last executing test programs: 6m28.318129749s ago: executing program 1 (id=151): memfd_create(0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$proc_mixer(0xffffffffffffffff, 0x0, 0x8c) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7f03) 6m25.186131473s ago: executing program 1 (id=153): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x452bb18206383a0b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f0000000100)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e22, 0x8, @private1}, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x78}, 0x1, {[0x10000, 0xfffeffff, 0x8, 0x7ff, 0x5, 0x7f, 0x200007, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, 0x0, &(0x7f0000d23000)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000001040)=""/39, 0x27) 6m21.451109034s ago: executing program 1 (id=159): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 6m20.509063579s ago: executing program 1 (id=163): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 6m18.800727275s ago: executing program 1 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) 6m8.814339653s ago: executing program 1 (id=181): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$sequencer2(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}}) 5m52.054460124s ago: executing program 32 (id=181): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$sequencer2(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}}) 17.631698728s ago: executing program 2 (id=958): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0]) mkdir(0x0, 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5}) mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 16.243833065s ago: executing program 2 (id=959): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.242777775s ago: executing program 4 (id=970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 12.22426113s ago: executing program 2 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) 12.023866774s ago: executing program 3 (id=965): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 12.023564094s ago: executing program 4 (id=966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)={0x30, r8, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) 12.020589824s ago: executing program 0 (id=977): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.885719555s ago: executing program 5 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x12397344714f8a93, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10.772650848s ago: executing program 4 (id=969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r6, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.763724075s ago: executing program 3 (id=971): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x801) accept(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x25dfdbff, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x57, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) ptrace(0x10, 0x0) ptrace$setopts(0x4200, 0x0, 0xf32, 0x7c8099cd3b23fb8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) 8.731417776s ago: executing program 5 (id=972): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0]) mkdir(0x0, 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5}) mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 8.725019716s ago: executing program 4 (id=973): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.658062047s ago: executing program 0 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x12397344714f8a93, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.631514518s ago: executing program 5 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) 5.975728268s ago: executing program 5 (id=980): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.599163515s ago: executing program 3 (id=981): getgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x802, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000beab00006110bb00000000001f010000000000009500000000000000951df7fa"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002e80)={0xa0, 0xffffffffffffffda, 0x0, {{0x7, 0x2, 0x1000, 0xf, 0x6, 0x80000000, {0x2, 0x6, 0x0, 0x0, 0x6, 0x1, 0x0, 0x3, 0x0, 0x3000, 0x101, 0x0, 0x0, 0x6, 0x6d4d}}, {0x0, 0x2}}}, 0xa0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) recvmmsg(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)}, 0x404}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x8, 0x0) 4.533028545s ago: executing program 4 (id=982): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.25595858s ago: executing program 2 (id=983): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 4.25502131s ago: executing program 0 (id=994): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}], 0x1, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 3.537580714s ago: executing program 3 (id=985): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, &(0x7f0000000400)) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x101000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000003"], 0x0, 0x28}, 0x28) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000580)={0x9, @pix_mp={0xde, 0x7f, 0x36314247, 0x4, 0x0, [{0x19, 0x7}, {0x0, 0x4}, {0x6, 0x7ff}, {0x12, 0x3}, {0x6, 0xb8}, {0x5, 0x6c}, {0x7, 0x2}, {0xf, 0xfffff9b5}], 0xff, 0x1, 0x8, 0x2, 0x6}}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000bed6f08c4a194645a2bfe36ff0b3f5c81689be568a9f0c498d7ee3d57312d8625d41c296c5da33a06bb2a479afc28c7787bf4c8f24483458c50b421ca85e19a8dd8723066d0f9ea3283b79303ba988a5ed1869d93a43c9a58f5f6b8732e05ffb7e304499eceb8a3313d3c493de99232100ecc004d948a463c312be935dcdc0078c5bbe492eacc68a93427f56addc37b578f4943e5fee970698c7bfdff6a323172340c9aff9b0e7385c4fc5e8d759623af676b730f5faa89af24e0de5d9e1c1d8c1027735a0c1ca2eb0113f34cb83432f3c66c7de7d5e775a2d675b21bef1", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00028006000b000200000030000380050008000800000008000500ac1e000114000600ff02000000000000000000000000000108000300040000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x1) 2.071343732s ago: executing program 0 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) semget(0x1, 0x2, 0x210) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvbGLHm0rpJk2agpCwygHUiMQvkQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFu/4VyMGcOnFCQcuDMv+CqRwR334xmdvYlseuu87ab9PORZp/n2eeZZ37z0+yjmbWsDfCNtfp+Zh40k9VL726X7d2d5c7uzvLtfj3JqSSNZC5JUb799yRfJvfS2/KtfsdIeUDx2er19fufXuy15uqtGl8ctd94BrG0erFW5dOab+nx5iservaa80nO1SVM3H7fF4d2P+HnEgCYZkVy4rD3W8np+ma9fA7o3RX37rFfaPcmHQAAAAA8B6/uZS/bOTPpOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFUv/+f1FvjX59PkX/9/9n6/dS119oDyYdAAAAAAAAAAAc9MVxd/juXvaynTP99n5R/c3/zapxvnp9JR9lK+1s5nK2s5ZuutnMYpLWyESz22vd7ubiGHsuHbrn0mOfMwAAAAAAAAC8xE6MO/BPWR3+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKZBkZzoFdV2vl9vpXEyyVyS2XLcveR+v/4iezDpAAAAAOA5eHUve9nOmX57v6ie+V+vnvvn8lHupJuNdNNJOzeq7wJ6T/2N3Z3lzu7O8u1yOzjvz/93rDCqGdP77uHwIy9UIy4M9ljNr/LbXMp83stmNvK7rKWbdubzTlVbS5FW/e1Fqx/n4fH+7KHWe18X6xtVJM3czEYV2+Vcz4fp5EYa1TlUY44+4h/L7BQ/rY2Zoxt1WZ7Rr+tyOrSqjMwMMrJQ577MxtmjM3HM6+TRIy2mMfgO6vwzyPnpuixz/c5U53xp5Op7/ehMJAtL/7273rlza/3m1qXpOaXH9GgmlkcycfHYmdjf3//DwWOcfPan8RTM1tnoraLHWy3frPY9k438Jh/mRtq5loVcy0quZjkr+XFWRvJ6YYzPWuN4n7Xv/aCuzCT5ZV1OhzKvZ0fyOrrStaq+0XeGWTr39Fekk9+uK+XF+vbUrUhnH1mb+5l47ehM/GW/fN3q3Lm1ub52d8zjfb8uywz8YqoyUV4v5warxsNXR9n32qF9i1Xf+UFf40DfhUHf131SZ+t7uIMzLVV9Fw/tW6763hj0vZLmIKnDuxwApt7pt07PNv/T/Hfz8+afm+vNd+fePnXt1HdmM/Ovk/848bfGXxs/Kd7K5/n98PkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4fFsff3JrrdNpb6qoTL4yl2Tcwf2fKJp0zC9pZcILE/DMXenevntl6+NPfrhxe+2D9gftO1cXV5auXl1Y+dG1Kzc3Ou2F3uukwwQAnqLhTf+kIwEAAAAAAAAAAAAAAL7K8/h34kmfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HJbfT8zD1JkceHyQtne3VnulFu/Phw5l6QoK/9M8mVyL70trZHpiq86TvHZ6vX1+59eHM411x9fHLXfeB6KpfFITE8639ITzzc8w/kk5+oSJu7/AQAA//9jygD6") 2.069617382s ago: executing program 5 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 329.838734ms ago: executing program 3 (id=987): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0]) mkdir(0x0, 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5}) mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 328.647764ms ago: executing program 2 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 327.860334ms ago: executing program 5 (id=988): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000540)='12', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) close(r1) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) symlink(0x0, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(0x0, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') unlink(0x0) 0s ago: executing program 0 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 58.149501][ T4174] cgroup: Unknown subsys name 'net' [ 58.257116][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.452635][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.732699][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.773949][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.836176][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.863374][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.870607][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.878429][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.905163][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.912553][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.920882][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.962562][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 60.981075][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.988259][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.996410][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.009214][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.016495][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.024505][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.038121][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 61.052438][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.080571][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.117087][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.124263][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.132862][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.151117][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.162651][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.176721][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.184018][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.192028][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.207285][ T4186] team0: Port device team_slave_0 added [ 61.240367][ T4186] team0: Port device team_slave_1 added [ 61.253454][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.260840][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.268590][ T4198] device bridge_slave_0 entered promiscuous mode [ 61.277514][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.294806][ T4192] team0: Port device team_slave_0 added [ 61.310272][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.319606][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.326660][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.334857][ T4198] device bridge_slave_1 entered promiscuous mode [ 61.353707][ T4192] team0: Port device team_slave_1 added [ 61.381322][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.388287][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.414691][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.432914][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.440227][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.447919][ T4197] device bridge_slave_0 entered promiscuous mode [ 61.463465][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.473093][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.480865][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.507162][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.518876][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.525976][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.552050][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.563138][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.570460][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.578380][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.587681][ T4187] team0: Port device team_slave_0 added [ 61.596648][ T4187] team0: Port device team_slave_1 added [ 61.604092][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.618617][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.625760][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.652198][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.690428][ T4198] team0: Port device team_slave_0 added [ 61.720610][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.737889][ T4198] team0: Port device team_slave_1 added [ 61.755483][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.765194][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.772332][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.798242][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.815701][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.822756][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.854716][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.869412][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.876126][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.886598][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.893547][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.900417][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.908134][ T4192] Cannot create hsr debugfs directory [ 61.968979][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.976055][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.003100][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.016502][ T4197] team0: Port device team_slave_0 added [ 62.027815][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.034992][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.042021][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.050317][ T4187] Cannot create hsr debugfs directory [ 62.059924][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.066882][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.093195][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.105300][ T4197] team0: Port device team_slave_1 added [ 62.143815][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.151619][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.177694][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.210644][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.217713][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.244543][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.278842][ T4198] device hsr_slave_0 entered promiscuous mode [ 62.285591][ T4198] device hsr_slave_1 entered promiscuous mode [ 62.295097][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.302751][ T4198] Cannot create hsr debugfs directory [ 62.394299][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.401016][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.407816][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.415845][ T4197] Cannot create hsr debugfs directory [ 62.470532][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 62.479948][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 62.485979][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 62.553372][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 62.559987][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 62.612016][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.633277][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.643096][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.652098][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.688030][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.696854][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.714318][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.732649][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.742594][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.759207][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.768144][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.779650][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.854114][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.879204][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.892079][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.916129][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.978707][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.988582][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.005606][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.017817][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.027811][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.051226][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.077211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.086912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.099248][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.113474][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.132193][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.141483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.151028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.161502][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.168757][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.177228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.187421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.195879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.215558][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.224107][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.235516][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.244099][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.251200][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.260102][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.267770][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.275911][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.284604][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.294777][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.301884][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.315231][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.338804][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.351394][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.361067][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.371777][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.378971][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.388022][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.396930][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.405650][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.420613][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.430265][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.438812][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.447684][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.454796][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.463532][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.472333][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.493065][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.503046][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.513801][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.522101][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.533737][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.542415][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.551672][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.559715][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.568407][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.577100][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.586013][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.595873][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.603307][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.617632][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.625821][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.643853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.654129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.663080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.671624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.697770][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.708861][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.723086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.731973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.742460][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.749560][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.757632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.766599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.775318][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.782424][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.790613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.798884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.807292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.816628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.825153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.833594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.841981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.857326][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.884639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.893036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.902890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.921265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.932185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.942415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.951657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.960538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.969031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.977737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.986088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.014834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.042057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.051778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.064536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.075016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.084180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.101074][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.113939][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.125772][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.137979][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.148691][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.158744][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.168909][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.178040][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.200198][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.222935][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.232687][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.246518][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.256309][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.270062][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.300986][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.309127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.320809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.331224][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.338304][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.346598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.356035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.365143][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.372272][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.382003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.398040][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.420264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.428173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.443222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.492169][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.505349][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.515787][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.526629][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.536581][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.545197][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.549664][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 64.553099][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 64.564716][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 64.569721][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.580045][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.590639][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.598860][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.616276][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.626711][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.637783][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 64.645330][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 64.658369][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.674275][ T4187] device veth0_vlan entered promiscuous mode [ 64.681371][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.689106][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.697000][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.705936][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.715204][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.724706][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.733838][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.742651][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.751305][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.758760][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.766428][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.774238][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.782611][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.806725][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.825490][ T4198] device veth0_vlan entered promiscuous mode [ 64.853565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.864175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.878405][ T4187] device veth1_vlan entered promiscuous mode [ 64.901662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.913709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.924730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.935279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.950519][ T4198] device veth1_vlan entered promiscuous mode [ 64.978970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.987904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.998023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.007301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.016253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.025185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.033956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.056428][ T4192] device veth0_vlan entered promiscuous mode [ 65.071877][ T4192] device veth1_vlan entered promiscuous mode [ 65.086653][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.103195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.118028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.127032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.139956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.147498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.156119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.165350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.173886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.186027][ T4186] device veth0_vlan entered promiscuous mode [ 65.198761][ T4187] device veth0_macvtap entered promiscuous mode [ 65.219016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.228124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.239112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.253453][ T4186] device veth1_vlan entered promiscuous mode [ 65.274182][ T4187] device veth1_macvtap entered promiscuous mode [ 65.290207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.298264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.306676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.315418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.324479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.341598][ T4192] device veth0_macvtap entered promiscuous mode [ 65.363357][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.372086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.386649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.395569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.410045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.419039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.429200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.451352][ T4198] device veth0_macvtap entered promiscuous mode [ 65.461504][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.476711][ T4192] device veth1_macvtap entered promiscuous mode [ 65.484737][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.493716][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.502060][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.511394][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.522274][ T4198] device veth1_macvtap entered promiscuous mode [ 65.535120][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.544938][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.554071][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.563745][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589809][ T4186] device veth0_macvtap entered promiscuous mode [ 65.599008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.608351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.617167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.626118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.634968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.643695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.666290][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.677690][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.688618][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.703040][ T4186] device veth1_macvtap entered promiscuous mode [ 65.720882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.728857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.737611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.747745][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.759870][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.773328][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.783023][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.793850][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.803961][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.814452][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.825338][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.847156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.856264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.865236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.874907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.883916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.895193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.903894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.913520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.923423][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.932665][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.941683][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.950724][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963426][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.984503][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.003330][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.014082][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.025004][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.036389][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.045211][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.053921][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.062878][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.083233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.092227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.105993][ T4197] device veth0_vlan entered promiscuous mode [ 66.138288][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.150728][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.160808][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.171526][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.181619][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.192334][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.203539][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.223983][ T4197] device veth1_vlan entered promiscuous mode [ 66.242979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.257819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.271746][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.282384][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.294234][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.304949][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.315476][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.326221][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.342458][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.354558][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.363731][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.372773][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.381766][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.411595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.420509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.457266][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.472091][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.506319][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.515303][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.525265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.535962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.578237][ T4197] device veth0_macvtap entered promiscuous mode [ 66.589585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.598617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.613254][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.622681][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.630467][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 66.641066][ T4197] device veth1_macvtap entered promiscuous mode [ 66.649832][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 66.650089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.656430][ T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.665823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.680191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.681927][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 66.711870][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 66.715061][ T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.726243][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 66.758184][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.768901][ T584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.777978][ T584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.787038][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.797496][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.810742][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.821424][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.832165][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.842333][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.853029][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.864298][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.876179][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.884492][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.893572][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.903172][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.981428][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.997474][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.009710][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.026162][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046513][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.064563][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.076392][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.093414][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.106047][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.119050][ T584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.127086][ T584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.135073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.156953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.507485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.730327][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.757568][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.079373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.099360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.109350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.119350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.129345][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.139354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.149351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.159371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.185872][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.849361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.859373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.964081][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.085471][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 69.094372][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 69.100517][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 69.107272][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 69.114329][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 69.129618][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.149538][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.213208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.810052][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.824039][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.020250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.113960][ T4304] kAFS: bad VL server IP address [ 70.603380][ T4308] loop2: detected capacity change from 0 to 256 [ 70.731032][ T4308] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 70.929331][ C0] sched: RT throttling activated [ 70.929439][ T25] audit: type=1800 audit(1788209430.227:2): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file1" dev="loop2" ino=1048586 res=0 errno=0 [ 71.232309][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.471395][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.478032][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.902221][ T4324] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 72.379790][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.471131][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.523621][ T4332] kernel profiling enabled (shift: 10) [ 72.544311][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.565087][ T4331] Zero length message leads to an empty skb [ 72.582789][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.684494][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.706821][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.783437][ T4330] loop0: detected capacity change from 0 to 4096 [ 76.567319][ T4369] syz.0.22 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.719542][ T4372] ======================================================= [ 76.719542][ T4372] WARNING: The mand mount option has been deprecated and [ 76.719542][ T4372] and is ignored by this kernel. Remove the mand [ 76.719542][ T4372] option from the mount to silence this warning. [ 76.719542][ T4372] ======================================================= [ 79.049204][ T4384] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 79.724794][ T4390] 0: reclassify loop, rule prio 0, protocol 700 [ 79.791041][ T4390] process 'syz.1.28' launched '/dev/fd/-1' with NULL argv: empty string added [ 80.097083][ T4403] overlayfs: unrecognized mount option "/" or missing value [ 81.097997][ T4409] loop0: detected capacity change from 0 to 512 [ 81.934175][ T4409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.981257][ T4412] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 82.039750][ T4409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.135931][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 82.154431][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 82.355370][ T4423] overlayfs: overlapping lowerdir path [ 84.692004][ T4448] loop1: detected capacity change from 0 to 256 [ 85.000915][ T25] audit: type=1800 audit(1788209444.317:3): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="idProduct" dev="configfs" ino=33254 res=0 errno=0 [ 85.197812][ T25] audit: type=1800 audit(1788209444.507:4): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="serialnumber" dev="configfs" ino=33261 res=0 errno=0 [ 85.416094][ T25] audit: type=1800 audit(1788209444.587:5): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="manufacturer" dev="configfs" ino=33262 res=0 errno=0 [ 85.790427][ T4460] overlayfs: unrecognized mount option "/" or missing value [ 86.537328][ T4448] netlink: 'syz.1.52': attribute type 29 has an invalid length. [ 86.675505][ T7] cfg80211: failed to load regulatory.db [ 86.695316][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 86.722349][ T4448] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 86.771240][ T4468] hugetlbfs: syz.2.45 (4468): Using mlock ulimits for SHM_HUGETLB is deprecated [ 88.145465][ T4480] futex_wake_op: syz.4.47 tries to shift op by 144; fix this program [ 88.490598][ T4482] loop1: detected capacity change from 0 to 512 [ 89.391776][ T4482] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 89.777538][ T4493] tmpfs: Unknown parameter 'fscontext' [ 89.952835][ T4495] loop2: detected capacity change from 0 to 32768 [ 89.989845][ T4495] gfs2: Unknown parameter '@' [ 90.552544][ T4495] loop2: detected capacity change from 0 to 2048 [ 90.600521][ T4495] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.819360][ T4501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.370285][ T4508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 91.647272][ T4509] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 92.641811][ T4509] Remounting filesystem read-only [ 92.648365][ T4512] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 93.682818][ T4516] loop1: detected capacity change from 0 to 8192 [ 94.213736][ T4516] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 94.296935][ T4516] REISERFS (device loop1): using ordered data mode [ 94.793942][ T4516] reiserfs: using flush barriers [ 94.819479][ T4516] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.898199][ T4516] REISERFS (device loop1): checking transaction log (loop1) [ 94.908655][ T4540] loop4: detected capacity change from 0 to 256 [ 95.603815][ T4540] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 95.713428][ T4516] REISERFS (device loop1): Using r5 hash to sort names [ 95.761924][ T4516] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 97.409012][ T4561] futex_wake_op: syz.1.68 tries to shift op by 144; fix this program [ 100.133234][ T4580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.027318][ T4603] tipc: Started in network mode [ 102.075527][ T4603] tipc: Node identity aa533742cb4b, cluster identity 4711 [ 102.100124][ T4603] tipc: Enabled bearer , priority 0 [ 102.201176][ T4602] tipc: Disabling bearer [ 102.404860][ T4613] device vlan0 entered promiscuous mode [ 104.012415][ T4628] loop3: detected capacity change from 0 to 256 [ 104.161711][ T4628] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 106.165343][ T4671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.857171][ T4671] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 106.910548][ T4679] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 107.540034][ T4681] device syzkaller0 entered promiscuous mode [ 108.361372][ T4692] loop3: detected capacity change from 0 to 256 [ 108.490017][ T4692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 108.588157][ T25] audit: type=1800 audit(1788209467.867:6): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 111.033614][ T4706] loop1: detected capacity change from 0 to 1024 [ 113.076632][ T4405] hfsplus: b-tree write err: -5, ino 25 [ 113.229910][ T4405] hfsplus: b-tree write err: -5, ino 4 [ 113.512107][ T4405] hfsplus: b-tree write err: -5, ino 2 [ 114.038580][ T4405] hfsplus: b-tree write err: -5, ino 26 [ 114.644829][ T4723] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 116.478188][ T4733] configfs-gadget gadget: uvc: uvc_function_bind() [ 116.491380][ T4733] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 116.684044][ T4733] udc dummy_udc.0: failed to start g1: -22 [ 117.755824][ T4749] loop0: detected capacity change from 0 to 256 [ 118.775606][ T4749] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 118.823217][ T25] audit: type=1800 audit(1788209478.137:7): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.106" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 126.892956][ T4809] ceph: No mds server is up or the cluster is laggy [ 127.190843][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 127.242949][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 127.266875][ T4817] loop3: detected capacity change from 0 to 512 [ 127.294446][ T4817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.370233][ T4819] dlm: non-version read from control device 4096 [ 127.409987][ T4817] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.465626][ T4817] EXT4-fs (loop3): 1 truncate cleaned up [ 127.471941][ T4817] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 127.519530][ T4823] device syzkaller0 entered promiscuous mode [ 127.702650][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.279660][ T4228] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 129.289407][ T4228] usb 5-1: can't read configurations, error -71 [ 129.498004][ T4844] device syzkaller0 entered promiscuous mode [ 130.561287][ T4844] tipc: Started in network mode [ 130.568438][ T4844] tipc: Node identity 82d38b059002, cluster identity 4711 [ 130.699760][ T4844] tipc: Enabled bearer , priority 0 [ 130.733374][ T4858] loop4: detected capacity change from 0 to 1024 [ 131.471711][ T4858] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 131.746999][ T4843] tipc: Resetting bearer [ 132.523508][ T4843] tipc: Disabling bearer [ 132.560995][ T7] tipc: Node number set to 315722501 [ 133.799928][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.806289][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.608343][ T4888] loop3: detected capacity change from 0 to 512 [ 135.726669][ T4888] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.774778][ T4888] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.094956][ T4945] ceph: No mds server is up or the cluster is laggy [ 144.105254][ T7] libceph: connect (1)[c::]:6789 error -101 [ 144.165886][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 144.461488][ T26] Bluetooth: hci4: command 0x0405 tx timeout [ 146.936135][ T4970] loop2: detected capacity change from 0 to 4096 [ 149.031252][ T4991] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 149.813685][ T4996] loop2: detected capacity change from 0 to 16 [ 150.553994][ T4996] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.887576][ T5008] loop1: detected capacity change from 0 to 32768 [ 153.058125][ T5008] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.343491][ T5008] syz.1.166 (5008) used greatest stack depth: 18304 bytes left [ 157.576407][ T5035] loop3: detected capacity change from 0 to 32768 [ 157.808866][ T5035] XFS (loop3): Mounting V5 Filesystem [ 158.874102][ T5035] XFS (loop3): Ending clean mount [ 158.920309][ T5035] XFS (loop3): Quotacheck needed: Please wait. [ 159.717514][ T5035] XFS (loop3): Quotacheck: Done. [ 160.398555][ T25] audit: type=1800 audit(1788209519.317:8): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 161.196793][ T4187] XFS (loop3): Unmounting Filesystem [ 169.792592][ T5096] overlayfs: missing 'workdir' [ 172.587171][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 174.470080][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 176.230446][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 176.832696][ T5167] chnl_net:caif_netlink_parms(): no params data found [ 176.989059][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.996293][ T5167] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.004685][ T5167] device bridge_slave_0 entered promiscuous mode [ 177.014603][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.022020][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.031084][ T5167] device bridge_slave_1 entered promiscuous mode [ 177.106937][ T5167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.132695][ T5167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.201982][ T5167] team0: Port device team_slave_0 added [ 177.231478][ T5167] team0: Port device team_slave_1 added [ 177.237500][ T5193] device syzkaller0 entered promiscuous mode [ 177.291730][ T5193] tipc: Started in network mode [ 177.296648][ T5193] tipc: Node identity 2e8fd72a07b5, cluster identity 4711 [ 177.322457][ T5193] tipc: Enabled bearer , priority 0 [ 177.347011][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.360569][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.430067][ T5167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.482223][ T5196] tipc: Resetting bearer [ 177.533000][ T4244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.577920][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.589392][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.628120][ T5167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.666480][ T5192] tipc: Resetting bearer [ 177.718322][ T5192] tipc: Disabling bearer [ 177.777292][ T5167] device hsr_slave_0 entered promiscuous mode [ 177.784331][ T5167] device hsr_slave_1 entered promiscuous mode [ 178.218885][ T5167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.246120][ T5167] Cannot create hsr debugfs directory [ 178.266291][ T5199] device syzkaller0 entered promiscuous mode [ 178.598206][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 178.995491][ T4244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.095260][ T5214] fuse: Unknown parameter '0x0000000000000004' [ 179.127806][ T4244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.262159][ T5220] loop2: detected capacity change from 0 to 1024 [ 179.321053][ T5220] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.332233][ T5220] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.355977][ T5220] JBD2: no valid journal superblock found [ 179.361965][ T5220] EXT4-fs (loop2): error loading journal [ 179.578904][ T4244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.150435][ T2303] Bluetooth: hci5: command 0x040f tx timeout [ 182.145372][ T4244] tipc: Left network mode [ 182.371928][ T5167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.395549][ T5167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.421471][ T5167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.452600][ T5167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.653355][ T5167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.759512][ T5252] netlink: 'syz.3.217': attribute type 11 has an invalid length. [ 183.216087][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 183.373282][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.414191][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.626446][ T5167] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.213692][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.396080][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.556105][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.563257][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.764492][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.810141][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.937868][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.010913][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.018005][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.186060][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.938413][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.948922][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.957394][ T5255] Bluetooth: hci0: command 0x0406 tx timeout [ 186.964381][ T5255] Bluetooth: hci2: command 0x0406 tx timeout [ 186.989522][ T5255] Bluetooth: hci4: command 0x0406 tx timeout [ 187.045652][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.054277][ T5255] Bluetooth: hci3: command 0x0406 tx timeout [ 187.101075][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.820764][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.291740][ T5167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.537991][ T5167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.581949][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.598135][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.671773][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.680434][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.688868][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.702778][ T5297] loop3: detected capacity change from 0 to 16 [ 190.718853][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.809855][ T5297] erofs: (device loop3): mounted with root inode @ nid 36. [ 192.058360][ T4244] device hsr_slave_0 left promiscuous mode [ 192.085251][ T4244] device hsr_slave_1 left promiscuous mode [ 192.123326][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.146254][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.162029][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.179351][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.187192][ T4244] device bridge_slave_1 left promiscuous mode [ 192.204527][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.238761][ T4244] device bridge_slave_0 left promiscuous mode [ 192.246260][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.297066][ T4244] device veth1_macvtap left promiscuous mode [ 192.310354][ T4244] device veth0_macvtap left promiscuous mode [ 192.318911][ T4244] device veth1_vlan left promiscuous mode [ 193.292928][ T4244] team0 (unregistering): Port device team_slave_1 removed [ 193.316832][ T4244] team0 (unregistering): Port device team_slave_0 removed [ 193.344224][ T4244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.368518][ T4244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.458037][ T4244] bond0 (unregistering): Released all slaves [ 193.584851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.599627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.626574][ T5167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.845970][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.854948][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.875936][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.885934][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.895810][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.903932][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.919634][ T5167] device veth0_vlan entered promiscuous mode [ 193.941992][ T5167] device veth1_vlan entered promiscuous mode [ 193.963823][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.977008][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.985987][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.995556][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.032423][ T5167] device veth0_macvtap entered promiscuous mode [ 194.048393][ T5167] device veth1_macvtap entered promiscuous mode [ 194.070570][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.084896][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.099210][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.115219][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.126470][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.142623][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.155177][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155256][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.182191][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.197215][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.208444][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.219155][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.239344][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.249220][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.278883][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.299349][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.329377][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.339222][ T5167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.355139][ T5167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.368118][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.376846][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.403601][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.414788][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.430628][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.446900][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.455663][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.474411][ T5167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.499346][ T5167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.508079][ T5167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.539323][ T5167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.631769][ T4599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.647779][ T4599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.667584][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.693757][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.706538][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.723854][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.700149][ T5366] device syzkaller0 entered promiscuous mode [ 195.757392][ T5374] netlink: 'syz.4.242': attribute type 11 has an invalid length. [ 195.962616][ T5366] loop5: detected capacity change from 0 to 8 [ 196.051584][ T5366] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 196.120202][ T4260] udevd[4260]: incorrect cramfs checksum on /dev/loop5 [ 196.194825][ T4260] udevd[4260]: incorrect cramfs checksum on /dev/loop5 [ 199.032760][ T5255] Bluetooth: hci5: command 0x0405 tx timeout [ 203.670153][ T5430] loop0: detected capacity change from 0 to 32768 [ 204.005267][ T5430] XFS (loop0): Mounting V5 Filesystem [ 204.272457][ T5430] XFS (loop0): Ending clean mount [ 204.292073][ T5430] XFS (loop0): Quotacheck needed: Please wait. [ 204.548496][ T5449] loop5: detected capacity change from 0 to 32768 [ 204.681971][ T5430] XFS (loop0): Quotacheck: Done. [ 204.979752][ T25] audit: type=1800 audit(1788209564.217:9): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 205.102649][ T5449] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 206.321359][ T5461] jffs2: notice: (5461) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.921532][ T4198] XFS (loop0): Unmounting Filesystem [ 206.924226][ T5474] device syzkaller0 entered promiscuous mode [ 207.046423][ T5474] tipc: Started in network mode [ 207.074268][ T5474] tipc: Node identity 52a1b0092583, cluster identity 4711 [ 207.130971][ T5474] tipc: Enabled bearer , priority 0 [ 207.229598][ T5473] tipc: Resetting bearer [ 207.293429][ T5477] loop3: detected capacity change from 0 to 32768 [ 207.372324][ T5473] tipc: Disabling bearer [ 207.489628][ T5477] XFS (loop3): Mounting V5 Filesystem [ 207.866458][ T5477] XFS (loop3): Ending clean mount [ 207.876260][ T5477] XFS (loop3): Quotacheck needed: Please wait. [ 208.145928][ T5477] XFS (loop3): Quotacheck: Done. [ 208.978061][ T4187] XFS (loop3): Unmounting Filesystem [ 210.212303][ T5507] configfs-gadget gadget: uvc: uvc_function_bind() [ 210.219113][ T5507] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 210.367429][ T5507] udc dummy_udc.0: failed to start g1: -22 [ 211.639490][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.722926][ T5167] ocfs2: Unmounting device (7,5) on (node local) [ 213.447499][ T5540] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 213.624167][ T5550] loop3: detected capacity change from 0 to 512 [ 213.723853][ T5550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.760048][ T5554] device syzkaller0 entered promiscuous mode [ 213.849425][ T5550] EXT4-fs (loop3): 1 truncate cleaned up [ 213.855213][ T5550] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 213.935135][ T5554] tipc: Started in network mode [ 213.945096][ T5554] tipc: Node identity 2e9cbf1b5ca7, cluster identity 4711 [ 214.013102][ T5554] tipc: Enabled bearer , priority 0 [ 215.887207][ T4262] tipc: Node number set to 1916518171 [ 216.308259][ T5553] tipc: Resetting bearer [ 217.250708][ T5553] tipc: Disabling bearer [ 217.555105][ T5584] loop0: detected capacity change from 0 to 512 [ 217.776601][ T5584] EXT4-fs (loop0): Ignoring removed nobh option [ 217.885921][ T5584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 218.275977][ T5584] EXT4-fs (loop0): 1 truncate cleaned up [ 218.328955][ T5584] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 218.717350][ T5591] loop5: detected capacity change from 0 to 4096 [ 221.188494][ T5630] tipc: Enabling of bearer rejected, failed to enable media [ 221.524748][ T5627] loop2: detected capacity change from 0 to 4096 [ 222.442656][ T5627] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 222.716474][ T5660] device syzkaller0 entered promiscuous mode [ 222.867982][ T5627] ntfs3: loop2: Failed to load $Extend. [ 223.143376][ T5657] tipc: Enabled bearer , priority 0 [ 223.321542][ T5656] tipc: Resetting bearer [ 223.458651][ T5656] tipc: Disabling bearer [ 225.756997][ T5685] loop5: detected capacity change from 0 to 32768 [ 225.927867][ T25] audit: type=1800 audit(1788209585.237:10): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.289" name="file1" dev="loop5" ino=65 res=0 errno=0 [ 225.948265][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.131028][ T5690] loop3: detected capacity change from 0 to 512 [ 226.409940][ T5690] EXT4-fs (loop3): Test dummy encryption mode enabled [ 226.416847][ T5690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.428639][ T5690] EXT4-fs (loop3): 1 truncate cleaned up [ 227.489322][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 228.065457][ T5715] jffs2: notice: (5715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.034745][ T5727] device syzkaller0 entered promiscuous mode [ 229.077304][ T5727] tipc: Enabled bearer , priority 0 [ 229.412522][ T5726] tipc: Resetting bearer [ 229.468352][ T5726] tipc: Disabling bearer [ 229.478471][ T5725] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 230.587513][ T5725] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 230.837286][ T1108] tipc: Node number set to 1628976962 [ 230.891447][ T5741] device syzkaller0 entered promiscuous mode [ 230.956972][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.966573][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.014067][ T5756] syz.5.301 uses obsolete (PF_INET,SOCK_PACKET) [ 232.005976][ T5744] tipc: Started in network mode [ 232.139997][ T5744] tipc: Node identity 267e15842e0c, cluster identity 4711 [ 232.168187][ T5744] tipc: Enabled bearer , priority 0 [ 232.374358][ T5776] loop3: detected capacity change from 0 to 1024 [ 233.053355][ T5758] tipc: Resetting bearer [ 233.087255][ T5776] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 233.980323][ T5758] tipc: Disabling bearer [ 234.052488][ T1345] tipc: Node number set to 141694340 [ 234.088884][ T5781] loop5: detected capacity change from 0 to 4096 [ 234.808462][ T5781] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 234.858425][ T5781] ntfs3: loop5: Failed to load $Extend. [ 236.308046][ T5828] device syzkaller0 entered promiscuous mode [ 236.381020][ T5828] tipc: Enabled bearer , priority 0 [ 236.413898][ T5826] tipc: Resetting bearer [ 236.463748][ T5826] tipc: Disabling bearer [ 236.683777][ T5842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.843911][ T5855] loop3: detected capacity change from 0 to 1764 [ 239.269418][ T5859] loop3: detected capacity change from 0 to 32768 [ 240.245538][ T5859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 241.898424][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.327'. [ 242.843384][ T5899] loop5: detected capacity change from 0 to 512 [ 242.922869][ T5899] EXT4-fs (loop5): Test dummy encryption mode enabled [ 242.971309][ T5899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 243.156565][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'. [ 243.460696][ T5899] EXT4-fs (loop5): 1 truncate cleaned up [ 243.512659][ T5899] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 243.975077][ T5917] device syzkaller0 entered promiscuous mode [ 244.304603][ T5922] tipc: Enabled bearer , priority 0 [ 244.622041][ T5916] tipc: Resetting bearer [ 244.696441][ T5916] tipc: Disabling bearer [ 244.858891][ T5932] loop4: detected capacity change from 0 to 32768 [ 245.115709][ T5932] XFS (loop4): Mounting V5 Filesystem [ 245.618340][ T5932] XFS (loop4): Ending clean mount [ 245.636392][ T5932] XFS (loop4): Quotacheck needed: Please wait. [ 246.025784][ T5932] XFS (loop4): Quotacheck: Done. [ 246.574887][ T25] audit: type=1800 audit(1788209605.587:11): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4428 res=0 errno=0 [ 246.626048][ T4197] XFS (loop4): Unmounting Filesystem [ 247.873994][ T5956] misc userio: Invalid payload size [ 247.900491][ T5956] netlink: 120 bytes leftover after parsing attributes in process `syz.0.340'. [ 248.527595][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 249.169190][ T5970] loop0: detected capacity change from 0 to 4096 [ 249.264190][ T5980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.344491][ T5980] loop5: detected capacity change from 0 to 1024 [ 251.029730][ T5980] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.040825][ T5980] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 251.246715][ T5980] JBD2: no valid journal superblock found [ 251.953957][ T5980] EXT4-fs (loop5): error loading journal [ 252.227366][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 253.271528][ T6002] device syzkaller0 entered promiscuous mode [ 253.310923][ T6008] loop3: detected capacity change from 0 to 128 [ 253.380052][ T6002] tipc: Enabled bearer , priority 0 [ 253.522918][ T6000] tipc: Resetting bearer [ 253.733884][ T6016] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6016] [ 254.131940][ T146] Bluetooth: Wrong link type (-22) [ 254.490515][ T6000] tipc: Disabling bearer [ 254.913609][ T6040] loop5: detected capacity change from 0 to 32768 [ 255.187360][ T6040] XFS (loop5): Mounting V5 Filesystem [ 255.524395][ T6065] smc: net device vlan1 applied user defined pnetid SYZ2 [ 255.534468][ T6040] XFS (loop5): Ending clean mount [ 255.571524][ T6040] XFS (loop5): Quotacheck needed: Please wait. [ 255.591833][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.598325][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.922018][ T25] audit: type=1326 audit(1788209616.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c38a42159 code=0x0 [ 257.255067][ T6040] XFS (loop5): Quotacheck: Done. [ 257.255086][ T25] audit: type=1326 audit(1788209616.287:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 257.962880][ T6087] Invalid ELF header magic: != ELF [ 258.441700][ T5167] XFS (loop5): Unmounting Filesystem [ 258.514881][ T25] audit: type=1326 audit(1788209616.287:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 258.559326][ T25] audit: type=1326 audit(1788209616.287:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 258.610949][ T6094] device syzkaller0 entered promiscuous mode [ 258.624698][ T25] audit: type=1326 audit(1788209616.287:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 258.662576][ T6094] tipc: Enabled bearer , priority 0 [ 258.688664][ T6093] loop4: detected capacity change from 0 to 4096 [ 258.715372][ T25] audit: type=1326 audit(1788209616.287:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 258.745500][ T6090] tipc: Resetting bearer [ 258.786230][ T6090] tipc: Disabling bearer [ 258.818002][ T25] audit: type=1326 audit(1788209616.287:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 258.845781][ T6093] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 258.944120][ T6093] ntfs3: loop4: Failed to load $Extend. [ 258.959395][ T25] audit: type=1326 audit(1788209616.287:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 259.061434][ T25] audit: type=1326 audit(1788209616.287:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 259.297289][ T25] audit: type=1326 audit(1788209616.287:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.2.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c38a42159 code=0x7ffc0000 [ 260.090151][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.369'. [ 261.693375][ T6136] loop5: detected capacity change from 0 to 4096 [ 261.797633][ T6136] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 261.919328][ T6136] ntfs3: loop5: Failed to load $Extend. [ 263.423652][ T6160] loop3: detected capacity change from 0 to 4096 [ 263.498926][ T6171] loop5: detected capacity change from 0 to 32768 [ 263.693842][ T6171] XFS (loop5): Mounting V5 Filesystem [ 263.959331][ T6171] XFS (loop5): Ending clean mount [ 263.989660][ T6171] XFS (loop5): Quotacheck needed: Please wait. [ 264.636114][ T6171] XFS (loop5): Quotacheck: Done. [ 265.702993][ T5167] XFS (loop5): Unmounting Filesystem [ 265.981130][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 271.530672][ T6232] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 271.799697][ T6239] loop4: detected capacity change from 0 to 4096 [ 274.224276][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.396'. [ 276.667797][ T6293] futex_wake_op: syz.3.400 tries to shift op by -1; fix this program [ 278.722778][ T6304] ubi0: attaching mtd0 [ 278.736803][ T6304] ubi0: scanning is finished [ 278.741686][ T6304] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 278.811597][ T6304] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 280.589501][ T6313] configfs-gadget gadget: uvc: uvc_function_bind() [ 280.596192][ T6313] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 280.620177][ T6313] udc dummy_udc.0: failed to start g1: -22 [ 280.723843][ T4316] udevd[4316]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.707893][ T6355] device syzkaller0 entered promiscuous mode [ 283.836858][ T6355] tipc: Enabled bearer , priority 0 [ 283.947586][ T6354] tipc: Resetting bearer [ 284.111938][ T6354] tipc: Disabling bearer [ 285.532707][ T6381] loop3: detected capacity change from 0 to 32768 [ 285.692214][ T6381] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 285.701015][ T6381] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 285.863178][ T6381] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 4ms [ 286.131208][ T1111] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 286.485694][ T1111] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 287.643406][ T6398] loop2: detected capacity change from 0 to 512 [ 287.785617][ T6398] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 287.800426][ T6398] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.666948][ T1111] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2181ms [ 288.687564][ T1111] gfs2: fsid=syz:syz.0: jid=0: Done [ 288.695020][ T6381] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 289.120136][ T6381] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 290.604538][ T6418] loop2: detected capacity change from 0 to 32768 [ 290.941101][ T6429] o2cb: This node has not been configured. [ 290.947288][ T6429] o2cb: Cluster check failed. Fix errors before retrying. [ 290.954947][ T6429] (syz.5.434,6429,0):user_dlm_register:675 ERROR: status = -22 [ 290.962719][ T6429] (syz.5.434,6429,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 291.221729][ T6418] XFS (loop2): Mounting V5 Filesystem [ 291.603546][ T6418] XFS (loop2): Ending clean mount [ 291.610377][ T6418] XFS (loop2): Quotacheck needed: Please wait. [ 292.528863][ T6418] XFS (loop2): Quotacheck: Done. [ 293.115430][ T25] kauditd_printk_skb: 60 callbacks suppressed [ 293.115448][ T25] audit: type=1800 audit(1788209652.107:82): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.430" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 293.195665][ T4192] XFS (loop2): Unmounting Filesystem [ 294.333070][ T6456] xt_hashlimit: max too large, truncated to 1048576 [ 295.790432][ T6459] loop3: detected capacity change from 0 to 512 [ 297.168237][ T6459] EXT4-fs (loop3): Test dummy encryption mode enabled [ 297.179455][ T6459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.247253][ T6459] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.443: bad orphan inode 131083 [ 297.384951][ T6484] misc userio: Invalid payload size [ 297.402783][ T6484] netlink: 120 bytes leftover after parsing attributes in process `syz.0.447'. [ 298.141996][ T6459] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 299.264093][ T4226] Bluetooth: hci5: command 0x0406 tx timeout [ 299.315371][ T6459] fscrypt (loop3): Error allocating 'cts(cbc(aes))' transform: -4 [ 300.274798][ T6503] loop2: detected capacity change from 0 to 32768 [ 300.732035][ T6503] XFS (loop2): Mounting V5 Filesystem [ 301.588390][ T6503] XFS (loop2): Ending clean mount [ 301.604767][ T6503] XFS (loop2): Quotacheck needed: Please wait. [ 301.712572][ T6529] loop0: detected capacity change from 0 to 128 [ 301.722558][ T6503] XFS (loop2): Quotacheck: Done. [ 302.254931][ T25] audit: type=1800 audit(1788209661.267:83): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 302.300551][ T4192] XFS (loop2): Unmounting Filesystem [ 302.578684][ T6539] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6539] [ 302.603078][ T146] Bluetooth: Wrong link type (-22) [ 304.883549][ T6561] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 305.692690][ T6578] loop5: detected capacity change from 0 to 32768 [ 306.894671][ T6578] XFS (loop5): Mounting V5 Filesystem [ 308.627280][ T6578] XFS (loop5): Ending clean mount [ 308.634957][ T6578] XFS (loop5): Quotacheck needed: Please wait. [ 308.753625][ T6578] XFS (loop5): Quotacheck: Done. [ 308.875941][ T5167] XFS (loop5): Unmounting Filesystem [ 309.047672][ T6616] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 310.159570][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 312.866496][ T6656] device syzkaller0 entered promiscuous mode [ 312.910384][ T6656] tipc: Enabled bearer , priority 0 [ 313.118278][ T6655] tipc: Resetting bearer [ 314.159984][ T6655] tipc: Disabling bearer [ 315.180242][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 316.506377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802457a800: rx timeout, send abort [ 317.007293][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802457ac00: rx timeout, send abort [ 317.909800][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.916235][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.930284][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802457a800: abort rx timeout. Force session deactivation [ 317.942854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802457ac00: abort rx timeout. Force session deactivation [ 319.725306][ T6717] device syzkaller0 entered promiscuous mode [ 319.764099][ T6717] tipc: Enabled bearer , priority 0 [ 319.790360][ T6716] tipc: Resetting bearer [ 319.821053][ T6716] tipc: Disabling bearer [ 321.224697][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 321.856440][ T6752] loop4: detected capacity change from 0 to 4096 [ 321.977350][ T6753] ipt_REJECT: ECHOREPLY no longer supported. [ 321.995437][ T6753] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.500749][ T6752] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 322.784039][ T6764] input: syz0 as /devices/virtual/input/input17 [ 324.736219][ T6769] xt_hashlimit: max too large, truncated to 1048576 [ 324.748680][ T6769] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 325.464782][ T6770] device syzkaller0 entered promiscuous mode [ 325.476003][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 326.312210][ T6770] tipc: Enabled bearer , priority 0 [ 326.438734][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.523'. [ 326.578842][ T6768] tipc: Resetting bearer [ 326.756135][ T6768] tipc: Disabling bearer [ 327.967170][ T6809] loop4: detected capacity change from 0 to 256 [ 328.526871][ T6812] loop0: detected capacity change from 0 to 512 [ 328.857968][ T19] MTRR: CPU 1: Writing MSR 202 to 2002:0 failed [ 328.864370][ T16] MTRR: CPU 0: Writing MSR 202 to 2002:0 failed [ 332.452119][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 332.751980][ T6848] device syzkaller0 entered promiscuous mode [ 332.798133][ T6848] tipc: Enabled bearer , priority 0 [ 333.019455][ T6846] tipc: Resetting bearer [ 334.410657][ T6846] tipc: Disabling bearer [ 335.355711][ T6868] loop0: detected capacity change from 0 to 2048 [ 335.483704][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 336.658838][ T4260] loop0: p2 p3 p7 [ 337.584578][ T6868] loop0: p2 p3 p7 [ 340.001808][ T6912] loop3: detected capacity change from 0 to 512 [ 340.713853][ T6914] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 340.944195][ T6912] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.074358][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 341.353545][ T6912] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 341.370523][ T6912] Quota error (device loop3): write_blk: dquota write failed [ 341.378430][ T6912] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 341.387602][ T6912] Quota error (device loop3): write_blk: dquota write failed [ 341.395292][ T6912] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 341.405234][ T6912] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.558: Failed to acquire dquot type 1 [ 341.417536][ T6912] EXT4-fs (loop3): 1 truncate cleaned up [ 341.423306][ T6912] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 341.700065][ T6930] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 341.708077][ T6930] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 341.793633][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 341.811371][ T6928] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 341.862220][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 341.877759][ T5521] udevd[5521]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 341.981168][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 342.012436][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 342.032191][ T5521] udevd[5521]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 342.154277][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 342.157563][ T5521] udevd[5521]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 342.174656][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 342.241874][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 342.259875][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.455379][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.915509][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'. [ 348.603171][ T7007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 349.389408][ T7021] loop3: detected capacity change from 0 to 32768 [ 349.436040][ T25] audit: type=1800 audit(1788209708.747:84): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.587" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 349.575320][ T7027] loop4: detected capacity change from 0 to 2048 [ 349.757989][ T7027] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.840297][ T7039] Need at least one configuration in g_uac2. [ 349.848688][ T7027] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.867949][ T7039] udc usbip-vudc.0: failed to start g_uac2: -22 [ 350.154628][ T7047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 350.475754][ T7049] device syzkaller0 entered promiscuous mode [ 354.249366][ T5255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 354.946485][ T7094] device syzkaller0 entered promiscuous mode [ 355.129361][ T5255] usb 3-1: Using ep0 maxpacket: 8 [ 355.259436][ T5255] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 355.285529][ T5255] usb 3-1: config 0 has no interface number 0 [ 355.929907][ T5255] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 355.968765][ T5255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.095496][ T5255] usb 3-1: Product: syz [ 356.100014][ T5255] usb 3-1: Manufacturer: syz [ 356.110569][ T5255] usb 3-1: SerialNumber: syz [ 356.142614][ T5255] usb 3-1: config 0 descriptor?? [ 356.339832][ T7118] configfs-gadget gadget: uvc: uvc_function_bind() [ 356.347589][ T7118] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 356.386380][ T7118] udc dummy_udc.0: failed to start g1: -22 [ 357.721691][ T5255] usb 3-1: USB disconnect, device number 2 [ 358.491266][ T7163] loop0: detected capacity change from 0 to 128 [ 359.375874][ T7163] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.387026][ T7163] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.412792][ T7202] CIFS: Attempting to mount \\127.0.0.1\share [ 362.432844][ T7202] CIFS: VFS: Error connecting to socket. Aborting operation. [ 362.443574][ T7202] CIFS: VFS: cifs_mount failed w/return code = -111 [ 364.101518][ T7223] loop4: detected capacity change from 0 to 512 [ 365.200179][ T7223] EXT4-fs (loop4): Ignoring removed nobh option [ 365.212006][ T7223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 365.480855][ T7223] EXT4-fs (loop4): 1 truncate cleaned up [ 365.489308][ T7223] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 366.345291][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.642'. [ 367.925399][ T7268] device syzkaller0 entered promiscuous mode [ 368.058266][ T7274] jffs2: notice: (7274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 369.063617][ T7284] loop3: detected capacity change from 0 to 512 [ 369.129920][ T7284] EXT4-fs (loop3): Ignoring removed nobh option [ 369.145136][ T7284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.216206][ T7284] EXT4-fs (loop3): 1 truncate cleaned up [ 369.222049][ T7284] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 370.257394][ T7294] loop4: detected capacity change from 0 to 32768 [ 371.510643][ T7294] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 373.046763][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 374.456002][ T7342] loop2: detected capacity change from 0 to 512 [ 375.274540][ T7342] EXT4-fs (loop2): Ignoring removed nobh option [ 375.369383][ T7342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.513913][ T7342] EXT4-fs (loop2): 1 truncate cleaned up [ 375.551162][ T7342] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 376.255092][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.670'. [ 378.673983][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.680358][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.132284][ T7400] loop5: detected capacity change from 0 to 512 [ 379.250125][ T7400] EXT4-fs (loop5): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 379.451679][ T7400] overlayfs: failed to resolve './bus': -2 [ 381.596360][ T7441] loop5: detected capacity change from 0 to 512 [ 381.707262][ T7441] EXT4-fs (loop5): Ignoring removed nobh option [ 381.815322][ T7448] loop4: detected capacity change from 0 to 1024 [ 382.357308][ T7441] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.433308][ T7449] mmap: syz.3.698 (7449) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 382.658590][ T7448] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 382.832735][ T7441] EXT4-fs (loop5): 1 truncate cleaned up [ 382.838423][ T7441] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 382.853232][ T7455] device syzkaller0 entered promiscuous mode [ 384.800739][ T7467] device syzkaller0 entered promiscuous mode [ 386.340430][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 387.223114][ T7501] jffs2: notice: (7501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 388.257291][ T7509] loop4: detected capacity change from 0 to 512 [ 388.271412][ T7509] EXT4-fs (loop4): Ignoring removed nobh option [ 389.109745][ T7509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 389.186101][ T7509] EXT4-fs (loop4): 1 truncate cleaned up [ 389.229408][ T7509] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 390.219759][ T7527] device syzkaller0 entered promiscuous mode [ 394.010235][ T7558] loop2: detected capacity change from 0 to 1024 [ 395.267409][ T7558] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 395.380473][ T7569] jffs2: notice: (7569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.527640][ T7576] loop2: detected capacity change from 0 to 512 [ 396.731728][ T7576] EXT4-fs (loop2): Ignoring removed nobh option [ 396.739055][ T7579] device syzkaller0 entered promiscuous mode [ 396.744607][ T7576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 396.911843][ T7576] EXT4-fs (loop2): 1 truncate cleaned up [ 396.919383][ T7576] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 400.691786][ T7618] loop0: detected capacity change from 0 to 128 [ 400.833757][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.731'. [ 401.388015][ T7630] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7630] [ 401.469523][ T4196] Bluetooth: Wrong link type (-22) [ 402.932717][ T7645] device syzkaller0 entered promiscuous mode [ 404.189467][ T7654] loop0: detected capacity change from 0 to 8 [ 405.083610][ T7654] SQUASHFS error: Unable to read inode 0x11f [ 406.007482][ T7668] loop3: detected capacity change from 0 to 4096 [ 406.113889][ T7674] loop4: detected capacity change from 0 to 512 [ 406.597279][ T7680] futex_wake_op: syz.2.748 tries to shift op by -1; fix this program [ 407.304418][ T7674] EXT4-fs (loop4): Ignoring removed nobh option [ 407.349290][ T7674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 407.378492][ T7668] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 407.410736][ T7674] EXT4-fs (loop4): 1 truncate cleaned up [ 408.049221][ T7674] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 408.056018][ T7668] ntfs3: loop3: Failed to load $Extend. [ 409.635779][ T7706] device syzkaller0 entered promiscuous mode [ 409.934725][ T7708] loop3: detected capacity change from 0 to 4096 [ 410.017783][ T7708] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 410.062897][ T7708] ntfs3: loop3: Failed to load $Extend. [ 414.089547][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'. [ 414.251248][ T7755] device syzkaller0 entered promiscuous mode [ 415.937516][ T7769] misc userio: Invalid payload size [ 415.947808][ T7769] netlink: 120 bytes leftover after parsing attributes in process `syz.3.769'. [ 416.265045][ T7766] loop0: detected capacity change from 0 to 4096 [ 416.339511][ T7766] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 416.343607][ T7773] CIFS: Attempting to mount \\127.0.0.1\share [ 416.459896][ T7766] ntfs3: loop0: Failed to load $Extend. [ 417.214796][ T7775] loop5: detected capacity change from 0 to 32768 [ 417.279401][ T7773] CIFS: VFS: Error connecting to socket. Aborting operation. [ 417.309344][ T7773] CIFS: VFS: cifs_mount failed w/return code = -4 [ 417.517091][ T7775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.772 (7775) [ 417.556120][ T7775] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 417.565922][ T7775] BTRFS info (device loop5): turning on sync discard [ 417.572854][ T7775] BTRFS info (device loop5): setting nodatacow, compression disabled [ 417.580978][ T7775] BTRFS info (device loop5): using free space tree [ 417.587490][ T7775] BTRFS info (device loop5): has skinny extents [ 417.879749][ T7814] loop3: detected capacity change from 0 to 512 [ 419.495773][ T7814] EXT4-fs (loop3): Ignoring removed nobh option [ 419.515746][ T7814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 419.653462][ T7814] EXT4-fs (loop3): 1 truncate cleaned up [ 419.679456][ T7814] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 419.905555][ T7775] BTRFS error (device loop5): open_ctree failed: -22 [ 421.702715][ T7856] misc userio: Invalid payload size [ 421.717846][ T7856] netlink: 120 bytes leftover after parsing attributes in process `syz.2.783'. [ 422.141684][ T7860] using random self ethernet address [ 422.147738][ T7860] using random host ethernet address [ 422.588061][ T7866] autofs4:pid:7866:autofs_fill_super: called with bogus options [ 423.051768][ T7874] CIFS: Attempting to mount \\127.0.0.1\share [ 423.110442][ T7874] CIFS: VFS: Error connecting to socket. Aborting operation. [ 423.149099][ T7874] CIFS: VFS: cifs_mount failed w/return code = -111 [ 425.913391][ T7901] loop2: detected capacity change from 0 to 512 [ 426.761994][ T7902] loop5: detected capacity change from 0 to 40427 [ 427.101534][ T7901] EXT4-fs (loop2): Ignoring removed nobh option [ 427.111333][ T7901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 427.137363][ T7905] loop0: detected capacity change from 0 to 512 [ 427.211187][ T7902] F2FS-fs (loop5): invalid crc value [ 427.242133][ T7905] EXT4-fs (loop0): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 427.265183][ T7901] EXT4-fs (loop2): 1 truncate cleaned up [ 427.282905][ T7902] F2FS-fs (loop5): Found nat_bits in checkpoint [ 427.331238][ T7902] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 427.334348][ T7901] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 427.345107][ T7902] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 427.583949][ T5167] attempt to access beyond end of device [ 427.583949][ T5167] loop5: rw=2049, want=45104, limit=40427 [ 428.289627][ T7913] loop4: detected capacity change from 0 to 64 [ 428.785471][ T25] audit: type=1800 audit(1788209788.097:85): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.799" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 429.885517][ T7934] loop0: detected capacity change from 0 to 512 [ 430.341180][ T7934] EXT4-fs (loop0): Test dummy encryption mode enabled [ 430.405399][ T4197] hfs: node 4:3 still has 1 user(s)! [ 430.465083][ T7934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 430.512751][ T7934] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.805: bad orphan inode 131083 [ 430.560818][ T7934] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 430.601438][ T7934] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 431.626669][ T7946] overlayfs: missing 'workdir' [ 434.023385][ T7962] loop3: detected capacity change from 0 to 512 [ 434.034294][ T7971] loop0: detected capacity change from 0 to 512 [ 434.495056][ T7972] "syz.5.814" (7972) uses obsolete ecb(arc4) skcipher [ 434.529930][ T7972] syz.5.814 sent an empty control message without MSG_MORE. [ 435.235878][ T7971] EXT4-fs (loop0): Ignoring removed nobh option [ 435.281482][ T7962] EXT4-fs (loop3): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 435.311770][ T7971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.444865][ T7962] overlayfs: failed to resolve './bus': -2 [ 435.468332][ T7971] EXT4-fs (loop0): 1 truncate cleaned up [ 435.474448][ T7971] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 437.389133][ T7992] configfs-gadget gadget: Error: no playback and capture channels [ 437.434962][ T7992] udc usbip-vudc.0: failed to start g_uac2: -22 [ 437.585619][ T7995] loop5: detected capacity change from 0 to 512 [ 437.746938][ T7995] EXT4-fs (loop5): Test dummy encryption mode enabled [ 438.583213][ T7995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 438.745851][ T8012] misc userio: Invalid payload size [ 438.783464][ T8012] netlink: 120 bytes leftover after parsing attributes in process `syz.4.820'. [ 439.153783][ T8013] loop0: detected capacity change from 0 to 32768 [ 439.237084][ T8015] ubi0: attaching mtd0 [ 439.250091][ T8015] ubi0: scanning is finished [ 439.254924][ T8015] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 439.451855][ T7995] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.816: bad orphan inode 131083 [ 439.482394][ T8013] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.823 (8013) [ 439.577470][ T7995] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 439.616456][ T8013] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 439.625358][ T8013] BTRFS info (device loop0): turning on sync discard [ 439.632297][ T8013] BTRFS info (device loop0): using free space tree [ 439.639099][ T8013] BTRFS info (device loop0): has skinny extents [ 439.911086][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.917412][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.223965][ T8013] BTRFS info (device loop0): enabling ssd optimizations [ 440.350637][ T25] audit: type=1800 audit(1788209799.657:86): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.823" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 440.567265][ T8015] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 441.868726][ T8051] loop5: detected capacity change from 0 to 512 [ 442.620959][ T8051] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 442.752263][ T8051] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.808685][ T8070] configfs-gadget gadget: Error: no playback and capture channels [ 442.881289][ T8070] udc usbip-vudc.0: failed to start g_uac2: -22 [ 443.949402][ T8078] loop4: detected capacity change from 0 to 512 [ 444.027725][ T8078] EXT4-fs (loop4): Test dummy encryption mode enabled [ 444.047191][ T8078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.066864][ T8078] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.838: bad orphan inode 131083 [ 444.078153][ T8078] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 444.997438][ T8103] loop3: detected capacity change from 0 to 512 [ 445.063295][ T8103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 445.103071][ T8103] EXT4-fs (loop3): 1 truncate cleaned up [ 445.108804][ T8103] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 446.607988][ T8123] loop0: detected capacity change from 0 to 512 [ 446.639490][ T4226] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 447.371673][ T8123] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 447.952989][ T8135] configfs-gadget gadget: uvc: uvc_function_bind() [ 447.959687][ T8135] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 448.603081][ T8135] udc dummy_udc.0: failed to start g1: -22 [ 448.980325][ T8123] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.748112][ T8154] netlink: 84 bytes leftover after parsing attributes in process `syz.3.855'. [ 450.925231][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.329395][ T7834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 451.719503][ T7834] usb 4-1: Using ep0 maxpacket: 8 [ 452.889789][ T7834] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 452.904938][ T7834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.295520][ T7834] usb 4-1: config 0 has no interface number 0 [ 453.309093][ T7834] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 453.334171][ T7834] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 453.463564][ T8177] loop5: detected capacity change from 0 to 1024 [ 454.075512][ T8177] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 454.139601][ T7834] usb 4-1: string descriptor 0 read error: -71 [ 454.145915][ T7834] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 454.265298][ T8186] CIFS: Attempting to mount \\127.0.0.1\share [ 454.276101][ T8186] CIFS: VFS: Error connecting to socket. Aborting operation. [ 454.284592][ T8186] CIFS: VFS: cifs_mount failed w/return code = -111 [ 454.993606][ T7834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.040607][ T7834] usb 4-1: config 0 descriptor?? [ 455.069846][ T7834] usb 4-1: can't set config #0, error -71 [ 455.130304][ T7834] usb 4-1: USB disconnect, device number 2 [ 459.852786][ T25] audit: type=1800 audit(1788209819.167:87): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.873" name="alua_access_type" dev="configfs" ino=51913 res=0 errno=0 [ 459.889322][ T8227] Unable to extract alua_access_type [ 460.761891][ T8246] loop4: detected capacity change from 0 to 512 [ 460.853061][ T8246] EXT4-fs (loop4): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 463.308458][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 463.318021][ T8269] netlink: 288 bytes leftover after parsing attributes in process `syz.2.870'. [ 464.890708][ T8273] device syzkaller0 entered promiscuous mode [ 464.963617][ T8272] Mass Storage Function, version: 2009/09/11 [ 464.970016][ T8272] LUN: removable file: (no medium) [ 469.612465][ T8294] device syzkaller0 entered promiscuous mode [ 470.072841][ T8294] tipc: Enabled bearer , priority 0 [ 470.263287][ T8293] tipc: Resetting bearer [ 470.536817][ T8293] tipc: Disabling bearer [ 471.832970][ T8308] loop3: detected capacity change from 0 to 32768 [ 471.919159][ T8314] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 472.152974][ T8308] XFS (loop3): Mounting V5 Filesystem [ 473.310512][ T8308] XFS (loop3): Ending clean mount [ 473.666226][ T8328] autofs4:pid:8328:autofs_fill_super: called with bogus options [ 475.430011][ T4187] XFS (loop3): Unmounting Filesystem [ 476.654737][ T8340] CIFS: Attempting to mount \\127.0.0.1\share [ 476.664593][ T8340] CIFS: VFS: Error connecting to socket. Aborting operation. [ 476.672372][ T8340] CIFS: VFS: cifs_mount failed w/return code = -111 [ 477.581306][ T8347] socket: no more sockets [ 479.474095][ T8355] loop0: detected capacity change from 0 to 8 [ 480.650007][ T8355] SQUASHFS error: Unable to read inode 0xe3 [ 480.743219][ T8364] loop3: detected capacity change from 0 to 24 [ 480.815154][ T8366] loop5: detected capacity change from 0 to 40427 [ 480.845684][ T8366] F2FS-fs (loop5): invalid crc value [ 480.921452][ T8366] F2FS-fs (loop5): Found nat_bits in checkpoint [ 480.930043][ T8364] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 480.960498][ T8366] F2FS-fs (loop5): Start checkpoint disabled! [ 481.010468][ T8366] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 481.179615][ T8364] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 481.271213][ T8374] netlink: 'syz.5.899': attribute type 1 has an invalid length. [ 482.330202][ T8377] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 483.216676][ T4405] attempt to access beyond end of device [ 483.216676][ T4405] loop5: rw=2049, want=40976, limit=40427 [ 484.411362][ T146] Bluetooth: Wrong link type (-22) [ 489.921848][ T8417] loop4: detected capacity change from 0 to 1024 [ 490.589443][ T8417] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 493.151498][ T8436] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 493.546457][ T8443] Device name cannot be null; rc = [-22] [ 493.561230][ T8443] overlayfs: overlapping lowerdir path [ 493.613808][ T8444] overlayfs: overlapping lowerdir path [ 493.982005][ T8454] loop5: detected capacity change from 0 to 128 [ 496.619240][ T8481] loop2: detected capacity change from 0 to 1024 [ 497.335347][ T8481] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 497.477977][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f02a400: rx timeout, send abort [ 497.978129][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616db000: rx timeout, send abort [ 497.986461][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f02a400: abort rx timeout. Force session deactivation [ 498.622098][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616db000: abort rx timeout. Force session deactivation [ 501.350977][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.357281][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.899908][ T8513] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 501.933165][ T8509] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 501.959020][ T8509] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 502.108349][ T8513] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 502.120613][ T8513] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 502.136957][ T8513] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 502.371544][ T8513] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 502.383425][ T8513] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 502.398695][ T8513] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 503.575973][ T8534] loop3: detected capacity change from 0 to 1024 [ 503.785020][ T8534] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 503.925828][ T8542] loop4: detected capacity change from 0 to 128 [ 504.276655][ T8547] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8547] [ 504.322772][ T146] Bluetooth: Wrong link type (-22) [ 505.446342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b1f000: rx timeout, send abort [ 505.946443][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b1e400: rx timeout, send abort [ 505.954903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b1f000: abort rx timeout. Force session deactivation [ 506.455903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b1e400: abort rx timeout. Force session deactivation [ 508.351729][ T8587] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 508.376218][ T8587] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 509.507416][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806262f000: rx timeout, send abort [ 510.007564][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029806400: rx timeout, send abort [ 510.030872][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806262f000: abort rx timeout. Force session deactivation [ 510.524448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029806400: abort rx timeout. Force session deactivation [ 513.337325][ T8615] loop3: detected capacity change from 0 to 128 [ 513.700826][ T8617] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 514.020666][ T8625] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8625] [ 514.521843][ T146] Bluetooth: Wrong link type (-22) [ 514.818956][ T8617] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 520.213664][ T8674] loop2: detected capacity change from 0 to 128 [ 520.270716][ T8675] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 521.371426][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061de8400: Timeout. Failed to send simple message. [ 522.555467][ T8686] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8686] [ 522.583075][ T146] Bluetooth: Wrong link type (-22) [ 524.493004][ T8701] [ 524.495363][ T8701] ====================================================== [ 524.500026][ T8706] device syzkaller0 entered promiscuous mode [ 524.502372][ T8701] WARNING: possible circular locking dependency detected [ 524.502455][ T8701] syzkaller #0 Not tainted [ 524.513710][ T8706] tipc: Enabling of bearer rejected, failed to enable media [ 524.515350][ T8701] ------------------------------------------------------ [ 524.515360][ T8701] syz.5.988/8701 is trying to acquire lock: [ 524.515369][ T8701] ffffffff8cece6b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_frame_w_width_store+0x110/0x370 [ 524.551896][ T8701] [ 524.551896][ T8701] but task is already holding lock: [ 524.559260][ T8701] ffff88802404c378 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 524.568575][ T8701] [ 524.568575][ T8701] which lock already depends on the new lock. [ 524.568575][ T8701] [ 524.578964][ T8701] [ 524.578964][ T8701] the existing dependency chain (in reverse order) is: [ 524.588045][ T8701] [ 524.588045][ T8701] -> #3 (&p->frag_sem){++++}-{3:3}: [ 524.595412][ T8701] down_write_killable+0x46/0x90 [ 524.600863][ T8701] configfs_rmdir+0x3e0/0x980 [ 524.606040][ T8701] vfs_rmdir+0x19d/0x410 [ 524.610783][ T8701] do_rmdir+0x27f/0x710 [ 524.615438][ T8701] __x64_sys_unlinkat+0xc0/0xe0 [ 524.620790][ T8701] do_syscall_64+0x4c/0xa0 [ 524.625706][ T8701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.632099][ T8701] [ 524.632099][ T8701] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 524.640766][ T8701] down_write+0x38/0x60 [ 524.645424][ T8701] configfs_depend_item_unlocked+0x14f/0x430 [ 524.651906][ T8701] usbg_make_tpg+0x1f3/0x580 [ 524.656996][ T8701] target_fabric_make_tpg+0xa0/0x6d0 [ 524.662781][ T8701] configfs_mkdir+0x511/0x9e0 [ 524.667958][ T8701] vfs_mkdir+0x386/0x570 [ 524.672703][ T8701] do_mkdirat+0x1dd/0x5c0 [ 524.677534][ T8701] __x64_sys_mkdir+0x6a/0x80 [ 524.682625][ T8701] do_syscall_64+0x4c/0xa0 [ 524.687544][ T8701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.693938][ T8701] [ 524.693938][ T8701] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 524.701555][ T8701] __mutex_lock_common+0x1e5/0x2400 [ 524.707279][ T8701] mutex_lock_nested+0x17/0x20 [ 524.712563][ T8701] tcm_set_name+0x26/0x90 [ 524.717391][ T8701] function_make+0x195/0x350 [ 524.722478][ T8701] configfs_mkdir+0x511/0x9e0 [ 524.727656][ T8701] vfs_mkdir+0x386/0x570 [ 524.732398][ T8701] do_mkdirat+0x1dd/0x5c0 [ 524.737224][ T8701] __x64_sys_mkdir+0x6a/0x80 [ 524.742320][ T8701] do_syscall_64+0x4c/0xa0 [ 524.747254][ T8701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.753646][ T8701] [ 524.753646][ T8701] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 524.761872][ T8701] __lock_acquire+0x2c66/0x7b50 [ 524.767227][ T8701] lock_acquire+0x19e/0x400 [ 524.772238][ T8701] __mutex_lock_common+0x1e5/0x2400 [ 524.777939][ T8701] mutex_lock_nested+0x17/0x20 [ 524.783202][ T8701] uvcg_frame_w_width_store+0x110/0x370 [ 524.789250][ T8701] configfs_write_iter+0x30b/0x400 [ 524.794859][ T8701] vfs_write+0x748/0xd70 [ 524.799600][ T8701] ksys_write+0x153/0x260 [ 524.804428][ T8701] do_syscall_64+0x4c/0xa0 [ 524.809341][ T8701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.815734][ T8701] [ 524.815734][ T8701] other info that might help us debug this: [ 524.815734][ T8701] [ 524.825937][ T8701] Chain exists of: [ 524.825937][ T8701] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#23 --> &p->frag_sem [ 524.825937][ T8701] [ 524.840334][ T8701] Possible unsafe locking scenario: [ 524.840334][ T8701] [ 524.847847][ T8701] CPU0 CPU1 [ 524.853192][ T8701] ---- ---- [ 524.858531][ T8701] lock(&p->frag_sem); [ 524.862667][ T8701] lock(&sb->s_type->i_mutex_key#23); [ 524.870625][ T8701] lock(&p->frag_sem); [ 524.877277][ T8701] lock(gadget_subsys.su_mutex); [ 524.882278][ T8701] [ 524.882278][ T8701] *** DEADLOCK *** [ 524.882278][ T8701] [ 524.890397][ T8701] 4 locks held by syz.5.988/8701: [ 524.895397][ T8701] #0: ffff8880295985f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 524.904595][ T8701] #1: ffff888141bce460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 524.913534][ T8701] #2: ffff888060951e88 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 524.923336][ T8701] #3: ffff88802404c378 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 524.933052][ T8701] [ 524.933052][ T8701] stack backtrace: [ 524.938949][ T8701] CPU: 0 PID: 8701 Comm: syz.5.988 Not tainted syzkaller #0 [ 524.946219][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.956286][ T8701] Call Trace: [ 524.959566][ T8701] [ 524.962488][ T8701] dump_stack_lvl+0x188/0x250 [ 524.967172][ T8701] ? load_image+0x410/0x410 [ 524.971665][ T8701] ? show_regs_print_info+0x20/0x20 [ 524.976853][ T8701] ? print_circular_bug+0x12b/0x1a0 [ 524.982037][ T8701] check_noncircular+0x296/0x330 [ 524.986959][ T8701] ? add_chain_block+0x9b0/0x9b0 [ 524.991877][ T8701] ? lockdep_lock+0xf1/0x1f0 [ 524.996451][ T8701] ? __kernel_text_address+0x9a/0x100 [ 525.001806][ T8701] ? mark_lock+0x94/0x320 [ 525.006113][ T8701] ? _find_first_zero_bit+0xd1/0xf0 [ 525.011290][ T8701] __lock_acquire+0x2c66/0x7b50 [ 525.016129][ T8701] ? __lock_acquire+0x13dc/0x7b50 [ 525.021139][ T8701] ? verify_lock_unused+0x140/0x140 [ 525.026337][ T8701] ? __reset_page_owner+0x180/0x180 [ 525.031542][ T8701] lock_acquire+0x19e/0x400 [ 525.036039][ T8701] ? uvcg_frame_w_width_store+0x110/0x370 [ 525.041771][ T8701] ? __might_sleep+0xf0/0xf0 [ 525.046344][ T8701] ? read_lock_is_recursive+0x10/0x10 [ 525.051712][ T8701] __mutex_lock_common+0x1e5/0x2400 [ 525.056913][ T8701] ? uvcg_frame_w_width_store+0x110/0x370 [ 525.062715][ T8701] ? __might_fault+0xb7/0x110 [ 525.067381][ T8701] ? __lock_acquire+0x7b50/0x7b50 [ 525.072389][ T8701] ? uvcg_frame_w_width_store+0x110/0x370 [ 525.078114][ T8701] ? mutex_lock_io_nested+0x60/0x60 [ 525.083337][ T8701] ? _kstrtoull+0x3cb/0x4e0 [ 525.087841][ T8701] mutex_lock_nested+0x17/0x20 [ 525.092592][ T8701] uvcg_frame_w_width_store+0x110/0x370 [ 525.098120][ T8701] ? uvcg_frame_w_width_show+0x180/0x180 [ 525.103851][ T8701] configfs_write_iter+0x30b/0x400 [ 525.108959][ T8701] ? uvcg_frame_w_width_show+0x180/0x180 [ 525.114590][ T8701] vfs_write+0x748/0xd70 [ 525.118831][ T8701] ? file_end_write+0x250/0x250 [ 525.123670][ T8701] ? mutex_lock_nested+0x17/0x20 [ 525.128601][ T8701] ? __fdget_pos+0x2bf/0x370 [ 525.133180][ T8701] ? ksys_write+0x70/0x260 [ 525.137596][ T8701] ksys_write+0x153/0x260 [ 525.141908][ T8701] ? __ia32_sys_read+0x80/0x80 [ 525.146658][ T8701] ? lockdep_hardirqs_on+0x94/0x140 [ 525.151843][ T8701] do_syscall_64+0x4c/0xa0 [ 525.156238][ T8701] ? clear_bhb_loop+0x30/0x80 [ 525.160894][ T8701] ? clear_bhb_loop+0x30/0x80 [ 525.165553][ T8701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.171459][ T8701] RIP: 0033:0x7f5b98793159 [ 525.175858][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.195442][ T8701] RSP: 002b:00007f5b969eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.203834][ T8701] RAX: ffffffffffffffda RBX: 00007f5b98a1afa0 RCX: 00007f5b98793159 [ 525.211787][ T8701] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000004 [ 525.219743][ T8701] RBP: 00007f5b9882a024 R08: 0000000000000000 R09: 0000000000000000 [ 525.227722][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.235687][ T8701] R13: 00007f5b98a1b038 R14: 00007f5b98a1afa0 R15: 00007ffd8bd73278 [ 525.243653][ T8701]