last executing test programs: 4m46.408361454s ago: executing program 0 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 4m45.122427573s ago: executing program 0 (id=1181): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000300)='`', 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/110, 0x6e}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) 4m43.922506113s ago: executing program 0 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x400, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 4m39.181174457s ago: executing program 0 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2800005, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x15) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 4m36.834979503s ago: executing program 0 (id=1196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) 4m35.210433121s ago: executing program 0 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000240)=""/109, 0x6d}], 0x1, 0x60, 0xfdfffffefffffffe}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x9f, 0x5e7, 0x73, 0x7fff}}], 0xa0, 0x4800}, 0x0) 4m33.365647051s ago: executing program 32 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000240)=""/109, 0x6d}], 0x1, 0x60, 0xfdfffffefffffffe}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x9f, 0x5e7, 0x73, 0x7fff}}], 0xa0, 0x4800}, 0x0) 3m14.42920457s ago: executing program 3 (id=1264): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) connect(r2, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close(0xffffffffffffffff) 3m12.206482567s ago: executing program 1 (id=1266): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getegid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000}, 0x38) 3m10.17837052s ago: executing program 1 (id=1268): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 3m6.200617436s ago: executing program 3 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 3m5.84223447s ago: executing program 1 (id=1272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x208, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 3m5.1113022s ago: executing program 1 (id=1273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x82316000) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0b", 0x84a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m2.407483499s ago: executing program 3 (id=1275): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) 2m56.051211089s ago: executing program 1 (id=1279): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) 2m55.194370599s ago: executing program 3 (id=1280): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 2m49.593126353s ago: executing program 1 (id=1283): openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0xe}) epoll_pwait2(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71cf, 0x2000, 0x6, 0x15e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) 2m41.051275932s ago: executing program 3 (id=1290): timerfd_create(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r4) 2m31.852286214s ago: executing program 33 (id=1283): openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0xe}) epoll_pwait2(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71cf, 0x2000, 0x6, 0x15e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) 2m31.776243721s ago: executing program 3 (id=1293): open(0x0, 0x108943, 0x148) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 2m12.943720316s ago: executing program 34 (id=1293): open(0x0, 0x108943, 0x148) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 29.387760208s ago: executing program 2 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='port0\x00', 0x0, 0xffffffffffffffff) 27.237984358s ago: executing program 2 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000002280)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 24.877027338s ago: executing program 2 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) syz_emit_vhci(0x0, 0x16) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000300)={0x9, 0x3, 0x35a, 0x10, 0x200, 0x0, 0x3}) 18.790719255s ago: executing program 4 (id=1431): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2}, 0x8) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) 17.735933481s ago: executing program 2 (id=1432): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 15.423117719s ago: executing program 4 (id=1435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$eJzs3c1vHGcdB/DvrNeuXarGaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGxelLgorRC4gOCExKF/QEHyjQNC4h4ULlzCrVcfOFRC4hJxiHpZNLOz61171y/xWyo+n2g8z8zzMr/5zZt3ndUG+L915WyaD1Pkytm3HpTLa6tzrbXVuRfq6laSstxImp1ZittJ8SiZL+uLdCqKun0xajsfL11+59Mna591lpr1VLUf26rfEEPartRTZurxZob2HN/pJlbq8PJSkqv1fNDETscaaFgm7Uw9hyPXHtRIe2U33Xdz3QLPme7Tqeg8NzeZTl5MMln/HpD67tA4vAj31de7hV3d5QAAAOAL6vGdo44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvniq7/+f6i02OquSmRTd7/+f6K6ry8+h+R23fHigcQAAAAAAAADA4fja0zzNg7xclseTtIvqb/6nq8oT+bydfCnv534Wcy/n8iALWc5y7uVCkum+gSYeLCwv37vQ61ka3vPi0J7l2mrTAAAAAAAAAMAz+GWmOn//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA50WRjHVm1XSinmc6jWbW67KS/DPJxFHHuwvFsJUPDz8OAAAA2JPJZ+hz7Gme5kFe7i63i+o1/5er18uTeT+3s5ylLKeVxVyrX0OXr/oba6tzrbXVuVvlVC4Pjvv9/+wqjIl6hLFqadiWX69aTOV6lqo153K1CuZaGp1tn+m9GdGJqY6rz0dlTMX3ajuMrFmntdzY70e9i7AvBt+KaGzRcmo9uKSXkdk6trLn8U4GiuqNmjIjgwNsPDqbNtYcWJqumoz3tnQhjV6yT3RzvY85f7Gel/vzmwPN+VbG6nl/LnqZaKTKxMXu2VdeM1tnIvnGX//07o3W7Zs3rt8/u75L4we9H3szNmL9xnNiri8Trz1bJp4TzV22n60ycbK3fCU/yk9yNjN5O/eylJ9mIctZTLuuX6jP5/Ln9NaZmh9Yenu7SCbq49I5ZjuJaSY/rEoLOV31fTlLKXIn17KYN6t/F3Mh386lXMrlviN8cmTc1b5VV31j41XfPdJ/Gxr8mW/WhfLu9tv1u9z8Vns86uzcL517f5nX43157Zz1T3qtjvddB7N9WXqlm53h1/jme+P294LmV+pCuY1fbfOcOFzTdSbKC6j7lOhG92onE83e03mw6x/a1a63brfbNxbujhh/ZcPyG/W8PK1Wv9pde3dE666hKS627rNb5fnySibrO8ng2VHWvdq7y/TVtdfP5U7d4BO37HeyqiuK7pX649ypToDNV+pE/Tvc5pEuVnWvbag7Vd/Dy7rX++oGft/KnbRybZ9yBMB++8e7veJ0XpyY+vfU46lPpn49dWPqrckfvPCdF05NZPzv499tzo690ThV/CWf5Ofrr/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnd/+DD28utIokVaG1eO9+t3CsbrK+ZnRhalP3jG78r8fJxqqi/jaeYb1u1t9SsH0Yz09hMsnAmup7jg47jLGBozy0TfsXSVWY2MXh3mth6239riw0d3S45wfW/HnzgB9tH89YNpyH22TsgAuNHMjI7WMbTshuoTxHhvU6zLsQcBTOL9+6e/7+Bx9+a+nWwnuL7y3eHr906fLs5Utvzp2/vtRanO38POoogYOw/tA/6kgAAAAAAAAAAACAnRr2UYHTL434qMDoQiMbPtJTrvA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9cOVsmg9T5MLsudlyeW11rlVO3fJ6y2aSRiMpfpYUj5L5dKZM9w1X5I+P0h6ynY+XLr/z6ZO1z9bHanbaJ416PtrWtUlW6ikzScbq+R4MjHd1z+MV/+3uQ5mwz9vt9vze4oP98b8AAAD//2dx3rE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00008c1000/0x2000)=nil) fsmount(0xffffffffffffffff, 0x0, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 14.910702129s ago: executing program 6 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8) write$binfmt_aout(r2, 0x0, 0x6a) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000300)='`', 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/110, 0x6e}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) 13.469380724s ago: executing program 2 (id=1437): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getegid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r2}, 0x38) 13.31635144s ago: executing program 5 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)='port0\x00', 0x0, r3) 12.291781589s ago: executing program 6 (id=1439): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 11.086429859s ago: executing program 6 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 11.084823999s ago: executing program 5 (id=1448): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) 9.527286732s ago: executing program 6 (id=1441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) prlimit64(0x0, 0x7, 0x0, 0x0) 9.265243703s ago: executing program 5 (id=1442): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 7.622385916s ago: executing program 6 (id=1443): syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') epoll_create1(0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') lseek(r5, 0x7fffffffffffffff, 0x1) setns(r1, 0x24020000) 7.385804041s ago: executing program 5 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='port0\x00', 0x0, r1) 6.996820011s ago: executing program 5 (id=1445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x400000000000136, 0x4000845) 4.659472546s ago: executing program 5 (id=1446): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xbfd}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 3.902394402s ago: executing program 4 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8) write$binfmt_aout(r2, 0x0, 0x6a) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000300)='`', 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/110, 0x6e}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) 3.239860496s ago: executing program 4 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="0400ec00"], 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) socket$inet(0x2, 0x2, 0x0) writev(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.120792427s ago: executing program 4 (id=1450): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0x5dc, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) shutdown(r2, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x40001, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x100, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x5, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0xf9, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0xb, 0x23, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x40000005, 0x9, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="015f2cbd7000fddbdf2503000000060001004e20ee00"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008840) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x8010) 1.409999052s ago: executing program 4 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 891.778483ms ago: executing program 2 (id=1452): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 0s ago: executing program 6 (id=1453): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) kernel console output (not intermixed with test programs): 2038-01-19 (0x7fffffff) [ 166.339696][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.795113][ T6618] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 167.456625][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.527737][ T6642] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 167.716247][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 168.082598][ T6644] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.136633][ T6644] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.145973][ T6644] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.159385][ T6644] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.213991][ T6644] bond2: (slave geneve2): making interface the new active one [ 168.225426][ T6644] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 168.234324][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 168.257120][ T6646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.310417][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 168.328602][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.339192][ T27] audit: type=1326 audit(1790317096.364:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.0.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe76e39e159 code=0x0 [ 168.393675][ T6644] syz.1.212 (6644) used greatest stack depth: 20024 bytes left [ 168.601091][ T6660] loop1: detected capacity change from 0 to 256 [ 168.833875][ T9] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 72:d0:b7:65:86:86 [ 169.606272][ T3561] usb 4-1: USB disconnect, device number 4 [ 169.639832][ T3561] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 170.557702][ T6702] loop0: detected capacity change from 0 to 256 [ 170.621892][ T6702] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.658123][ T6702] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 170.703872][ T6702] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.745923][ T6702] exFAT-fs (loop0): failed to load alloc-bitmap [ 170.768688][ T6702] exFAT-fs (loop0): failed to recognize exfat type [ 174.647775][ T6762] netlink: 'syz.0.236': attribute type 4 has an invalid length. [ 175.066241][ T6767] md: pers->run() failed ... [ 176.431233][ T6800] Bluetooth: MGMT ver 1.22 [ 177.268234][ T6804] loop0: detected capacity change from 0 to 1024 [ 177.282876][ T6804] hfsplus: unable to parse mount options [ 178.199356][ T6799] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 178.221819][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 178.282199][ T6799] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 178.302922][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 179.419644][ T27] audit: type=1326 audit(1790317107.444:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82b519e159 code=0x0 [ 180.636884][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 181.588215][ T6832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.619425][ T6848] tipc: Failed to remove unknown binding: 66,0,0/0:1838847691/1838847693 [ 181.644318][ T6848] tipc: Failed to remove unknown binding: 66,0,0/0:1838847691/1838847692 [ 181.656416][ T6848] tipc: Failed to remove unknown binding: 66,0,0/0:1838847691/1838847693 [ 181.665848][ T6848] tipc: Failed to remove unknown binding: 66,0,0/0:1838847691/1838847692 [ 181.811849][ T6846] loop3: detected capacity change from 0 to 512 [ 182.249101][ T6846] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.540752][ T6846] EXT4-fs error (device loop3): ext4_quota_enable:7144: inode #4: comm syz.3.257: casefold flag without casefold feature [ 182.639440][ T6846] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.257: Bad quota inode: 4, type: 1 [ 182.656169][ T6846] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.676267][ T6846] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 182.703737][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.868303][ T6861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.698565][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.623393][ T5773] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 185.912104][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.996474][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 186.247222][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 186.260644][ T9] usb 1-1: config index 0 descriptor too short (expected 4147, got 51) [ 186.270227][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.287626][ T9] usb 1-1: config 0 has no interfaces? [ 186.298968][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 186.308194][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.022724][ T9] usb 1-1: Product: syz [ 187.026969][ T9] usb 1-1: Manufacturer: syz [ 187.031825][ T9] usb 1-1: SerialNumber: syz [ 187.064929][ T9] usb 1-1: config 0 descriptor?? [ 187.158197][ T6899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.298534][ T6901] loop3: detected capacity change from 0 to 512 [ 187.425058][ T6901] EXT4-fs: Ignoring removed i_version option [ 187.431301][ T6901] EXT4-fs: Ignoring removed oldalloc option [ 187.620764][ T6901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.432951][ T6907] syz.1.274 uses obsolete (PF_INET,SOCK_PACKET) [ 188.560310][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.478636][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 189.734691][ T5813] usb 1-1: USB disconnect, device number 2 [ 189.784260][ T5773] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 189.798983][ T5773] Bluetooth: hci2: Injecting HCI hardware error event [ 189.812726][ T5781] Bluetooth: hci2: hardware error 0x00 [ 189.846906][ T6925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.279'. [ 191.956991][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 192.359116][ T6950] tipc: Started in network mode [ 192.368093][ T6950] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 192.519226][ T6950] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.549411][ T6950] tipc: Enabled bearer , priority 10 [ 193.455539][ T6962] netlink: 'syz.2.293': attribute type 4 has an invalid length. [ 193.543699][ T6962] netlink: 'syz.2.293': attribute type 4 has an invalid length. [ 193.685069][ T23] tipc: Node number set to 1 [ 194.437236][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.443884][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.060210][ T6986] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 196.384528][ T6989] veth5: entered allmulticast mode [ 196.461176][ T6989] bond3: (slave veth5): Enslaving as an active interface with a down link [ 196.546388][ T6990] bond3: (slave veth0_to_bond): making interface the new active one [ 196.609986][ T6990] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.139818][ T6999] md: could not open device unknown-block(1,0). [ 197.183337][ T6999] md: could not open device unknown-block(1,1). [ 198.182606][ T7004] loop1: detected capacity change from 0 to 1024 [ 198.246627][ T6999] md: pers->run() failed ... [ 198.288825][ T7004] hfsplus: invalid length 32517 has been corrected to 255 [ 199.669040][ T7004] hfsplus: invalid length 32517 has been corrected to 255 [ 199.700652][ T7004] hfsplus: invalid length 32517 has been corrected to 255 [ 199.706319][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 199.740365][ T7004] hfsplus: invalid length 32517 has been corrected to 255 [ 199.813038][ T7021] hfsplus: invalid length 32517 has been corrected to 255 [ 199.967782][ T41] hfsplus: b-tree write err: -5, ino 25 [ 199.981587][ T41] hfsplus: b-tree write err: -5, ino 4 [ 199.989740][ T41] hfsplus: b-tree write err: -5, ino 2 [ 200.209387][ T7028] loop0: detected capacity change from 0 to 512 [ 201.624043][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 201.630484][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.819393][ T7055] mmap: syz.0.319 (7055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.170016][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 202.701129][ T7065] lo: Caught tx_queue_len zero misconfig [ 203.521571][ T27] audit: type=1400 audit(1790317131.544:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=7068 comm="syz.3.325" [ 203.640887][ T7082] hsr0: entered promiscuous mode [ 203.650489][ T7081] hsr0: left promiscuous mode [ 208.450433][ T7118] loop1: detected capacity change from 0 to 512 [ 208.480532][ T7118] EXT4-fs (loop1): Test dummy encryption mode enabled [ 208.520419][ T7118] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.339: inode has both inline data and extents flags [ 208.545083][ T7118] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.339: couldn't read orphan inode 15 (err -117) [ 208.575200][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.601594][ T7115] netlink: 6 bytes leftover after parsing attributes in process `syz.1.339'. [ 208.668675][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.769073][ T7122] bond1: option use_carrier: invalid value (5) [ 208.807286][ T7122] bond1 (unregistering): Released all slaves [ 211.751682][ T7151] tipc: Started in network mode [ 211.770628][ T7151] tipc: Node identity 8e4694a6991, cluster identity 4711 [ 211.792022][ T7151] tipc: Enabled bearer , priority 0 [ 211.853732][ T7151] syzkaller0: entered promiscuous mode [ 211.866104][ T7151] syzkaller0: entered allmulticast mode [ 211.910249][ T7151] tipc: Resetting bearer [ 211.936311][ T7148] tipc: Resetting bearer [ 211.984869][ T7148] tipc: Disabling bearer [ 212.898434][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 212.910543][ T7162] 8021q: VLANs not supported on vcan0 [ 213.723199][ T7183] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 215.558260][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 216.756566][ T27] audit: type=1800 audit(1790317144.784:7): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.366" name="memory_backed" dev="configfs" ino=10969 res=0 errno=0 [ 216.812782][ T27] audit: type=1800 audit(1790317144.804:8): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.366" name="zone_nr_conv" dev="configfs" ino=10970 res=0 errno=0 [ 216.851191][ T7221] null_blk: disk nullb1 created [ 216.856931][ T27] audit: type=1800 audit(1790317144.804:9): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.366" name="power" dev="configfs" ino=10971 res=0 errno=0 [ 216.901687][ T27] audit: type=1326 audit(1790317144.864:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64b7b9e159 code=0x0 [ 217.117312][ T7232] loop1: detected capacity change from 0 to 512 [ 217.188558][ T7232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.211671][ T7232] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.368: corrupted in-inode xattr: invalid ea_ino [ 217.327829][ T7232] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.368: couldn't read orphan inode 15 (err -117) [ 217.842546][ T7232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.011526][ T7232] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.368: corrupted in-inode xattr: invalid ea_ino [ 219.690058][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.815810][ T7253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.490148][ T7257] loop3: detected capacity change from 0 to 512 [ 220.553097][ T7257] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.372: bad orphan inode 15 [ 220.565880][ T7257] ext4_test_bit(bit=14, block=5) = 0 [ 220.573438][ T7257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.846079][ T7235] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 223.119278][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.731845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.286512][ T7288] lo: Caught tx_queue_len zero misconfig [ 229.869076][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 229.941061][ T7315] loop3: detected capacity change from 0 to 256 [ 229.966109][ T7315] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.048997][ T27] audit: type=1800 audit(1790317158.074:11): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 230.330531][ T7314] vlan2: entered allmulticast mode [ 230.359967][ T7314] bridge1: entered allmulticast mode [ 230.366565][ T7317] bridge1: port 1(erspan0) entered blocking state [ 230.394885][ T7317] bridge1: port 1(erspan0) entered disabled state [ 230.401521][ T7317] erspan0: entered allmulticast mode [ 230.443438][ T7317] erspan0: entered promiscuous mode [ 230.450865][ T7317] bridge1: port 1(erspan0) entered blocking state [ 230.457978][ T7317] bridge1: port 1(erspan0) entered forwarding state [ 230.595352][ T7313] erspan0: left allmulticast mode [ 230.619678][ T7313] erspan0: left promiscuous mode [ 230.634240][ T7313] bridge1: port 1(erspan0) entered disabled state [ 230.696612][ T7313] bridge_slave_0: left allmulticast mode [ 230.718753][ T7313] bridge_slave_0: left promiscuous mode [ 230.737171][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.797647][ T7313] bridge_slave_1: left allmulticast mode [ 230.817124][ T7313] bridge_slave_1: left promiscuous mode [ 230.835554][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.876501][ T7313] bond3: (slave veth0_to_bond): Releasing active interface [ 230.915003][ T7313] bond0: (slave bond_slave_0): Releasing backup interface [ 230.941113][ T7313] bond0: (slave bond_slave_1): Releasing backup interface [ 231.046400][ T7313] team0: Port device team_slave_0 removed [ 231.090264][ T7313] team0: Port device team_slave_1 removed [ 231.107468][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.126687][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.154077][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.172051][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.221012][ T7313] bond1: (slave veth3): Releasing backup interface [ 231.259001][ T7313] bond2: (slave geneve2): Releasing active interface [ 231.270685][ T7313] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 231.310382][ T7313] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 231.329663][ T7313] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 231.351766][ T7313] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 231.386946][ T7313] bond3: (slave veth5): Releasing active interface [ 236.834690][ T7370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.878790][ T7370] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.588655][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0023 [ 242.872212][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 242.880951][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 242.891259][ T5781] Bluetooth: hci3: hardware error 0x00 [ 243.766369][ T7409] hub 8-0:1.0: USB hub found [ 243.774810][ T7409] hub 8-0:1.0: 1 port detected [ 244.790164][ T7413] loop0: detected capacity change from 0 to 256 [ 244.801139][ T7413] FAT-fs (loop0): Unrecognized mount option "ufi_xlate=0" or missing value [ 244.982125][ T5781] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 245.514830][ T7422] siw: device registration error -23 [ 245.565493][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0023 [ 248.126247][ T7444] loop1: detected capacity change from 0 to 128 [ 249.751949][ T5781] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 249.761443][ T5781] Bluetooth: hci0: Injecting HCI hardware error event [ 249.772285][ T5781] Bluetooth: hci0: hardware error 0x00 [ 252.893948][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 253.945176][ T7473] tipc: Enabling of bearer rejected, failed to enable media [ 256.109621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116708][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.005782][ T7509] loop1: detected capacity change from 0 to 2048 [ 258.025347][ T7509] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 259.870470][ T7518] syzkaller0: entered promiscuous mode [ 259.888273][ T7518] syzkaller0: entered allmulticast mode [ 259.916009][ T7518] TC_ACT_REPEAT abuse ? [ 260.804446][ T7526] program syz.0.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.901803][ T7526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.952828][ T7539] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7539] [ 265.357688][ T7552] loop1: detected capacity change from 0 to 512 [ 265.443216][ T7552] ext4: Unknown parameter 'smackfshat' [ 266.969752][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 270.927268][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.462'. [ 271.810795][ T7608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.301517][ T7630] tipc: Enabled bearer , priority 0 [ 274.348828][ T7630] syzkaller0: entered promiscuous mode [ 274.412008][ T7630] syzkaller0: entered allmulticast mode [ 274.484219][ T7630] tipc: Resetting bearer [ 275.141526][ T7629] tipc: Resetting bearer [ 275.335652][ T7629] tipc: Disabling bearer [ 276.515928][ T7649] syzkaller0: entered promiscuous mode [ 276.737475][ T7649] syzkaller0: entered allmulticast mode [ 279.297253][ T7670] loop3: detected capacity change from 0 to 512 [ 279.326194][ T7678] bridge0: port 1(netdevsim0) entered blocking state [ 279.480561][ T7678] bridge0: port 1(netdevsim0) entered disabled state [ 279.496802][ T7678] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 279.514661][ T7678] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 279.703077][ T7670] EXT4-fs (loop3): bad s_min_extra_isize: 544 [ 280.289644][ T7678] bridge0: port 1(netdevsim0) entered blocking state [ 280.296755][ T7678] bridge0: port 1(netdevsim0) entered forwarding state [ 280.316498][ T7684] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 280.327861][ T7684] bridge0: port 1(netdevsim0) entered disabled state [ 280.391413][ T7684] bridge0: port 1(netdevsim0) entered blocking state [ 280.401484][ T7684] bridge0: port 1(netdevsim0) entered forwarding state [ 280.431593][ T7689] loop0: detected capacity change from 0 to 512 [ 280.447535][ T7689] EXT4-fs (loop0): Test dummy encryption mode enabled [ 280.469846][ T7684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.514989][ T7689] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.484: inode has both inline data and extents flags [ 280.565463][ T7689] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.484: couldn't read orphan inode 15 (err -117) [ 280.585259][ T7689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.610295][ T7689] netlink: 6 bytes leftover after parsing attributes in process `syz.0.484'. [ 280.721008][ T7693] unsupported nlmsg_type 40 [ 280.749311][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.030536][ T7716] atomic_op ffff88807a90f198 conn xmit_atomic 0000000000000000 [ 283.960600][ T7727] »»»»»»: renamed from vlan0 (while UP) [ 286.201547][ T7741] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 286.359516][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 289.687725][ T7762] loop1: detected capacity change from 0 to 1024 [ 289.933452][ T7762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.667545][ T7775] loop0: detected capacity change from 0 to 2048 [ 290.792630][ T7775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.891351][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.352188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 293.851848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 298.765193][ T7814] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 299.007322][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 299.010929][ T7821] capability: warning: `syz.0.519' uses deprecated v2 capabilities in a way that may be insecure [ 299.060188][ T7823] bond1: entered promiscuous mode [ 299.066443][ T7823] bond1: entered allmulticast mode [ 299.750283][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 301.051193][ T7843] loop3: detected capacity change from 0 to 128 [ 301.368360][ T7846] netlink: 2 bytes leftover after parsing attributes in process `syz.0.529'. [ 302.202714][ T7858] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 302.738055][ T7871] vivid-000: disconnect [ 303.134262][ T7872] bridge3: entered promiscuous mode [ 303.154231][ T7872] bond2: (slave bridge3): making interface the new active one [ 303.156736][ T7864] vivid-000: reconnect [ 303.162832][ T7872] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 303.378392][ T7858] bridge4: entered promiscuous mode [ 303.427907][ T7858] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 303.520872][ T7880] syzkaller0: entered promiscuous mode [ 303.526891][ T7880] syzkaller0: entered allmulticast mode [ 303.728578][ T7880] tipc: Enabled bearer , priority 0 [ 303.998700][ T7879] tipc: Resetting bearer [ 304.208815][ T7879] tipc: Disabling bearer [ 304.285832][ T7888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.325290][ T7890] bond4: (slave geneve2): making interface the new active one [ 304.380626][ T7890] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 304.433381][ T7895] loop0: detected capacity change from 0 to 128 [ 304.446584][ T7895] EXT4-fs: Ignoring removed bh option [ 304.574928][ T7895] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 304.589916][ T7898] overlayfs: failed to clone lowerpath [ 304.698340][ T7895] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.762031][ T3561] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 305.232892][ T3561] usb 4-1: Using ep0 maxpacket: 8 [ 305.260016][ T3561] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 305.283020][ T3561] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 305.291508][ T3561] usb 4-1: Product: syz [ 305.299180][ T3561] usb 4-1: Manufacturer: syz [ 305.307972][ T3561] usb 4-1: SerialNumber: syz [ 306.179400][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.203452][ T3561] usb 4-1: config 0 descriptor?? [ 306.228447][ T3561] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 306.376150][ T7912] gadgetfs: bound to dummy_udc driver [ 306.655307][ T788] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 306.682110][ C0] gadgetfs: connected [ 306.688493][ T788] gadgetfs: disconnected [ 306.872472][ C0] gadgetfs: connected [ 306.882925][ T7911] gadgetfs: suspended from state 3 [ 306.893809][ T788] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 306.901456][ T788] usb 1-1: can't read configurations, error -71 [ 306.908486][ T7911] gadgetfs: disconnected [ 306.946904][ T3561] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 309.246376][ T2197] usb 4-1: USB disconnect, device number 5 [ 313.360229][ T27] audit: type=1326 audit(1790317241.284:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.3.557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82b519e159 code=0x0 [ 317.369991][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.376580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.143040][ T8027] loop3: detected capacity change from 0 to 40427 [ 318.174409][ T8027] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 318.181272][ T8027] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 318.194766][ T8027] F2FS-fs (loop3): invalid crc value [ 318.221855][ T2197] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 318.513170][ T2197] usb 1-1: Using ep0 maxpacket: 16 [ 318.606770][ T2197] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 318.635518][ T8027] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 318.642812][ T8027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 318.816466][ T2197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.888852][ T8037] syz.3.568: attempt to access beyond end of device [ 318.888852][ T8037] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 319.020968][ T2197] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.354175][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.374199][ T5771] syz-executor: attempt to access beyond end of device [ 319.374199][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.390259][ T2197] usb 1-1: Product: syz [ 319.396245][ T2197] usb 1-1: Manufacturer: syz [ 319.400888][ T2197] usb 1-1: SerialNumber: syz [ 319.682682][ T2197] usb 1-1: 0:2 : does not exist [ 319.914765][ T2197] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 320.124512][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 320.543312][ T2197] usb 1-1: USB disconnect, device number 5 [ 322.008661][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.481014][ T8043] netlink: 84 bytes leftover after parsing attributes in process `syz.0.572'. [ 323.895877][ T8059] loop0: detected capacity change from 0 to 8 [ 324.897366][ T8063] loop1: detected capacity change from 0 to 1024 [ 324.931151][ T8063] EXT4-fs: Ignoring removed bh option [ 324.958386][ T8067] binder: 8066:8067 ioctl c0306201 200000000080 returned -14 [ 325.197637][ T8063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 325.401210][ T8063] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.544319][ T8067] binder: 8066:8067 ioctl c0306201 2000000003c0 returned -14 [ 325.650491][ T8063] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.580: lblock 3 mapped to illegal pblock 3 (length 3) [ 325.691663][ T8063] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 325.707128][ T8063] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.707128][ T8063] [ 325.719542][ T8064] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.580: lblock 3 mapped to illegal pblock 3 (length 1) [ 325.752093][ T8064] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.580: lblock 3 mapped to illegal pblock 3 (length 1) [ 325.772305][ T8063] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 325.823242][ T8063] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 326.052429][ T8079] syzkaller0: entered promiscuous mode [ 326.055051][ T6423] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 326.141432][ T8079] syzkaller0: entered allmulticast mode [ 326.196288][ T6423] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 326.343227][ T6423] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.343227][ T6423] [ 326.515459][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.222731][ T27] audit: type=1800 audit(1790317255.244:13): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.585" name="bus" dev="ramfs" ino=15407 res=0 errno=0 [ 327.917062][ T8096] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 328.465682][ T8098] loop1: detected capacity change from 0 to 128 [ 328.490762][ T8098] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 329.605044][ T8110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.156194][ T8138] lo: entered allmulticast mode [ 333.186392][ T8137] lo: left allmulticast mode [ 333.712549][ T8142] syzkaller0: entered promiscuous mode [ 333.718078][ T8142] syzkaller0: entered allmulticast mode [ 334.139280][ T8154] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 337.371744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 338.659666][ T8188] smc: net device team0 applied user defined pnetid SYZ2 [ 339.436476][ T8188] smc: removing net device team0 with user defined pnetid SYZ2 [ 340.573358][ T8188] team0 (unregistering): Port device team_slave_0 removed [ 340.612220][ T8188] team0 (unregistering): Port device team_slave_1 removed [ 340.869511][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 341.048969][ T8205] jffs2: notice: (8205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.237244][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 343.863589][ T8232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.555139][ T8290] syzkaller0: entered promiscuous mode [ 352.560701][ T8290] syzkaller0: entered allmulticast mode [ 352.672892][ T8293] syzkaller0: entered promiscuous mode [ 352.678420][ T8293] syzkaller0: entered allmulticast mode [ 352.829777][ T8297] Cannot find del_set index 4 as target [ 352.857773][ T8293] tc action pedit 'at' offset 5 out of bounds [ 356.325566][ T8311] loop1: detected capacity change from 0 to 8192 [ 356.463096][ T8311] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.941690][ T8335] loop1: detected capacity change from 0 to 4096 [ 359.072484][ T8338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.868545][ T8358] loop0: detected capacity change from 0 to 512 [ 360.883751][ T8358] ext4: Bad value for 'data' [ 360.965931][ T8356] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 361.909972][ T8371] loop0: detected capacity change from 0 to 256 [ 363.171386][ T8371] FAT-fs (loop0): Directory bread(block 64) failed [ 363.201771][ T8371] FAT-fs (loop0): Directory bread(block 65) failed [ 363.211370][ T8371] FAT-fs (loop0): Directory bread(block 66) failed [ 363.229611][ T8371] FAT-fs (loop0): Directory bread(block 67) failed [ 363.247721][ T8371] FAT-fs (loop0): Directory bread(block 68) failed [ 363.270296][ T8371] FAT-fs (loop0): Directory bread(block 69) failed [ 363.278206][ T8371] FAT-fs (loop0): Directory bread(block 70) failed [ 363.294028][ T8371] FAT-fs (loop0): Directory bread(block 71) failed [ 363.308594][ T8371] FAT-fs (loop0): Directory bread(block 72) failed [ 363.315632][ T8371] FAT-fs (loop0): Directory bread(block 73) failed [ 367.000656][ T8401] gadgetfs: bound to dummy_udc driver [ 368.489787][ T8410] syzkaller0: entered promiscuous mode [ 368.496538][ T8410] syzkaller0: entered allmulticast mode [ 368.580787][ T3561] IPVS: starting estimator thread 0... [ 368.675015][ T8413] IPVS: using max 20 ests per chain, 48000 per kthread [ 369.096387][ T8423] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 369.966806][ T8426] loop0: detected capacity change from 0 to 1024 [ 370.492344][ T8430] overlayfs: failed to clone upperpath [ 371.266234][ T3561] IPVS: starting estimator thread 0... [ 371.576207][ T8440] IPVS: using max 35 ests per chain, 84000 per kthread [ 372.273247][ T3561] IPVS: starting estimator thread 0... [ 372.391874][ T8445] IPVS: using max 22 ests per chain, 52800 per kthread [ 373.678874][ T8457] loop0: detected capacity change from 0 to 1024 [ 373.799310][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 373.819600][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 373.867461][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 373.882405][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 373.897076][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 373.917044][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.718812][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 374.740350][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.748551][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.786071][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.801164][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.853047][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.860382][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.892967][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.932315][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.969919][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.980574][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 374.996031][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.004697][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.018640][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.027494][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.047442][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.066924][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.091661][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.130035][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.139955][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.160958][ T8460] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.195740][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 375.211862][ T8457] hfsplus: request for non-existent node 33423360 in B*Tree [ 378.341957][ T8485] tmpfs: Bad value for 'nr_inodes' [ 378.776349][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.782872][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.700143][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 380.724041][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 385.158980][ T8550] loop0: detected capacity change from 0 to 128 [ 385.174680][ T8550] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 385.244908][ T8550] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.260663][ T8550] ext2 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 385.914130][ T8550] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.711: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 386.132191][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.311479][ T8547] null_blk: disk rnullb0 created [ 388.223428][ T8567] syzkaller0: entered promiscuous mode [ 388.301760][ T8567] syzkaller0: entered allmulticast mode [ 388.356742][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 389.460861][ T8579] sctp: [Deprecated]: syz.3.718 (pid 8579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.460861][ T8579] Use struct sctp_sack_info instead [ 389.956126][ T8583] syzkaller0: entered promiscuous mode [ 390.065813][ T8583] syzkaller0: entered allmulticast mode [ 392.276607][ T8597] syzkaller0: entered promiscuous mode [ 392.295241][ T8597] syzkaller0: entered allmulticast mode [ 392.522069][ T8602] netlink: 'syz.0.726': attribute type 4 has an invalid length. [ 393.882739][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 393.961585][ T8618] bridge0: entered promiscuous mode [ 394.773911][ T8618] macvtap1: entered promiscuous mode [ 394.780538][ T8618] bond0: entered promiscuous mode [ 394.793177][ T8618] macvtap1: entered allmulticast mode [ 394.798614][ T8618] bond0: entered allmulticast mode [ 394.817184][ T8618] bridge0: entered allmulticast mode [ 396.039505][ T8618] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 396.125558][ T8619] bond0: left allmulticast mode [ 396.130483][ T8619] bridge0: left allmulticast mode [ 396.144197][ T8619] bond0: left promiscuous mode [ 396.162456][ T8619] bridge0: left promiscuous mode [ 396.167643][ T8619] macvtap1: left promiscuous mode [ 396.173220][ T8619] macvtap1: left allmulticast mode [ 400.357690][ T8652] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 400.661571][ T8655] ubi0: attaching mtd0 [ 400.669375][ T8655] ubi0: scanning is finished [ 400.674086][ T8655] ubi0: empty MTD device detected [ 400.773577][ T8655] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 400.781136][ T8655] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 400.788582][ T8655] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 400.795615][ T8655] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 400.803145][ T8655] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 400.809942][ T8655] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 400.818433][ T8655] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2545493480 [ 400.828677][ T8655] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 400.841814][ T8656] ubi0: background thread "ubi_bgt0d" started, PID 8656 [ 401.158535][ T8660] capability: warning: `syz.2.741' uses 32-bit capabilities (legacy support in use) [ 401.475693][ T8667] netlink: 'syz.0.742': attribute type 3 has an invalid length. [ 402.366779][ T8672] tunl0: Caught tx_queue_len zero misconfig [ 402.493840][ T8673] loop3: detected capacity change from 0 to 512 [ 402.504577][ T8673] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.524912][ T8673] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 402.673043][ T8673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2974: inode #15: comm syz.3.723: corrupted xattr block 252: invalid header [ 402.690416][ T8673] EXT4-fs (loop3): Remounting filesystem read-only [ 402.697108][ T8673] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 402.709435][ T8673] EXT4-fs (loop3): 1 orphan inode deleted [ 402.728333][ T8673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.194934][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.424093][ T8688] syz.2.747(8688): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 413.683240][ T8772] netlink: 53 bytes leftover after parsing attributes in process `syz.2.764'. [ 414.628755][ T8780] syzkaller0: entered promiscuous mode [ 414.634567][ T8780] syzkaller0: entered allmulticast mode [ 415.853958][ T8794] loop0: detected capacity change from 0 to 512 [ 415.876759][ T8790] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 415.891515][ T8794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.916828][ T8794] ext4: Unknown parameter 'fsname' [ 416.764787][ T8790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.969736][ T8803] bond_slave_0: entered promiscuous mode [ 416.976010][ T8803] bond_slave_1: entered promiscuous mode [ 417.002175][ T8803] vlan0: entered promiscuous mode [ 417.007266][ T8803] bond0: entered promiscuous mode [ 417.177668][ T8806] syzkaller0: entered promiscuous mode [ 417.183650][ T8806] syzkaller0: entered allmulticast mode [ 417.300451][ C1] hrtimer: interrupt took 1658482 ns [ 429.529399][ T8891] loop1: detected capacity change from 0 to 128 [ 433.414598][ T8906] syzkaller0: entered promiscuous mode [ 433.420127][ T8906] syzkaller0: entered allmulticast mode [ 433.457109][ T8906] 0: reclassify loop, rule prio 0, protocol 800 [ 440.038086][ T27] audit: type=1800 audit(1790317368.064:14): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="attr_allow_any_host" dev="configfs" ino=18433 res=0 errno=0 [ 440.141821][ T27] audit: type=1800 audit(1790317368.144:15): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="addr_trtype" dev="configfs" ino=18439 res=0 errno=0 [ 440.188944][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.200200][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.214477][ T8938] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 440.241806][ T27] audit: type=1800 audit(1790317368.194:16): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="addr_traddr" dev="configfs" ino=18440 res=0 errno=0 [ 440.322220][ T27] audit: type=1800 audit(1790317368.224:17): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="addr_trsvcid" dev="configfs" ino=18441 res=0 errno=0 [ 440.384620][ T27] audit: type=1800 audit(1790317368.224:18): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="addr_adrfam" dev="configfs" ino=18442 res=0 errno=0 [ 443.551639][ T8978] program syz.1.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.561331][ T8978] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.004236][ T27] audit: type=1800 audit(1790317372.024:19): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="attr_allow_any_host" dev="configfs" ino=17988 res=0 errno=0 [ 444.040144][ T8983] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 444.086182][ T8983] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 444.103868][ T27] audit: type=1800 audit(1790317372.064:20): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="addr_trtype" dev="configfs" ino=17989 res=0 errno=0 [ 444.139225][ T8983] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 444.183446][ T8983] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 444.204409][ T27] audit: type=1800 audit(1790317372.114:21): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="addr_traddr" dev="configfs" ino=17994 res=0 errno=0 [ 444.234872][ T27] audit: type=1800 audit(1790317372.164:22): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="addr_trsvcid" dev="configfs" ino=17996 res=0 errno=0 [ 444.259639][ T27] audit: type=1800 audit(1790317372.204:23): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="addr_adrfam" dev="configfs" ino=17998 res=0 errno=0 [ 444.472978][ T8989] input: syz0 as /devices/virtual/input/input6 [ 444.963956][ T8998] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 444.974522][ T8998] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 444.984734][ T8998] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 447.399505][ T9005] loop3: detected capacity change from 0 to 128 [ 453.726842][ T27] audit: type=1800 audit(1790317381.754:24): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="attr_allow_any_host" dev="configfs" ino=18102 res=0 errno=0 [ 453.806446][ T9031] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 453.822204][ T27] audit: type=1800 audit(1790317381.824:25): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="addr_trtype" dev="configfs" ino=18103 res=0 errno=0 [ 453.896891][ T27] audit: type=1800 audit(1790317381.914:26): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="addr_traddr" dev="configfs" ino=18104 res=0 errno=0 [ 453.922207][ T9032] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 454.009423][ T27] audit: type=1800 audit(1790317382.034:27): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="addr_trsvcid" dev="configfs" ino=18105 res=0 errno=0 [ 454.040502][ T9031] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 454.156973][ T27] audit: type=1800 audit(1790317382.184:28): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="addr_adrfam" dev="configfs" ino=18107 res=0 errno=0 [ 454.179387][ T9032] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 460.145266][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 460.982291][ T9069] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 464.485809][ T9082] loop0: detected capacity change from 0 to 128 [ 470.068023][ T9124] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 471.471470][ T9127] loop1: detected capacity change from 0 to 512 [ 471.510797][ T9127] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.860: iget: bad extended attribute block 134217728 [ 471.545548][ T9127] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.860: couldn't read orphan inode 15 (err -117) [ 471.595883][ T9127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.645235][ T9127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.868863][ T9171] syzkaller0: entered promiscuous mode [ 476.875596][ T9171] syzkaller0: entered allmulticast mode [ 477.103060][ T9174] FAULT_INJECTION: forcing a failure. [ 477.103060][ T9174] name failslab, interval 1, probability 0, space 0, times 1 [ 477.118066][ T9174] CPU: 1 PID: 9174 Comm: syz.0.874 Not tainted syzkaller #0 [ 477.125386][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.135489][ T9174] Call Trace: [ 477.138791][ T9174] [ 477.141732][ T9174] dump_stack_lvl+0x18c/0x250 [ 477.146452][ T9174] ? show_regs_print_info+0x20/0x20 [ 477.151688][ T9174] ? load_image+0x420/0x420 [ 477.156224][ T9174] ? __lock_acquire+0x7d80/0x7d80 [ 477.161279][ T9174] should_fail_ex+0x394/0x4c0 [ 477.166004][ T9174] should_failslab+0x9/0x20 [ 477.170550][ T9174] slab_pre_alloc_hook+0x59/0x300 [ 477.175620][ T9174] ? alloc_pipe_info+0x1f9/0x4b0 [ 477.180587][ T9174] ? alloc_pipe_info+0x1f9/0x4b0 [ 477.185555][ T9174] __kmem_cache_alloc_node+0x53/0x250 [ 477.190975][ T9174] ? alloc_pipe_info+0x1f9/0x4b0 [ 477.196079][ T9174] __kmalloc+0xa7/0x240 [ 477.200283][ T9174] alloc_pipe_info+0x1f9/0x4b0 [ 477.205096][ T9174] create_pipe_files+0x87/0x700 [ 477.209980][ T9174] ? __ia32_sys_get_robust_list+0x110/0x110 [ 477.215894][ T9174] __do_pipe_flags+0x4c/0x2c0 [ 477.220569][ T9174] do_pipe2+0xab/0x190 [ 477.224641][ T9174] ? _compound_head+0x120/0x120 [ 477.229490][ T9174] ? lock_chain_count+0x20/0x20 [ 477.234332][ T9174] ? syscall_enter_from_user_mode+0x25/0x80 [ 477.240220][ T9174] __x64_sys_pipe2+0x5a/0x70 [ 477.244812][ T9174] do_syscall_64+0x55/0xb0 [ 477.249218][ T9174] ? clear_bhb_loop+0x40/0x90 [ 477.253895][ T9174] ? clear_bhb_loop+0x40/0x90 [ 477.258564][ T9174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.264458][ T9174] RIP: 0033:0x7fe76e39e159 [ 477.268867][ T9174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.288465][ T9174] RSP: 002b:00007fe76f1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 477.296878][ T9174] RAX: ffffffffffffffda RBX: 00007fe76e625fa0 RCX: 00007fe76e39e159 [ 477.304839][ T9174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 477.312799][ T9174] RBP: 00007fe76e43506b R08: 0000000000000000 R09: 0000000000000000 [ 477.320758][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.328726][ T9174] R13: 00007fe76e626038 R14: 00007fe76e625fa0 R15: 00007fff74c566d8 [ 477.336738][ T9174] [ 477.509430][ T9179] loop1: detected capacity change from 0 to 1024 [ 477.640427][ T9179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.923339][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.227051][ T9202] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 485.177539][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 485.212242][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.552456][ T9215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.119072][ T9221] syzkaller0: entered promiscuous mode [ 487.868288][ T9221] syzkaller0: entered allmulticast mode [ 501.626668][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633138][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.666621][ T9311] syzkaller0: entered promiscuous mode [ 507.681966][ T9311] syzkaller0: entered allmulticast mode [ 512.722644][ T9326] loop0: detected capacity change from 0 to 512 [ 512.939877][ T9324] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 517.811043][ T9351] kvm: kvm [9350]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 517.847759][ T9351] kvm: kvm [9350]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 517.877428][ T9351] kvm: kvm [9350]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 518.644968][ T9357] tipc: Enabled bearer , priority 0 [ 518.682529][ T9357] syzkaller0: entered promiscuous mode [ 518.688053][ T9357] syzkaller0: entered allmulticast mode [ 518.719734][ T9357] tipc: Resetting bearer [ 518.738310][ T9356] tipc: Resetting bearer [ 518.797446][ T9356] tipc: Disabling bearer [ 518.877393][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 519.332084][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 519.492551][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 519.522485][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 519.535581][ T5814] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 519.559318][ T5814] usb 1-1: config 164 has no interface number 0 [ 519.575420][ T5814] usb 1-1: config 164 interface 195 has no altsetting 0 [ 519.589773][ T5814] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 519.602004][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.618351][ T5814] usb 1-1: Product: syz [ 519.623772][ T5814] usb 1-1: Manufacturer: syz [ 519.629581][ T5814] usb 1-1: SerialNumber: syz [ 519.681756][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 519.689140][ T788] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 519.703865][ T788] usb 2-1: config 0 has no interface number 0 [ 519.711265][ T788] usb 2-1: config 0 interface 12 has no altsetting 0 [ 519.729147][ T788] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 519.746119][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.760949][ T788] usb 2-1: Product: syz [ 519.769991][ T788] usb 2-1: Manufacturer: syz [ 519.779196][ T788] usb 2-1: SerialNumber: syz [ 519.811029][ T788] usb 2-1: config 0 descriptor?? [ 523.927307][ T788] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 523.958419][ T788] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 523.997097][ T788] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 524.041585][ T788] f81534: probe of 2-1:0.12 failed with error -32 [ 524.121803][ T788] usb 2-1: USB disconnect, device number 4 [ 524.130259][ T5814] usb 1-1: USB disconnect, device number 7 [ 525.085911][ T9387] ima: policy update failed [ 526.375004][ T27] audit: type=1802 audit(1790317453.108:29): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.934" res=0 errno=0 [ 529.646415][ T9407] loop1: detected capacity change from 0 to 512 [ 529.680995][ T9407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 529.771581][ T9407] EXT4-fs (loop1): 1 truncate cleaned up [ 529.808177][ T9407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.767089][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.030914][ T9448] fuse: Bad value for 'fd' [ 538.046257][ T9448] trusted_key: encrypted_key: insufficient parameters specified [ 545.017535][ T9480] md: array md0 already has disks! [ 545.043409][ T9480] md: could not open device unknown-block(1,1). [ 545.304120][ T9480] md: error, md_import_device() returned -16 [ 545.325835][ T9484] loop0: detected capacity change from 0 to 512 [ 545.846747][ T9484] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 546.256173][ T9492] __vm_enough_memory: pid: 9492, comm: syz.0.960, not enough memory for the allocation [ 546.506004][ T9486] md: pers->run() failed ... [ 546.787490][ T9496] Bluetooth: ISO socket layer initialized [ 548.017045][ T9504] loop1: detected capacity change from 0 to 512 [ 548.224987][ T9504] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.966: bad orphan inode 15 [ 548.257001][ T9504] ext4_test_bit(bit=14, block=5) = 0 [ 548.278206][ T9504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.222554][ T9512] loop0: detected capacity change from 0 to 512 [ 550.461441][ T9510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 550.538243][ T9512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 550.737593][ T9512] System zones: 1-12 [ 550.749885][ T9512] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.968: missing EA_INODE flag [ 550.802425][ T9512] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.968: error while reading EA inode 12 err=-117 [ 550.844552][ T9512] EXT4-fs (loop0): 1 orphan inode deleted [ 550.851628][ T9512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.594092][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.935980][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.114867][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 556.126620][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 556.136979][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 556.147353][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 556.424205][ T9525] loop1: detected capacity change from 0 to 512 [ 556.497686][ T9525] EXT4-fs: Ignoring removed mblk_io_submit option [ 556.672739][ T9525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.797120][ T9525] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.176884][ T9529] tipc: Started in network mode [ 557.184044][ T9529] tipc: Node identity 0ebb5a0e37a4, cluster identity 4711 [ 557.191604][ T9529] tipc: Enabled bearer , priority 0 [ 557.233173][ T9529] syzkaller0: entered promiscuous mode [ 557.238736][ T9529] syzkaller0: entered allmulticast mode [ 557.698052][ T9529] tipc: Resetting bearer [ 557.772704][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.796690][ T9528] tipc: Resetting bearer [ 558.010771][ T9528] tipc: Disabling bearer [ 558.610062][ T9539] »»»»»»: renamed from vlan0 (while UP) [ 560.958728][ T9542] loop3: detected capacity change from 0 to 4096 [ 561.187021][ T9542] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 561.617055][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 561.730183][ T9561] vlan0: entered promiscuous mode [ 561.758096][ T9561] bond0: entered promiscuous mode [ 561.786221][ T9561] bridge0: entered promiscuous mode [ 561.901475][ T9542] ntfs3: loop3: Failed to read $UpCase (-4). [ 563.066580][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081806][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.029690][ T9588] loop3: detected capacity change from 0 to 1024 [ 566.526476][ T9588] EXT4-fs: Ignoring removed bh option [ 566.617521][ T9588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.759704][ T9588] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 572.197968][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.365386][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 572.401861][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 572.443744][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb997 instead [ 572.483560][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xa899 instead [ 572.526324][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 572.579414][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 572.619159][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 572.663589][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 572.698619][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 572.741092][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 572.808626][ T9624] jffs2: Further such events for this erase block will not be printed [ 572.836025][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 572.901426][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 572.946094][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xb997 instead [ 572.988985][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xa899 instead [ 573.029552][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 573.069701][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 573.116723][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 573.172071][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 573.211809][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 573.246391][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 573.348156][ T9624] jffs2: Further such events for this erase block will not be printed [ 573.382830][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 573.461809][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 573.500023][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xb997 instead [ 575.677547][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa899 instead [ 575.722317][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 575.844692][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 575.855506][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb997 instead [ 575.866782][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa899 instead [ 575.878019][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 575.888896][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 575.899650][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xb997 instead [ 575.910428][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa899 instead [ 575.921255][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 575.942451][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 575.958423][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xb997 instead [ 575.992079][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa899 instead [ 576.019407][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 576.066066][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 576.097336][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xb997 instead [ 576.126502][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa899 instead [ 576.160352][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 576.213173][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 576.231131][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb997 instead [ 576.246983][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa899 instead [ 576.267601][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 576.287002][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 576.312618][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 576.326368][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xb997 instead [ 576.351805][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa899 instead [ 576.378474][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 576.385563][ T9646] vlan0: entered promiscuous mode [ 576.407898][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 576.438566][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xb997 instead [ 576.470000][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa899 instead [ 576.499132][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 576.529681][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 576.568109][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xb997 instead [ 576.594769][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa899 instead [ 576.627607][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 576.680958][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 576.732856][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb997 instead [ 576.761943][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa899 instead [ 576.795439][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 576.825101][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 576.845993][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xb997 instead [ 576.883846][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa899 instead [ 576.962694][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 577.015967][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 577.051900][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xb997 instead [ 577.275648][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa899 instead [ 577.321978][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 578.138077][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 578.183546][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xb997 instead [ 578.231926][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa899 instead [ 578.280647][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 578.320064][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 578.340841][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xb997 instead [ 578.366137][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa899 instead [ 578.402060][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 578.431015][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 578.515895][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xb997 instead [ 578.563128][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa899 instead [ 578.590926][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 578.698595][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 578.709484][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xb997 instead [ 578.724905][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa899 instead [ 578.741051][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 579.731866][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 579.761843][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xb997 instead [ 579.782350][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa899 instead [ 579.807372][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 579.838357][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 579.865393][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xb997 instead [ 579.883383][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa899 instead [ 579.903631][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 579.921042][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 579.936771][ T9669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.951443][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xb997 instead [ 580.041889][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa899 instead [ 580.097232][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 580.171901][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 580.218802][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xb997 instead [ 580.250961][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa899 instead [ 580.280025][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 580.307937][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 580.328978][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.330971][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xb997 instead [ 580.371802][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa899 instead [ 580.402996][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 580.423063][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 580.442454][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xb997 instead [ 580.490137][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa899 instead [ 580.510031][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 580.531886][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 580.551775][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xb997 instead [ 580.572885][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa899 instead [ 580.585586][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 580.600899][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 580.613067][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xb997 instead [ 580.625199][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa899 instead [ 580.637601][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 580.656859][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 580.667892][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xb997 instead [ 580.678951][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa899 instead [ 580.694225][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 580.707291][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 580.721084][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xb997 instead [ 580.736145][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa899 instead [ 580.770106][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 580.795631][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 580.806832][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xb997 instead [ 580.830924][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa899 instead [ 580.843994][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 580.859483][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 580.880258][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xb997 instead [ 580.891082][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa899 instead [ 580.892893][ T9677] tipc: Enabling of bearer rejected, failed to enable media [ 580.908973][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 580.922670][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 580.937164][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xb997 instead [ 580.952315][ T9679] syzkaller0: entered promiscuous mode [ 580.958766][ T9679] syzkaller0: entered allmulticast mode [ 580.961024][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa899 instead [ 580.977940][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 580.979084][ T9679] tipc: Enabled bearer , priority 0 [ 581.002184][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 581.017846][ T9679] tipc: Resetting bearer [ 581.031578][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xb997 instead [ 581.054592][ T9624] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa899 instead [ 581.067299][ T9624] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 581.081846][ T9624] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 581.081919][ T9678] tipc: Resetting bearer [ 581.397408][ T9678] tipc: Disabling bearer [ 582.150480][ T9690] loop1: detected capacity change from 0 to 128 [ 584.107476][ T9699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.163012][ T9705] bond1: (slave geneve2): making interface the new active one [ 584.199641][ T9705] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 584.240755][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 584.660942][ T9707] vlan1: entered promiscuous mode [ 584.666967][ T9707] bond0: entered promiscuous mode [ 584.673064][ T9707] bond_slave_0: entered promiscuous mode [ 584.679893][ T9707] bond_slave_1: entered promiscuous mode [ 586.166968][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 586.244657][ T9730] bond4: entered promiscuous mode [ 586.256148][ T9730] bond4: entered allmulticast mode [ 589.425193][ T9765] loop3: detected capacity change from 0 to 128 [ 589.432863][ T9765] EXT4-fs: Ignoring removed bh option [ 589.495226][ T9766] ipvlan2: entered allmulticast mode [ 589.501010][ T9766] macvlan1: entered allmulticast mode [ 589.506946][ T9766] veth1_vlan: entered allmulticast mode [ 589.514981][ T9766] batman_adv: batadv0: Adding interface: ipvlan2 [ 589.521896][ T9766] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.549545][ T9766] batman_adv: batadv0: Interface activated: ipvlan2 [ 589.615468][ T9765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 589.760887][ T9765] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.996152][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.103573][ T27] audit: type=1800 audit(1790317526.048:30): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1036" name="addr_trtype" dev="configfs" ino=19360 res=0 errno=0 [ 598.894250][ T27] audit: type=1800 audit(1790317526.108:31): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1036" name="addr_trsvcid" dev="configfs" ino=19361 res=0 errno=0 [ 602.196750][ T9821] loop0: detected capacity change from 0 to 256 [ 604.986806][ T9829] binder: 9827:9829 ioctl c0306201 200000000080 returned -14 [ 604.998362][ T9829] binder: 9827:9829 ioctl c0306201 2000000003c0 returned -14 [ 607.166995][ T9843] binder_alloc: 9842: binder_alloc_buf, no vma [ 610.473600][ T9873] loop0: detected capacity change from 0 to 128 [ 610.495626][ T9873] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 612.743381][ T9877] syzkaller0: entered promiscuous mode [ 612.749868][ T9877] syzkaller0: entered allmulticast mode [ 619.532725][ T6234] kworker/dying (6234) used greatest stack depth: 19400 bytes left [ 620.875273][ T9928] loop0: detected capacity change from 0 to 1024 [ 621.730866][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 623.678096][ T9951] gadgetfs: bound to dummy_udc driver [ 624.458597][ T3561] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 624.467487][ C1] gadgetfs: connected [ 624.478160][ T3561] gadgetfs: disconnected [ 624.569122][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.581438][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.680410][ C1] gadgetfs: connected [ 624.689096][ T3561] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 624.710129][ T3561] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 624.721690][ T3561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.755353][ C1] gadgetfs: configuration #1 [ 624.909382][ T9946] gadgetfs: suspended from state 3 [ 624.912176][ T3561] usb 1-1: can't set config #1, error -71 [ 624.946060][ T3561] usb 1-1: USB disconnect, device number 8 [ 625.021872][ T9946] gadgetfs: disconnected [ 630.313726][ T9990] Cannot find del_set index 4 as target [ 630.731331][ T9997] loop3: detected capacity change from 0 to 1024 [ 631.670996][ T9999] loop1: detected capacity change from 0 to 1024 [ 631.803116][ T9999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.776008][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.250231][T10017] loop3: detected capacity change from 0 to 8 [ 635.775959][T10028] syzkaller0: entered promiscuous mode [ 635.781496][T10028] syzkaller0: entered allmulticast mode [ 635.900609][T10028] TC_ACT_REPEAT abuse ? [ 640.484344][T10045] loop3: detected capacity change from 0 to 4096 [ 640.842982][T10047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.297426][T10058] loop3: detected capacity change from 0 to 512 [ 644.544784][T10058] ext4: Bad value for 'data' [ 644.598230][ T9811] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.869118][T10087] loop3: detected capacity change from 0 to 1024 [ 662.157000][T10160] loop1: detected capacity change from 0 to 512 [ 662.935500][T10160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.072347][T10160] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.205708][T10153] syz.1.1120: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 663.265466][T10173] loop3: detected capacity change from 0 to 128 [ 663.331983][T10153] CPU: 0 PID: 10153 Comm: syz.1.1120 Not tainted syzkaller #0 [ 663.339515][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.349603][T10153] Call Trace: [ 663.352912][T10153] [ 663.355857][T10153] dump_stack_lvl+0x18c/0x250 [ 663.360575][T10153] ? show_regs_print_info+0x20/0x20 [ 663.365818][T10153] ? load_image+0x420/0x420 [ 663.370355][T10153] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.376798][T10153] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 663.383340][T10153] warn_alloc+0x246/0x340 [ 663.387707][T10153] ? zone_watermark_ok_safe+0x230/0x230 [ 663.393287][T10153] ? _raw_spin_unlock+0x28/0x40 [ 663.398178][T10153] __vmalloc_node_range+0x661/0x1320 [ 663.403511][T10153] ? __alloc_pages+0xae/0x460 [ 663.408211][T10153] ? free_vm_area+0x50/0x50 [ 663.412751][T10153] ? packet_set_ring+0x77d/0x2490 [ 663.417797][T10153] vzalloc+0x79/0x90 [ 663.421717][T10153] ? packet_set_ring+0x77d/0x2490 [ 663.426765][T10153] packet_set_ring+0x77d/0x2490 [ 663.431664][T10153] ? packet_mmap+0x510/0x510 [ 663.436274][T10153] ? __lock_acquire+0x7d80/0x7d80 [ 663.441321][T10153] ? __local_bh_enable_ip+0x13a/0x1c0 [ 663.446721][T10153] ? lockdep_hardirqs_on+0x98/0x150 [ 663.451943][T10153] ? __might_fault+0xaa/0x120 [ 663.456644][T10153] ? __might_fault+0xc6/0x120 [ 663.461347][T10153] ? __might_fault+0xaa/0x120 [ 663.466048][T10153] ? _copy_from_user+0xa5/0xe0 [ 663.470838][T10153] packet_setsockopt+0xdb0/0x1500 [ 663.475890][T10153] ? packet_ioctl+0x350/0x350 [ 663.480603][T10153] ? aa_sk_perm+0x83c/0x970 [ 663.485140][T10153] ? __fget_files+0x28/0x460 [ 663.489763][T10153] ? aa_af_perm+0x330/0x330 [ 663.494299][T10153] ? __fget_files+0x28/0x460 [ 663.498917][T10153] ? aa_sock_opt_perm+0x74/0x100 [ 663.503878][T10153] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 663.509449][T10153] ? security_socket_setsockopt+0x7e/0xa0 [ 663.515189][T10153] ? packet_ioctl+0x350/0x350 [ 663.519891][T10153] do_sock_setsockopt+0x175/0x1a0 [ 663.524937][T10153] ? __fdget+0x180/0x210 [ 663.529207][T10153] __x64_sys_setsockopt+0x182/0x200 [ 663.534432][T10153] do_syscall_64+0x55/0xb0 [ 663.538866][T10153] ? clear_bhb_loop+0x40/0x90 [ 663.543569][T10153] ? clear_bhb_loop+0x40/0x90 [ 663.548279][T10153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.554198][T10153] RIP: 0033:0x7ff058d9e159 [ 663.558631][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.578259][T10153] RSP: 002b:00007ff059bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.586694][T10153] RAX: ffffffffffffffda RBX: 00007ff059026180 RCX: 00007ff058d9e159 [ 663.594685][T10153] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 663.602675][T10153] RBP: 00007ff058e3506b R08: 000000000000001c R09: 0000000000000000 [ 663.610660][T10153] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 663.618650][T10153] R13: 00007ff059026218 R14: 00007ff059026180 R15: 00007ffdb268a3f8 [ 663.626667][T10153] [ 663.679714][T10173] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 663.690776][T10153] Mem-Info: [ 663.695736][T10153] active_anon:29661 inactive_anon:0 isolated_anon:0 [ 663.695736][T10153] active_file:7740 inactive_file:50949 isolated_file:0 [ 663.695736][T10153] unevictable:17219 dirty:155 writeback:0 [ 663.695736][T10153] slab_reclaimable:11088 slab_unreclaimable:92763 [ 663.695736][T10153] mapped:27941 shmem:25152 pagetables:579 [ 663.695736][T10153] sec_pagetables:0 bounce:0 [ 663.695736][T10153] kernel_misc_reclaimable:0 [ 663.695736][T10153] free:1281487 free_pcp:17501 free_cma:0 [ 663.796377][T10153] Node 0 active_anon:123444kB inactive_anon:0kB active_file:30960kB inactive_file:203592kB unevictable:67340kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:620kB writeback:0kB shmem:100800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11092kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no [ 663.913439][T10173] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 663.941917][T10153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 663.979520][T10153] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.034592][T10173] ext2 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 664.066574][T10153] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 664.081978][T10153] Node 0 DMA32 free:1239148kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:110144kB inactive_anon:0kB active_file:30960kB inactive_file:202800kB unevictable:67340kB writepending:660kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:36120kB local_pcp:14788kB free_cma:0kB [ 664.142054][T10153] lowmem_reserve[]: 0 0 0 0 0 [ 664.147186][T10153] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 664.237607][T10153] lowmem_reserve[]: 0 0 0 0 0 [ 664.319130][T10153] Node 1 Normal free:3877172kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:36916kB local_pcp:28468kB free_cma:0kB [ 664.420115][T10153] lowmem_reserve[]: 0 0 0 0 0 [ 664.426626][T10153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 664.460617][T10153] Node 0 DMA32: 725*4kB (UME) 1150*8kB (UME) 667*16kB (UME) 780*32kB (UME) 279*64kB (UME) 196*128kB (UM) 119*256kB (UME) 73*512kB (UME) 23*1024kB (UM) 15*2048kB (ME) 257*4096kB (M) = 1265460kB [ 664.500596][T10153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.503491][T10173] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.1124: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 664.531879][T10153] Node 1 Normal: 273*4kB (UME) 70*8kB (UME) 52*16kB (UME) 138*32kB (UME) 49*64kB (UE) 14*128kB (UME) 1*256kB (M) 3*512kB (ME) 1*1024kB (U) 2*2048kB (ME) 942*4096kB (M) = 3877172kB [ 664.572675][T10153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.592026][T10153] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 664.635941][T10153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.649367][T10153] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 664.671191][T10153] 95148 total pagecache pages [ 664.680564][T10153] 0 pages in swap cache [ 664.687645][T10153] Free swap = 124404kB [ 664.694980][T10153] Total swap = 124996kB [ 664.699279][T10153] 2097051 pages RAM [ 664.708480][T10153] 0 pages HighMem/MovableOnly [ 664.715702][T10153] 416965 pages reserved [ 664.719884][T10153] 0 pages cma reserved [ 666.624132][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.167396][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.986804][T10243] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 679.036153][T10243] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 679.058663][ T27] audit: type=1800 audit(1790317606.988:32): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1145" name="addr_trtype" dev="configfs" ino=21982 res=0 errno=0 [ 679.847404][ T27] audit: type=1800 audit(1790317607.038:33): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1145" name="addr_traddr" dev="configfs" ino=21983 res=0 errno=0 [ 684.797509][T10255] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 11 (only 8 groups) [ 685.656241][T10258] loop1: detected capacity change from 0 to 164 [ 685.952694][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.960133][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.199171][T10284] syzkaller0: entered promiscuous mode [ 693.204819][T10284] syzkaller0: entered allmulticast mode [ 703.915628][T10322] hub 8-0:1.0: USB hub found [ 703.922223][T10322] hub 8-0:1.0: 1 port detected [ 713.001373][T10351] overlayfs: failed to clone upperpath [ 713.752804][T10361] netlink: 'syz.2.1178': attribute type 12 has an invalid length. [ 715.431362][T10369] No source specified [ 721.881433][T10401] md: array md0 already has disks! [ 721.911417][T10401] md: could not open device unknown-block(1,1). [ 721.939773][T10401] md: error, md_import_device() returned -16 [ 721.998141][T10403] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 722.123678][T10404] md: pers->run() failed ... [ 725.604400][T10417] syz.1.1193 (10417): drop_caches: 2 [ 725.992971][T10430] loop1: detected capacity change from 0 to 1024 [ 727.244358][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.615004][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.092622][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.349310][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.002474][ T11] tipc: Left network mode [ 729.463400][T10448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 729.476049][T10448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 729.499747][T10448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 729.528018][T10448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 729.571908][T10448] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 729.593490][T10448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.220198][T10448] Bluetooth: hci3: command tx timeout [ 733.342872][T10447] chnl_net:caif_netlink_parms(): no params data found [ 734.128091][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.158474][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.192722][T10447] bridge_slave_0: entered allmulticast mode [ 734.201997][T10447] bridge_slave_0: entered promiscuous mode [ 734.233163][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.241587][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.278766][T10447] bridge_slave_1: entered allmulticast mode [ 734.294576][T10447] bridge_slave_1: entered promiscuous mode [ 734.357423][ T11] hsr_slave_0: left promiscuous mode [ 734.388408][ T11] hsr_slave_1: left promiscuous mode [ 734.450342][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.472115][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.502055][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.509519][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.535705][ T11] bridge_slave_1: left allmulticast mode [ 734.541403][ T11] bridge_slave_1: left promiscuous mode [ 734.575052][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.610181][ T11] bridge_slave_0: left allmulticast mode [ 734.626937][ T11] bridge_slave_0: left promiscuous mode [ 734.641238][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.759917][ T11] veth1_vlan: left promiscuous mode [ 734.772669][ T11] veth0_vlan: left promiscuous mode [ 735.078659][ T11] bond1 (unregistering): (slave geneve2): Releasing active interface [ 735.308846][T10448] Bluetooth: hci3: command tx timeout [ 735.338667][ T11] bond1 (unregistering): Released all slaves [ 735.986345][ T11] team0 (unregistering): Port device team_slave_1 removed [ 736.051013][ T11] team0 (unregistering): Port device team_slave_0 removed [ 736.110081][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.119948][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 736.183170][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.193752][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 736.203559][ T788] infiniband syz1: ib_query_port failed (-19) [ 736.663310][ T11] bond0 (unregistering): Released all slaves [ 736.871599][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.938747][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.037694][T10447] team0: Port device team_slave_0 added [ 737.054884][T10447] team0: Port device team_slave_1 added [ 737.099044][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.107591][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.137572][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.175984][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.205537][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.249153][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.383050][T10448] Bluetooth: hci3: command tx timeout [ 737.452705][T10447] hsr_slave_0: entered promiscuous mode [ 737.459485][T10447] hsr_slave_1: entered promiscuous mode [ 737.468878][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.487198][T10447] Cannot create hsr debugfs directory [ 737.594473][ T11] IPVS: stop unused estimator thread 0... [ 738.031331][T10447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.055444][T10447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 738.074736][T10447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 738.092462][T10447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 738.298195][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.335778][T10447] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.365884][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.374254][ T8002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.399445][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.406775][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.029066][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.430840][T10447] veth0_vlan: entered promiscuous mode [ 739.451144][T10447] veth1_vlan: entered promiscuous mode [ 739.462514][T10448] Bluetooth: hci3: command tx timeout [ 739.513283][T10447] veth0_macvtap: entered promiscuous mode [ 739.527972][T10447] veth1_macvtap: entered promiscuous mode [ 739.553471][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.564541][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.574792][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.585281][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.596723][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.619247][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.631536][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.648403][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.659845][T10447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.669569][T10447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.678342][T10447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.687218][T10447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.890212][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.920655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.969108][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.985994][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.223574][T10564] loop4: detected capacity change from 0 to 8 [ 742.412862][T10564] squashfs: Unknown parameter 't' [ 742.515528][T10481] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 742.949679][T10564] loop4: detected capacity change from 0 to 4096 [ 743.057968][T10564] EXT4-fs: Ignoring removed mblk_io_submit option [ 743.208538][T10564] EXT4-fs (loop4): Test dummy encryption mode enabled [ 743.414111][T10564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.854988][T10564] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 744.877737][T10447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.451491][T10591] sctp: [Deprecated]: syz.2.1208 (pid 10591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.451491][T10591] Use struct sctp_sack_info instead [ 747.389941][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.397467][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.109073][T10597] loop1: detected capacity change from 0 to 512 [ 749.362115][T10481] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 754.964270][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 755.408492][T10650] macvtap1: entered promiscuous mode [ 755.414170][T10650] macvtap1: entered allmulticast mode [ 755.419728][T10650] bond0: entered allmulticast mode [ 755.426469][T10650] bond_slave_0: entered allmulticast mode [ 755.432590][T10650] bond_slave_1: entered allmulticast mode [ 755.439660][T10650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 755.451137][T10653] bond0: left allmulticast mode [ 755.479409][T10653] bond_slave_0: left allmulticast mode [ 755.551370][T10654] sctp: [Deprecated]: syz.1.1223 (pid 10654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.551370][T10654] Use struct sctp_sack_info instead [ 756.085859][T10653] bond_slave_1: left allmulticast mode [ 756.144633][ T27] audit: type=1326 audit(1790317684.168:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.2.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64b7b9e159 code=0x0 [ 756.150674][T10653] macvtap1: left promiscuous mode [ 758.318232][T10653] macvtap1: left allmulticast mode [ 758.363298][T10658] loop1: detected capacity change from 0 to 1024 [ 778.827279][T10775] tipc: Enabling of bearer rejected, failed to enable media [ 799.488830][T10448] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 805.625048][T10861] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 806.246147][T10865] loop1: detected capacity change from 0 to 512 [ 806.413956][T10869] loop4: detected capacity change from 0 to 512 [ 806.429137][T10865] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 806.468264][T10869] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.599244][T10869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.642191][T10869] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.472855][T10883] __vm_enough_memory: pid: 10883, comm: syz.1.1262, not enough memory for the allocation [ 808.786181][T10447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.854761][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.870262][ T5773] Bluetooth: hci1: unexpected event for opcode 0x1edf [ 808.879855][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.231823][T10921] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 822.270392][T10927] loop3: detected capacity change from 0 to 1024 [ 822.814745][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.233592][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.411872][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 854.008734][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 854.024767][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 854.036268][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 854.048878][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 854.058176][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 854.067227][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 856.234537][ T5773] Bluetooth: hci4: command tx timeout [ 857.556836][T11025] chnl_net:caif_netlink_parms(): no params data found [ 858.261985][ T5773] Bluetooth: hci4: command tx timeout [ 858.324539][T11052] bridge0: port 3(netdevsim0) entered blocking state [ 858.361609][T11052] bridge0: port 3(netdevsim0) entered disabled state [ 858.441138][T11052] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 858.485872][T11052] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 858.542693][T11052] bridge0: port 3(netdevsim0) entered blocking state [ 858.552189][T11052] bridge0: port 3(netdevsim0) entered forwarding state [ 858.569423][T11054] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 858.632480][T11054] bridge0: port 3(netdevsim0) entered disabled state [ 858.640724][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.649333][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.893109][T11054] bridge0: port 3(netdevsim0) entered blocking state [ 858.901153][T11054] bridge0: port 3(netdevsim0) entered forwarding state [ 858.909533][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.917989][T11054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.926744][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.934993][T11054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.994043][T11054] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 859.210064][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.224449][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.233367][T11025] bridge_slave_0: entered allmulticast mode [ 859.324233][T11025] bridge_slave_0: entered promiscuous mode [ 859.371942][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.392065][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.400556][T11025] bridge_slave_1: entered allmulticast mode [ 859.474307][T11025] bridge_slave_1: entered promiscuous mode [ 859.656569][T11025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.678718][T11025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.872450][T11025] team0: Port device team_slave_0 added [ 859.928154][T11025] team0: Port device team_slave_1 added [ 860.173110][T11025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.181280][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.220854][T11025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.312344][T11025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.320487][T11025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.361954][ T5773] Bluetooth: hci4: command tx timeout [ 860.466914][T11025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.867431][T11025] hsr_slave_0: entered promiscuous mode [ 861.905046][T11025] hsr_slave_1: entered promiscuous mode [ 861.962465][T11025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.012563][T11025] Cannot create hsr debugfs directory [ 862.421919][ T5773] Bluetooth: hci4: command tx timeout [ 867.282604][T11090] loop4: detected capacity change from 0 to 1024 [ 867.691499][T11092] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 870.494854][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.528080][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.863768][T11025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 871.015064][T11025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 871.139053][T11025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 872.713836][T11025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 873.650443][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.900831][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.024271][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.032621][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.164939][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.174852][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.704528][T10448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.721171][T10448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.733057][T10448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.772813][T10448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.792377][T10448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 874.801152][T10448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.911907][T10448] Bluetooth: hci0: command tx timeout [ 877.128604][T11025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.081901][T10448] Bluetooth: hci0: command tx timeout [ 879.102158][T11124] chnl_net:caif_netlink_parms(): no params data found [ 881.016123][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.092772][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.101281][T11124] bridge_slave_0: entered allmulticast mode [ 881.152250][T10448] Bluetooth: hci0: command tx timeout [ 881.324050][T11124] bridge_slave_0: entered promiscuous mode [ 881.386740][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.472132][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.480605][T11124] bridge_slave_1: entered allmulticast mode [ 881.573401][T11124] bridge_slave_1: entered promiscuous mode [ 881.986518][ T6426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.309748][ T6426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.462422][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.529960][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.699956][ T6426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.997112][ T6426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.232483][T10448] Bluetooth: hci0: command tx timeout [ 883.344489][T11124] team0: Port device team_slave_0 added [ 883.520685][T11124] team0: Port device team_slave_1 added [ 883.643413][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.651568][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.683626][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.720880][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.729199][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.761483][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.893109][T11025] veth0_vlan: entered promiscuous mode [ 883.929585][T11124] hsr_slave_0: entered promiscuous mode [ 883.939511][T11124] hsr_slave_1: entered promiscuous mode [ 883.947835][T11124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.957005][T11124] Cannot create hsr debugfs directory [ 884.383722][T11025] veth1_vlan: entered promiscuous mode [ 884.512508][ T6426] tipc: Left network mode [ 884.851013][T11025] veth0_macvtap: entered promiscuous mode [ 884.878801][T11025] veth1_macvtap: entered promiscuous mode [ 885.431128][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.456584][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.481883][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.510068][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.531895][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.576392][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.591468][T11025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.701205][T11124] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 885.730107][T11124] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 885.760586][T11124] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 885.777758][T11124] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 885.894187][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.907218][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.945862][T11025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.978925][T11025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.004743][T11025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.128119][T11025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.145817][T11025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.156410][T11025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.168788][T11025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.928275][ T6426] hsr_slave_0: left promiscuous mode [ 886.937970][ T6426] hsr_slave_1: left promiscuous mode [ 886.950886][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.961507][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.972317][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.981024][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.992867][ T6426] team0: left allmulticast mode [ 886.998640][ T6426] team_slave_0: left allmulticast mode [ 887.008917][ T6426] team_slave_1: left allmulticast mode [ 887.016256][ T6426] team0: left promiscuous mode [ 887.022389][ T6426] team_slave_0: left promiscuous mode [ 887.029030][ T6426] team_slave_1: left promiscuous mode [ 887.036005][ T6426] bridge0: port 3(team0) entered disabled state [ 887.049814][ T6426] bridge_slave_1: left allmulticast mode [ 887.057977][ T6426] bridge_slave_1: left promiscuous mode [ 887.065281][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.077834][ T6426] bridge_slave_0: left allmulticast mode [ 887.084773][ T6426] bridge_slave_0: left promiscuous mode [ 887.096088][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.170833][ T6426] veth1_macvtap: left promiscuous mode [ 887.178199][ T6426] veth0_macvtap: left promiscuous mode [ 887.184938][ T6426] veth1_vlan: left promiscuous mode [ 887.191162][ T6426] veth0_vlan: left promiscuous mode [ 887.846954][ T6426] bond1 (unregistering): Released all slaves [ 887.930613][ T6426] team0 (unregistering): Port device bridge1 removed [ 888.858514][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 888.921463][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 888.991588][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.002263][ T6426] bond_slave_1 (unregistering): left promiscuous mode [ 889.070869][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.080951][ T6426] bond_slave_0 (unregistering): left promiscuous mode [ 889.580082][ T6426] bond0 (unregistering): Released all slaves [ 889.696239][ T8000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.722227][ T8000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.831424][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.910262][T11124] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.949540][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.957926][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.062163][ T4822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.076522][ T4822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.115799][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.123016][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.386036][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.188185][T11124] veth0_vlan: entered promiscuous mode [ 897.261092][T11124] veth1_vlan: entered promiscuous mode [ 897.488859][T11124] veth0_macvtap: entered promiscuous mode [ 897.541701][T11124] veth1_macvtap: entered promiscuous mode [ 897.629118][T11256] loop4: detected capacity change from 0 to 512 [ 897.638037][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.714953][T11256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 897.807084][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.819073][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.006550][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.258702][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.270779][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.309541][T11256] EXT4-fs (loop4): 1 truncate cleaned up [ 898.320287][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.352300][T11256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.444697][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.676850][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.686824][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.697418][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.281083][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.307122][T10447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.404659][T11124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.481271][T11124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.511871][T11124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.525709][T11124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.134633][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.151173][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.324363][T11292] loop4: detected capacity change from 0 to 1024 [ 902.364432][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.373664][T11292] EXT4-fs: Ignoring removed bh option [ 902.409866][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.461317][T11292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.353214][T11313] loop6: detected capacity change from 0 to 128 [ 906.290087][T10447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.715296][T11418] loop6: detected capacity change from 0 to 512 [ 921.739081][T11418] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 922.529664][T11425] __vm_enough_memory: pid: 11425, comm: syz.6.1356, not enough memory for the allocation [ 932.629595][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.638861][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.490542][T11506] loop5: detected capacity change from 0 to 512 [ 936.503193][T11506] EXT4-fs: Ignoring removed mblk_io_submit option [ 937.305435][T11506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.436286][T11506] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.974861][T11025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.065423][T11523] kAFS: No cell specified [ 941.999120][T11549] loop4: detected capacity change from 0 to 256 [ 942.227143][T11549] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 945.295674][T11563] loop6: detected capacity change from 0 to 512 [ 946.234260][T11222] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 946.570913][T11576] loop6: detected capacity change from 0 to 512 [ 946.653964][T11576] EXT4-fs: Ignoring removed mblk_io_submit option [ 946.840982][T11576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.971449][T11576] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.549523][T11124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.486930][T11613] loop5: detected capacity change from 0 to 512 [ 955.429585][T10448] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 957.864763][T11652] netlink: 'syz.5.1398': attribute type 3 has an invalid length. [ 958.418458][T11656] loop5: detected capacity change from 0 to 512 [ 958.532796][T11656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 958.741991][T11656] EXT4-fs (loop5): 1 truncate cleaned up [ 958.748920][T11656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.572858][T11025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.150785][T11679] loop5: detected capacity change from 0 to 512 [ 961.274910][T11222] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 961.421902][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 961.663871][ T5837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 961.749437][ T5837] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 961.825619][ T5837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.892012][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.977095][T11681] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 962.174873][ T5837] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 963.456063][ T788] usb 7-1: USB disconnect, device number 2 [ 963.639444][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1407'. [ 969.799294][T11746] random: crng reseeded on system resumption [ 978.234290][T11786] loop5: detected capacity change from 0 to 1024 [ 979.883966][T10448] Bluetooth: hci4: command 0x0406 tx timeout [ 981.846490][T11812] netlink: 'syz.4.1430': attribute type 14 has an invalid length. [ 981.864876][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 981.906380][T11812] bond0: option xmit_hash_policy: invalid value (183) [ 993.206067][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.213759][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.968463][T11885] loop4: detected capacity change from 0 to 1024 [ 997.787994][T11906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1449'. [ 997.854284][T11906] netlink: 'syz.4.1449': attribute type 11 has an invalid length. [ 1000.479363][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 1001.099825][T11931] [ 1001.102206][T11931] ====================================================== [ 1001.109277][T11931] WARNING: possible circular locking dependency detected [ 1001.116323][T11931] syzkaller #0 Not tainted [ 1001.120756][T11931] ------------------------------------------------------ [ 1001.127815][T11931] syz.5.1446/11931 is trying to acquire lock: [ 1001.133889][T11931] ffff888032c5c0b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 1001.142982][T11931] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1001.142982][T11931] but task is already holding lock: [ 1001.150362][T11931] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1001.159278][T11931] [ 1001.159278][T11931] which lock already depends on the new lock. [ 1001.159278][T11931] [ 1001.169699][T11931] [ 1001.169699][T11931] the existing dependency chain (in reverse order) is: [ 1001.178728][T11931] [ 1001.178728][T11931] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1001.186138][T11931] __mutex_lock+0x135/0xc80 [ 1001.191185][T11931] rfcomm_security_cfm+0x41/0x550 [ 1001.196748][T11931] hci_key_refresh_complete_evt+0x405/0x810 [ 1001.203184][T11931] hci_event_packet+0x807/0x1280 [ 1001.208660][T11931] hci_rx_work+0x43a/0xd60 [ 1001.213624][T11931] process_scheduled_works+0xa60/0x1600 [ 1001.219712][T11931] worker_thread+0xa5e/0xfe0 [ 1001.224840][T11931] kthread+0x2fa/0x390 [ 1001.229444][T11931] ret_from_fork+0x48/0x80 [ 1001.234404][T11931] ret_from_fork_asm+0x11/0x20 [ 1001.239718][T11931] [ 1001.239718][T11931] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1001.247477][T11931] __mutex_lock+0x135/0xc80 [ 1001.252520][T11931] hci_remote_features_evt+0x535/0x900 [ 1001.258519][T11931] hci_event_packet+0x807/0x1280 [ 1001.264001][T11931] hci_rx_work+0x43a/0xd60 [ 1001.268963][T11931] process_scheduled_works+0xa60/0x1600 [ 1001.275054][T11931] worker_thread+0xa5e/0xfe0 [ 1001.280188][T11931] kthread+0x2fa/0x390 [ 1001.284799][T11931] ret_from_fork+0x48/0x80 [ 1001.289759][T11931] ret_from_fork_asm+0x11/0x20 [ 1001.295072][T11931] [ 1001.295072][T11931] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1001.302401][T11931] __lock_acquire+0x37ef/0x7d80 [ 1001.307796][T11931] lock_acquire+0x19e/0x420 [ 1001.313541][T11931] __mutex_lock+0x135/0xc80 [ 1001.318593][T11931] l2cap_chan_connect+0xfc/0xe30 [ 1001.324076][T11931] l2cap_sock_connect+0x586/0x760 [ 1001.329657][T11931] kernel_connect+0x142/0x1c0 [ 1001.334890][T11931] rfcomm_dlc_open+0xa1f/0xec0 [ 1001.340199][T11931] rfcomm_sock_connect+0x2ed/0x600 [ 1001.345858][T11931] __sys_connect+0x3da/0x470 [ 1001.350993][T11931] __x64_sys_connect+0x7a/0x90 [ 1001.356309][T11931] do_syscall_64+0x55/0xb0 [ 1001.361266][T11931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.367704][T11931] [ 1001.367704][T11931] other info that might help us debug this: [ 1001.367704][T11931] [ 1001.377950][T11931] Chain exists of: [ 1001.377950][T11931] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1001.377950][T11931] [ 1001.390496][T11931] Possible unsafe locking scenario: [ 1001.390496][T11931] [ 1001.397960][T11931] CPU0 CPU1 [ 1001.403340][T11931] ---- ---- [ 1001.408708][T11931] lock(rfcomm_mutex); [ 1001.412874][T11931] lock(hci_cb_list_lock); [ 1001.419913][T11931] lock(rfcomm_mutex); [ 1001.426604][T11931] lock(&hdev->lock); [ 1001.430679][T11931] [ 1001.430679][T11931] *** DEADLOCK *** [ 1001.430679][T11931] [ 1001.438833][T11931] 1 lock held by syz.5.1446/11931: [ 1001.443957][T11931] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1001.453309][T11931] [ 1001.453309][T11931] stack backtrace: [ 1001.459206][T11931] CPU: 0 PID: 11931 Comm: syz.5.1446 Not tainted syzkaller #0 [ 1001.466682][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.476758][T11931] Call Trace: [ 1001.480047][T11931] [ 1001.482997][T11931] dump_stack_lvl+0x18c/0x250 [ 1001.487693][T11931] ? load_image+0x420/0x420 [ 1001.492213][T11931] ? show_regs_print_info+0x20/0x20 [ 1001.497437][T11931] ? print_circular_bug+0x12b/0x1a0 [ 1001.502655][T11931] check_noncircular+0x2fc/0x400 [ 1001.507620][T11931] ? print_deadlock_bug+0x5d0/0x5d0 [ 1001.512838][T11931] ? lockdep_lock+0xf5/0x230 [ 1001.517452][T11931] ? _find_first_zero_bit+0xd6/0x100 [ 1001.522756][T11931] __lock_acquire+0x37ef/0x7d80 [ 1001.527632][T11931] ? is_bpf_text_address+0x28f/0x2a0 [ 1001.532943][T11931] ? verify_lock_unused+0x140/0x140 [ 1001.538158][T11931] ? __lock_acquire+0x1336/0x7d80 [ 1001.543207][T11931] ? verify_lock_unused+0x140/0x140 [ 1001.548439][T11931] lock_acquire+0x19e/0x420 [ 1001.552958][T11931] ? l2cap_chan_connect+0xfc/0xe30 [ 1001.558088][T11931] ? __might_sleep+0xe0/0xe0 [ 1001.562695][T11931] ? read_lock_is_recursive+0x20/0x20 [ 1001.568086][T11931] ? hci_get_route+0x3a5/0x4d0 [ 1001.572867][T11931] ? __lock_acquire+0x7d80/0x7d80 [ 1001.577906][T11931] __mutex_lock+0x135/0xc80 [ 1001.582420][T11931] ? l2cap_chan_connect+0xfc/0xe30 [ 1001.587542][T11931] ? do_raw_read_unlock+0x3d/0x80 [ 1001.592580][T11931] ? _raw_read_unlock+0x28/0x40 [ 1001.597443][T11931] ? hci_get_route+0x3a5/0x4d0 [ 1001.602221][T11931] ? l2cap_chan_connect+0xfc/0xe30 [ 1001.607344][T11931] ? mutex_lock_nested+0x20/0x20 [ 1001.612293][T11931] ? print_unlock_imbalance_bug+0x160/0x160 [ 1001.618203][T11931] ? mark_lock+0x94/0x320 [ 1001.622549][T11931] l2cap_chan_connect+0xfc/0xe30 [ 1001.627501][T11931] ? lock_chain_count+0x20/0x20 [ 1001.632374][T11931] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 1001.638277][T11931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1001.643660][T11931] ? _local_bh_enable+0xa0/0xa0 [ 1001.648526][T11931] ? bacmp+0xe/0x30 [ 1001.652349][T11931] l2cap_sock_connect+0x586/0x760 [ 1001.657389][T11931] ? l2cap_sock_bind+0x940/0x940 [ 1001.662341][T11931] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1001.668338][T11931] ? __lock_acquire+0x7d80/0x7d80 [ 1001.673377][T11931] ? kernel_connect+0xf2/0x1c0 [ 1001.678159][T11931] kernel_connect+0x142/0x1c0 [ 1001.682858][T11931] ? kernel_accept+0x350/0x350 [ 1001.687644][T11931] ? rfcomm_dlc_open+0x9e3/0xec0 [ 1001.692598][T11931] rfcomm_dlc_open+0xa1f/0xec0 [ 1001.697381][T11931] ? rfcomm_sock_connect+0x2c6/0x600 [ 1001.702681][T11931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1001.708073][T11931] ? rfcomm_dlc_free+0x50/0x50 [ 1001.712852][T11931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1001.718237][T11931] ? _local_bh_enable+0xa0/0xa0 [ 1001.723103][T11931] ? do_raw_spin_unlock+0x121/0x230 [ 1001.728320][T11931] rfcomm_sock_connect+0x2ed/0x600 [ 1001.733452][T11931] __sys_connect+0x3da/0x470 [ 1001.738067][T11931] ? __sys_connect_file+0x170/0x170 [ 1001.743293][T11931] __x64_sys_connect+0x7a/0x90 [ 1001.748083][T11931] do_syscall_64+0x55/0xb0 [ 1001.752523][T11931] ? clear_bhb_loop+0x40/0x90 [ 1001.757218][T11931] ? clear_bhb_loop+0x40/0x90 [ 1001.761910][T11931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.767822][T11931] RIP: 0033:0x7fac0639e159 [ 1001.772248][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.791872][T11931] RSP: 002b:00007fac0721d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1001.800305][T11931] RAX: ffffffffffffffda RBX: 00007fac06625fa0 RCX: 00007fac0639e159 [ 1001.808294][T11931] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000005 [ 1001.816279][T11931] RBP: 00007fac0643506b R08: 0000000000000000 R09: 0000000000000000 [ 1001.824266][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.832251][T11931] R13: 00007fac06626038 R14: 00007fac06625fa0 R15: 00007ffff628a7a8 [ 1001.840245][T11931] [ 1003.047711][T11151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.129017][T11151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.243642][T11151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.318430][T11151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.301114][T11151] hsr_slave_0: left promiscuous mode [ 1004.307991][T11151] hsr_slave_1: left promiscuous mode [ 1004.316984][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.324945][T11151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.338516][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.346973][T11151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.362624][T11151] bridge_slave_1: left allmulticast mode [ 1004.368723][T11151] bridge_slave_1: left promiscuous mode [ 1004.375203][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.385133][T11151] bridge_slave_0: left allmulticast mode [ 1004.391179][T11151] bridge_slave_0: left promiscuous mode [ 1004.398764][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.414965][T11151] veth1_macvtap: left promiscuous mode [ 1004.420867][T11151] veth0_macvtap: left promiscuous mode [ 1004.427370][T11151] veth1_vlan: left promiscuous mode [ 1004.434761][T11151] veth0_vlan: left promiscuous mode [ 1004.730691][T11151] team0 (unregistering): Port device team_slave_1 removed [ 1004.767613][T11151] team0 (unregistering): Port device team_slave_0 removed [ 1004.782896][T11151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.798799][T11151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.897329][T11151] bond0 (unregistering): Released all slaves [ 1005.312240][T11151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.372082][T11151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.441223][T11151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.490185][T11151] bridge0: port 3(netdevsim0) entered disabled state [ 1005.500006][T11151] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1005.509556][T11151] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1005.519277][T11151] bridge0: port 3(netdevsim0) entered disabled state [ 1005.529592][T11151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.662733][T11151] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.711278][T11151] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.778411][T11151] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.840991][T11151] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.988987][T11151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.041380][T11151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.101245][T11151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.149847][T11151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.666389][T11151] hsr_slave_0: left promiscuous mode [ 1007.672576][T11151] hsr_slave_1: left promiscuous mode [ 1007.678505][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.687991][T11151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.701069][T11151] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1007.709326][T11151] batman_adv: batadv0: Removing interface: ipvlan2 [ 1007.717456][T11151] bridge_slave_1: left allmulticast mode [ 1007.724222][T11151] bridge_slave_1: left promiscuous mode [ 1007.729942][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.738883][T11151] bridge_slave_0: left allmulticast mode [ 1007.745712][T11151] bridge_slave_0: left promiscuous mode [ 1007.751476][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.768311][T11151] hsr_slave_0: left promiscuous mode [ 1007.775066][T11151] hsr_slave_1: left promiscuous mode [ 1007.782402][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.790353][T11151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.798842][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.811894][T11151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.821093][T11151] bridge_slave_1: left allmulticast mode [ 1007.827718][T11151] bridge_slave_1: left promiscuous mode [ 1007.834399][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.845014][T11151] bridge_slave_0: left allmulticast mode [ 1007.851078][T11151] bridge_slave_0: left promiscuous mode [ 1007.858102][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.878613][T11151] hsr_slave_0: left promiscuous mode [ 1007.886543][T11151] hsr_slave_1: left promiscuous mode [ 1007.894046][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.905769][T11151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.914883][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.924429][T11151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.935039][T11151] bridge_slave_1: left allmulticast mode [ 1007.941132][T11151] bridge_slave_1: left promiscuous mode [ 1007.948221][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.960934][T11151] bridge_slave_0: left allmulticast mode [ 1007.968948][T11151] bridge_slave_0: left promiscuous mode [ 1007.977543][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.000091][T11151] veth1_macvtap: left promiscuous mode [ 1008.007104][T11151] veth0_macvtap: left promiscuous mode [ 1008.013610][T11151] veth1_vlan: left allmulticast mode [ 1008.019411][T11151] veth1_vlan: left promiscuous mode [ 1008.027349][T11151] veth0_vlan: left promiscuous mode [ 1008.037876][T11151] veth1_macvtap: left promiscuous mode [ 1008.043955][T11151] veth0_macvtap: left promiscuous mode [ 1008.049567][T11151] veth1_vlan: left promiscuous mode [ 1008.057298][T11151] veth0_vlan: left promiscuous mode [ 1008.065046][T11151] veth1_macvtap: left promiscuous mode [ 1008.070578][T11151] veth0_macvtap: left promiscuous mode [ 1008.076291][T11151] veth1_vlan: left promiscuous mode [ 1008.081584][T11151] veth0_vlan: left promiscuous mode [ 1008.303536][T11151] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1008.319621][T11151] bond4 (unregistering): Released all slaves [ 1008.354523][T11151] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 1008.427035][T11151] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1008.474958][T11151] bond3 (unregistering): Released all slaves [ 1008.488079][T11151] bond2 (unregistering): Released all slaves [ 1008.501035][T11151] bond1 (unregistering): Released all slaves [ 1008.812060][T11151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.827482][T11151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.930589][T11151] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1008.939372][T11151] bond0 (unregistering): Released all slaves [ 1009.116836][T11151] team0 (unregistering): Port device team_slave_1 removed [ 1009.151286][T11151] team0 (unregistering): Port device team_slave_0 removed [ 1009.181497][T11151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.195061][T11151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.256651][T11151] bond0 (unregistering): Released all slaves [ 1009.450536][T11151] team0 (unregistering): Port device team_slave_1 removed [ 1009.487327][T11151] team0 (unregistering): Port device team_slave_0 removed [ 1009.523057][T11151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.552282][T11151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.612018][T11151] bond0 (unregistering): Released all slaves [ 1010.371235][T11151] IPVS: stop unused estimator thread 0...