ignoring hub [ 1035.257957][ T4318] hub: probe of 3-1:0.0 failed with error -5 [ 1035.674457][T17903] device veth1_macvtap entered promiscuous mode [ 1035.715102][ T4318] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1035.852725][T18175] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1035.860228][T18175] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1035.955787][T18155] device bond0 entered promiscuous mode [ 1035.962531][T18155] device bond_slave_0 entered promiscuous mode [ 1035.976485][T18155] device bond_slave_1 entered promiscuous mode [ 1035.999317][ T4318] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1036.118206][ T4318] dib0700: firmware download failed at 7 with -22 [ 1036.151549][T18155] device batadv0 entered promiscuous mode [ 1036.751825][T18155] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1036.791926][T18155] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1036.886469][T18155] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1036.974364][T14532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.054559][T14532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1037.193230][ T4318] usb 3-1: USB disconnect, device number 18 [ 1037.216039][T17903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.231443][T17903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.254701][T17903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.272342][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.346801][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.914468][T17903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.925317][T17903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.938261][T17903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.949199][T17903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.992896][T17903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.001630][T17903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.022911][T17903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.054676][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1038.065224][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1038.193163][ T4739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.201020][ T4739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.233970][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1038.295952][ T4739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.319699][ T4739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.352155][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1038.549255][T18206] loop2: detected capacity change from 0 to 128 [ 1040.036008][T18209] device syzkaller0 entered promiscuous mode [ 1040.063754][T18206] FAT-fs (loop2): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 1044.358790][T18247] tipc: Enabling of bearer rejected, failed to enable media [ 1044.572624][T18254] loop2: detected capacity change from 0 to 128 [ 1044.717442][T18254] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1044.741316][T18254] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.855550][T18236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.589013][T14762] EXT4-fs (loop2): unmounting filesystem. [ 1047.852055][T18310] overlayfs: missing 'lowerdir' [ 1048.008706][T18316] futex_wake_op: syz.4.3501 tries to shift op by 144; fix this program [ 1048.708124][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1048.846533][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1048.856735][ T49] CPU: 1 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1048.864136][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.874204][ T49] Workqueue: hci1 hci_rx_work [ 1048.878920][ T49] Call Trace: [ 1048.882204][ T49] [ 1048.885143][ T49] dump_stack_lvl+0x188/0x24e [ 1048.889848][ T49] ? show_regs_print_info+0x12/0x12 [ 1048.895076][ T49] ? load_image+0x410/0x410 [ 1048.899613][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 1048.904744][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 1048.909787][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 1048.914480][ T49] ? mark_lock+0x94/0x320 [ 1048.918833][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 1048.924051][ T49] kobject_add_internal+0x617/0xca0 [ 1048.929271][ T49] kobject_add+0x160/0x230 [ 1048.933702][ T49] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1048.939359][ T49] ? kobject_init+0x1c0/0x1c0 [ 1048.944059][ T49] ? klist_init+0x8c/0xc0 [ 1048.948399][ T49] ? get_device_parent+0x121/0x3e0 [ 1048.953536][ T49] device_add+0x470/0x1050 [ 1048.957985][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 1048.962959][ T49] le_conn_complete_evt+0xfac/0x15c0 [ 1048.968282][ T49] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1048.974542][ T49] ? lockdep_hardirqs_on+0x94/0x140 [ 1048.979763][ T49] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1048.985422][ T49] ? hci_le_meta_evt+0xac/0x560 [ 1048.990288][ T49] ? skb_pull_data+0xec/0x1f0 [ 1048.994981][ T49] hci_le_conn_complete_evt+0x183/0x440 [ 1049.000556][ T49] ? hci_remote_host_features_evt+0x230/0x230 [ 1049.006634][ T49] hci_event_packet+0x7b3/0x1290 [ 1049.011594][ T49] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1049.017247][ T49] ? hci_conn_valid+0x220/0x220 [ 1049.022116][ T49] ? kcov_remote_start+0x1b1/0x7e0 [ 1049.027244][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 1049.032465][ T49] hci_rx_work+0x3eb/0xd40 [ 1049.036900][ T49] ? _raw_spin_unlock+0x40/0x40 [ 1049.041774][ T49] ? process_one_work+0x7b4/0x1160 [ 1049.046900][ T49] process_one_work+0x8ab/0x1160 [ 1049.051869][ T49] ? worker_detach_from_pool+0x240/0x240 [ 1049.057522][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1049.062572][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1049.068138][ T49] ? wq_worker_running+0x97/0x190 [ 1049.073189][ T49] worker_thread+0xaf5/0x12a0 [ 1049.077910][ T49] kthread+0x29d/0x330 [ 1049.081987][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 1049.087039][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1049.091642][ T49] ret_from_fork+0x1f/0x30 [ 1049.096093][ T49] [ 1049.154256][ T49] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1049.167704][ T49] Bluetooth: hci1: failed to register connection device [ 1049.887017][T18344] "syz.4.3505" (18344) uses obsolete ecb(arc4) skcipher [ 1050.685365][T18347] fuse: Unknown parameter 'fsuuid' [ 1050.952685][T18354] loop0: detected capacity change from 0 to 128 [ 1051.838490][T18354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1051.959594][T18354] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.835686][T17903] EXT4-fs (loop0): unmounting filesystem. [ 1054.736803][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.743420][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.241099][T18424] cgroup: fork rejected by pids controller in /syz0 [ 1061.633226][ T27] audit: type=1326 audit(4147484091.678:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.4.3528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf899e0d9 code=0x7ffc0000 [ 1062.169091][ T27] audit: type=1326 audit(4147484091.678:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.4.3528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf899e0d9 code=0x7ffc0000 [ 1062.360752][ T27] audit: type=1326 audit(4147484091.798:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.4.3528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddf899e0d9 code=0x7ffc0000 [ 1062.605606][T18503] syz.4.3531 sent an empty control message without MSG_MORE. [ 1062.725918][ T27] audit: type=1326 audit(4147484091.798:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.4.3528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf899e0d9 code=0x7ffc0000 [ 1063.485544][ T27] audit: type=1326 audit(4147484091.798:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.4.3528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf899e0d9 code=0x7ffc0000 [ 1064.216217][T18511] loop9: detected capacity change from 0 to 4096 [ 1065.521456][T18523] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1065.537440][T18511] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1066.766213][ T27] audit: type=1800 audit(4147484096.798:630): pid=18535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3532" name="file0" dev="loop9" ino=0 res=0 errno=0 [ 1067.530916][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3541'. [ 1068.445552][T18550] loop0: detected capacity change from 0 to 1024 [ 1068.539414][T18550] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1069.645975][T18550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1069.719962][ T27] audit: type=1800 audit(4147484099.758:631): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3545" name="bus" dev="ramfs" ino=87716 res=0 errno=0 [ 1070.336332][T18583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1070.591352][T18575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.797279][T17903] EXT4-fs (loop0): unmounting filesystem. [ 1072.324305][T18604] netlink: 'syz.0.3555': attribute type 1 has an invalid length. [ 1072.595309][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1073.609285][T18625] UBIFS error (pid: 18625): cannot open "(null)", error -22 [ 1075.439694][T18637] xt_l2tp: wrong L2TP version: 0 [ 1077.181698][T18653] tipc: Enabling of bearer rejected, failed to enable media [ 1079.053555][T14528] rpcbind: server 127.0.0.1 not responding, timed out [ 1079.065618][T18673] cgroup: fork rejected by pids controller in /syz9 [ 1079.868327][T18747] loop0: detected capacity change from 0 to 128 [ 1079.879480][T18747] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1079.905926][T18747] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1079.939541][T18747] vfat filesystem being mounted at /17/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1079.999610][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'. [ 1081.971214][ T4749] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1083.087849][T18777] loop9: detected capacity change from 0 to 1024 [ 1084.043335][T18777] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1084.052909][T18777] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.303139][T18784] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1084.779872][T14776] EXT4-fs (loop9): unmounting filesystem. [ 1091.010835][ T27] audit: type=1804 audit(4147484121.048:632): pid=18837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3593" name="bus" dev="ramfs" ino=88379 res=1 errno=0 [ 1091.127855][T18844] loop2: detected capacity change from 0 to 2048 [ 1091.135707][ T27] audit: type=1804 audit(4147484121.068:633): pid=18837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3593" name="bus" dev="ramfs" ino=88379 res=1 errno=0 [ 1091.184632][T18844] UDF-fs: bad mount option "絴抉蛱嵸股蓧曝t棠涠弍旷7;Z潃茘護N\򖖤u喎o?痄崃sC{禰vlxddt紿椒|頌襮c戔$"?踅V8Zublxり萒5絇緔﹞"妶FOm=Q脒>躖3b眑~汆鱂g[s+S搷K咑B{f鶵甏鹅O#8""be鄡囯"j戔[嘨訒堣霝囅W冿軒be;K" or missing value [ 1093.905285][T18885] netlink: 'syz.9.3603': attribute type 13 has an invalid length. [ 1094.755911][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1095.731427][T18917] loop9: detected capacity change from 0 to 256 [ 1095.760004][T18918] autofs4:pid:18918:autofs_fill_super: called with bogus options [ 1095.799136][T18917] exfat: Unknown parameter 'zero_size_dir' [ 1097.742186][T18936] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1097.754433][T18936] netlink: 'syz.0.3611': attribute type 10 has an invalid length. [ 1098.957064][T18936] team0 (unregistering): Port device team_slave_0 removed [ 1099.002862][T18936] team0 (unregistering): Port device team_slave_1 removed [ 1101.666257][T18998] UBIFS error (pid: 18998): cannot open "(null)", error -22 [ 1103.674627][T19014] tipc: Enabling of bearer rejected, failed to enable media [ 1105.513189][T19034] jffs2: notice: (19034) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 1105.776398][T19039] loop9: detected capacity change from 0 to 32768 [ 1105.815748][T19034] jffs2 filesystem being mounted at /823/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1106.468176][T19039] XFS (loop9): Mounting V5 Filesystem [ 1107.088405][T19039] XFS (loop9): Ending clean mount [ 1107.101595][T19039] XFS (loop9): Quotacheck needed: Please wait. [ 1107.164320][T19062] loop2: detected capacity change from 0 to 4096 [ 1107.245277][T19062] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1107.316675][T19039] XFS (loop9): Quotacheck: Done. [ 1108.232604][T14776] XFS (loop9): Unmounting Filesystem [ 1109.245991][ T27] audit: type=1800 audit(4147484139.288:634): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3637" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 1113.075131][T14762] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1114.320639][T19117] loop0: detected capacity change from 0 to 256 [ 1114.353961][T19117] vfat filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 1115.088134][T19112] autofs4:pid:19112:autofs_fill_super: called with bogus options [ 1115.205947][T19113] loop2: detected capacity change from 0 to 2048 [ 1115.731706][T19120] netlink: 'syz.9.3639': attribute type 14 has an invalid length. [ 1116.205169][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.217558][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.711803][ T3638] Alternate GPT is invalid, using primary GPT. [ 1116.770071][ T3638] loop2: p2 p3 p7 [ 1120.710596][T14340] udevd[14340]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1120.726931][T13920] udevd[13920]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1120.830076][T15248] udevd[15248]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1121.864717][T19171] device syzkaller0 entered promiscuous mode [ 1121.880488][T19171] tipc: Enabled bearer , priority 0 [ 1121.894560][T19171] tipc: Resetting bearer [ 1121.943517][T19173] netlink: 'syz.1.3660': attribute type 4 has an invalid length. [ 1122.290146][T19166] tipc: Resetting bearer [ 1123.243399][T19166] tipc: Disabling bearer [ 1123.298285][T19175] netlink: 'syz.1.3660': attribute type 4 has an invalid length. [ 1123.356747][T19177] netlink: 'syz.1.3660': attribute type 4 has an invalid length. [ 1123.468741][T15109] tipc: Node number set to 3122816281 [ 1128.837860][T19252] tipc: Enabling of bearer rejected, failed to enable media [ 1130.301285][T19281] loop2: detected capacity change from 0 to 512 [ 1130.427375][T19281] EXT4-fs: Invalid want_extra_isize 3 [ 1131.907647][T19298] tipc: Enabled bearer , priority 0 [ 1131.948274][T19298] tipc: Resetting bearer [ 1132.037397][T19296] tipc: Disabling bearer [ 1133.612882][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 1135.487838][T19335] loop2: detected capacity change from 0 to 512 [ 1136.017586][T19343] sctp: [Deprecated]: syz.9.3694 (pid 19343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1136.017586][T19343] Use struct sctp_sack_info instead [ 1138.482683][ T27] audit: type=1800 audit(4147484168.518:635): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3702" name="serialnumber" dev="configfs" ino=89684 res=0 errno=0 [ 1138.802734][ T27] audit: type=1800 audit(4147484168.558:636): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3702" name="manufacturer" dev="configfs" ino=89693 res=0 errno=0 [ 1138.918332][ T27] audit: type=1800 audit(4147484168.638:637): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3702" name="configuration" dev="configfs" ino=89079 res=0 errno=0 [ 1139.144367][T19384] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1143.989526][ T9566] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1144.629309][T19450] [ 1144.631697][T19450] ====================================================== [ 1144.638719][T19450] WARNING: possible circular locking dependency detected [ 1144.645756][T19450] syzkaller #0 Not tainted [ 1144.650176][T19450] ------------------------------------------------------ [ 1144.657196][T19450] syz.2.3717/19450 is trying to acquire lock: [ 1144.663269][T19450] ffff888017865080 (&sb->s_type->i_mutex_key#31){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 1144.674794][T19450] [ 1144.674794][T19450] but task is already holding lock: [ 1144.682159][T19450] ffff88802e493120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1144.691235][T19450] [ 1144.691235][T19450] which lock already depends on the new lock. [ 1144.691235][T19450] [ 1144.701646][T19450] [ 1144.701646][T19450] the existing dependency chain (in reverse order) is: [ 1144.710665][T19450] [ 1144.710665][T19450] -> #3 (&opts->dep_lock){+.+.}-{3:3}: [ 1144.718338][T19450] __mutex_lock+0x12d/0xae0 [ 1144.723382][T19450] tcm_set_name+0x26/0x90 [ 1144.728252][T19450] function_make+0x195/0x350 [ 1144.733381][T19450] configfs_mkdir+0x511/0x9e0 [ 1144.738604][T19450] vfs_mkdir+0x386/0x570 [ 1144.743381][T19450] do_mkdirat+0x1d8/0x440 [ 1144.748244][T19450] __x64_sys_mkdir+0x6a/0x80 [ 1144.753368][T19450] do_syscall_64+0x4c/0xa0 [ 1144.758327][T19450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.764764][T19450] [ 1144.764764][T19450] -> #2 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1144.773042][T19450] __mutex_lock+0x12d/0xae0 [ 1144.778080][T19450] uvcg_frame_w_width_store+0x110/0x370 [ 1144.784178][T19450] configfs_write_iter+0x30b/0x400 [ 1144.789838][T19450] vfs_write+0x482/0x9a0 [ 1144.794625][T19450] ksys_write+0x14d/0x260 [ 1144.799501][T19450] do_syscall_64+0x4c/0xa0 [ 1144.804475][T19450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.810910][T19450] [ 1144.810910][T19450] -> #1 (&p->frag_sem){++++}-{3:3}: [ 1144.818316][T19450] down_write_killable+0x45/0x90 [ 1144.823789][T19450] configfs_rmdir+0x3e0/0x980 [ 1144.829015][T19450] vfs_rmdir+0x34e/0x4a0 [ 1144.833796][T19450] do_rmdir+0x29a/0x5c0 [ 1144.838493][T19450] __x64_sys_unlinkat+0xc0/0xe0 [ 1144.843882][T19450] do_syscall_64+0x4c/0xa0 [ 1144.848846][T19450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.855279][T19450] [ 1144.855279][T19450] -> #0 (&sb->s_type->i_mutex_key#31){++++}-{3:3}: [ 1144.863995][T19450] __lock_acquire+0x2d18/0x7c40 [ 1144.869391][T19450] lock_acquire+0x1bb/0x4a0 [ 1144.874439][T19450] down_write+0x36/0x60 [ 1144.879133][T19450] configfs_depend_item_unlocked+0x14f/0x430 [ 1144.885660][T19450] usbg_make_tpg+0x1f3/0x580 [ 1144.890789][T19450] target_fabric_make_tpg+0xa0/0x6d0 [ 1144.896620][T19450] configfs_mkdir+0x511/0x9e0 [ 1144.901842][T19450] vfs_mkdir+0x386/0x570 [ 1144.906620][T19450] do_mkdirat+0x1d8/0x440 [ 1144.911485][T19450] __x64_sys_mkdir+0x6a/0x80 [ 1144.916613][T19450] do_syscall_64+0x4c/0xa0 [ 1144.921576][T19450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.928011][T19450] [ 1144.928011][T19450] other info that might help us debug this: [ 1144.928011][T19450] [ 1144.938249][T19450] Chain exists of: [ 1144.938249][T19450] &sb->s_type->i_mutex_key#31 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1144.938249][T19450] [ 1144.952962][T19450] Possible unsafe locking scenario: [ 1144.952962][T19450] [ 1144.960415][T19450] CPU0 CPU1 [ 1144.965787][T19450] ---- ---- [ 1144.971162][T19450] lock(&opts->dep_lock); [ 1144.975597][T19450] lock(gadget_subsys.su_mutex); [ 1144.983153][T19450] lock(&opts->dep_lock); [ 1144.990097][T19450] lock(&sb->s_type->i_mutex_key#31); [ 1144.995574][T19450] [ 1144.995574][T19450] *** DEADLOCK *** [ 1144.995574][T19450] [ 1145.003722][T19450] 5 locks held by syz.2.3717/19450: [ 1145.008924][T19450] #0: ffff88801a7e2460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1145.018181][T19450] #1: ffff888024fcf900 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1145.029008][T19450] #2: ffffffff8d4e9bb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 1145.038792][T19450] #3: ffffffff8d809188 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 1145.048481][T19450] #4: ffff88802e493120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1145.057997][T19450] [ 1145.057997][T19450] stack backtrace: [ 1145.063888][T19450] CPU: 0 PID: 19450 Comm: syz.2.3717 Not tainted syzkaller #0 [ 1145.071355][T19450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.081416][T19450] Call Trace: [ 1145.084699][T19450] [ 1145.087639][T19450] dump_stack_lvl+0x188/0x24e [ 1145.092342][T19450] ? load_image+0x410/0x410 [ 1145.096860][T19450] ? show_regs_print_info+0x12/0x12 [ 1145.102085][T19450] ? print_circular_bug+0x12b/0x1a0 [ 1145.107310][T19450] check_noncircular+0x296/0x330 [ 1145.112274][T19450] ? add_chain_block+0x9b0/0x9b0 [ 1145.117237][T19450] ? lockdep_lock+0xf1/0x1f0 [ 1145.121849][T19450] ? _find_first_zero_bit+0xd2/0x100 [ 1145.127157][T19450] __lock_acquire+0x2d18/0x7c40 [ 1145.132040][T19450] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1145.138217][T19450] ? verify_lock_unused+0x140/0x140 [ 1145.143436][T19450] ? lock_acquire+0x225/0x4a0 [ 1145.148134][T19450] ? __mutex_trylock_common+0x15c/0x260 [ 1145.153700][T19450] lock_acquire+0x1bb/0x4a0 [ 1145.158219][T19450] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1145.164397][T19450] ? __might_sleep+0xd0/0xd0 [ 1145.168999][T19450] ? read_lock_is_recursive+0x10/0x10 [ 1145.174391][T19450] ? __mutex_trylock_common+0x15c/0x260 [ 1145.179949][T19450] ? usbg_make_tpg+0x144/0x580 [ 1145.184735][T19450] ? mutex_lock_nested+0x10/0x10 [ 1145.189692][T19450] down_write+0x36/0x60 [ 1145.193859][T19450] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1145.200034][T19450] configfs_depend_item_unlocked+0x14f/0x430 [ 1145.206039][T19450] usbg_make_tpg+0x1f3/0x580 [ 1145.210649][T19450] ? configfs_mkdir+0x4b5/0x9e0 [ 1145.215521][T19450] ? usbg_drop_tport+0x20/0x20 [ 1145.220305][T19450] ? vscnprintf+0x80/0x80 [ 1145.224648][T19450] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1145.230300][T19450] target_fabric_make_tpg+0xa0/0x6d0 [ 1145.235600][T19450] ? target_fabric_release_wwn+0xa0/0xa0 [ 1145.241248][T19450] configfs_mkdir+0x511/0x9e0 [ 1145.245951][T19450] vfs_mkdir+0x386/0x570 [ 1145.250210][T19450] do_mkdirat+0x1d8/0x440 [ 1145.254556][T19450] ? vfs_mkdir+0x570/0x570 [ 1145.258984][T19450] ? getname_flags+0x206/0x500 [ 1145.263757][T19450] __x64_sys_mkdir+0x6a/0x80 [ 1145.268366][T19450] do_syscall_64+0x4c/0xa0 [ 1145.272800][T19450] ? clear_bhb_loop+0x60/0xb0 [ 1145.277502][T19450] ? clear_bhb_loop+0x60/0xb0 [ 1145.282200][T19450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.288115][T19450] RIP: 0033:0x7f969ad9e0d9 [ 1145.292544][T19450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.312164][T19450] RSP: 002b:00007f969bcac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1145.320591][T19450] RAX: ffffffffffffffda RBX: 00007f969b025fa0 RCX: 00007f969ad9e0d9 [ 1145.328580][T19450] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 1145.336561][T19450] RBP: 00007f969ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 1145.344541][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.352520][T19450] R13: 00007f969b026038 R14: 00007f969b025fa0 R15: 00007fffc96c74c8 [ 1145.360509][T19450]