last executing test programs: 2m8.9840381s ago: executing program 3 (id=184): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m8.583116313s ago: executing program 3 (id=186): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71", 0xd, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 2m7.556770811s ago: executing program 3 (id=188): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000800)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 2m7.180196469s ago: executing program 3 (id=190): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 2m5.732118175s ago: executing program 3 (id=191): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000400)={[{@auto_da_alloc}, {@nogrpid}]}, 0x1, 0x50f, &(0x7f0000000940)="$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") chdir(&(0x7f0000000140)='./bus\x00') bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={0x1, 0x6, 0x10000, 0x800004, 'syz0\x00', 0x109a7}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023892) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 1m53.220298262s ago: executing program 3 (id=206): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x400000002000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) unshare(0x26020480) 1m37.426831982s ago: executing program 32 (id=206): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x400000002000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) unshare(0x26020480) 26.293623062s ago: executing program 4 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x75, 0xa, 0x9, 0xe}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000001580)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x29}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x101f}}, 0x0}}], 0x0, 0x0, 0x0}) 21.428284702s ago: executing program 0 (id=333): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253", 0x99) socket$kcm(0x2, 0x7, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0) 19.013349623s ago: executing program 4 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r4, 0x0, 0x0) 18.16424287s ago: executing program 0 (id=338): socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) 17.621176386s ago: executing program 4 (id=339): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x30, 0x39, 0x30, 0x32]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000540), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0xc6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x33]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x30, 0x66, 0x30, 0x30, 0x61, 0x30, 0x7, 0x33, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x38, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00113c33445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000a00)={'fscrypt:', @auto=[0x38, 0x62, 0x39, 0x64, 0x1, 0x65, 0x32, 0x66, 0x32, 0x65, 0x62, 0x36, 0x35, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "0011ffffffffffffffe0aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x31, 0x30, 0x61, 0x30, 0x30, 0x30, 0x34, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aa8899aabbccddeeff00112233445566778899aabbccddeeff07002233445566778899aabbccddeeff00000b00", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 13.60311817s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x86) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) pivot_root(0x0, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)) 12.189212638s ago: executing program 0 (id=342): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x150, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x6811221d, 0x5, 0x8000000000000003, 0x200000200000003, 0x100000000}, {0x4000a, 0xfffffffffffffffd, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x2, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xb9, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x75, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) 12.083150793s ago: executing program 4 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000b00)=@ethtool_drvinfo={0x3, "d9f92f6b07166fdd87f15ed7d84270091dd2fa40db2394f144c7e253da047c02", "67d98d40203c3dc1d125cbce631f483ae997d2353b37d5e654d4bb685e4c5aa2", "5f29115e8239e36cfb525847d45869a202c3f39d2755a0bf909cdf3fed375bca", "dac45dadc89d77b2ecccc7b2665c1b3053ca929be98aadf104697d4e3748a732", "ee81a1abac84af6a6500000000d50fb848b60466404f566aa68602491b73a4ab", "24e33b1b0eb51f8b5e7f4541", 0x7ff, 0xfffffff4, 0x5, 0x8, 0x1}}) 11.983582756s ago: executing program 1 (id=344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x800401, 0x0) chdir(0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0xff80) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x100, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 11.016230071s ago: executing program 0 (id=345): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001440), 0x80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x6) memfd_secret(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) 9.970886193s ago: executing program 1 (id=347): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) 7.716192428s ago: executing program 1 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) 5.285977742s ago: executing program 2 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) sched_setattr(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) unshare(0x4000400) fallocate(0xffffffffffffffff, 0x0, 0xb237, 0x10003) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 4.890376384s ago: executing program 0 (id=352): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, 0x0) getresgid(&(0x7f00000004c0), 0x0, &(0x7f0000000580)) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0901040000c000001c00128009000100626f6e64000000000c00028005000100050000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x8000, 0x112) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x86c, 0x1, 0x2, 0xd59f81, 0x19f2, 0x3f, 0x19f2, 0x3, 0x5, 0x2800, 0x9, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x1}, 0xd0, 0x9}}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x60044084) 4.832203307s ago: executing program 2 (id=353): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71", 0xd, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 4.767454042s ago: executing program 1 (id=354): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.4527096s ago: executing program 2 (id=355): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71", 0xd, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1.94027779s ago: executing program 2 (id=356): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1.940003519s ago: executing program 4 (id=357): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.604929547s ago: executing program 0 (id=358): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71", 0xd, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1.342122338s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, 0x0, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmmsg$inet(r5, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) 1.33731797s ago: executing program 2 (id=360): chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) 156.731174ms ago: executing program 1 (id=361): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x5, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf27, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x0, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=362): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900), 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts. [ 76.900262][ T5764] cgroup: Unknown subsys name 'net' [ 77.002246][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.644826][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.277169][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.286248][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.302094][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.310040][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.318321][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.326227][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.334160][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.341872][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.359781][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.369621][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.377241][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.377703][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.392429][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.394218][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.401420][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.408885][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.415726][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.421712][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.430782][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.436127][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.442269][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.456101][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.463769][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.480471][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.964886][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.063516][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.075845][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.138805][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.209019][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.217431][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.225006][ T5775] bridge_slave_0: entered allmulticast mode [ 81.232097][ T5775] bridge_slave_0: entered promiscuous mode [ 81.272612][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.279962][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.289119][ T5775] bridge_slave_1: entered allmulticast mode [ 81.296339][ T5775] bridge_slave_1: entered promiscuous mode [ 81.377293][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.392429][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.402805][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.410150][ T5777] bridge_slave_0: entered allmulticast mode [ 81.417763][ T5777] bridge_slave_0: entered promiscuous mode [ 81.425514][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.432675][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.440625][ T5778] bridge_slave_0: entered allmulticast mode [ 81.448288][ T5778] bridge_slave_0: entered promiscuous mode [ 81.458289][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.491253][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.498766][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.506424][ T5777] bridge_slave_1: entered allmulticast mode [ 81.514106][ T5777] bridge_slave_1: entered promiscuous mode [ 81.521090][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.528476][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.535783][ T5778] bridge_slave_1: entered allmulticast mode [ 81.543184][ T5778] bridge_slave_1: entered promiscuous mode [ 81.563990][ T5775] team0: Port device team_slave_0 added [ 81.614744][ T5775] team0: Port device team_slave_1 added [ 81.639329][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.647376][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.654642][ T5776] bridge_slave_0: entered allmulticast mode [ 81.661848][ T5776] bridge_slave_0: entered promiscuous mode [ 81.692316][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.705447][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.717361][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.726846][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.736278][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.743939][ T5776] bridge_slave_1: entered allmulticast mode [ 81.750882][ T5776] bridge_slave_1: entered promiscuous mode [ 81.758485][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.768633][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.795119][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.819205][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.850004][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.857095][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.887347][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.926879][ T5778] team0: Port device team_slave_0 added [ 81.949235][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.962396][ T5778] team0: Port device team_slave_1 added [ 81.981529][ T5777] team0: Port device team_slave_0 added [ 81.992300][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.024625][ T5777] team0: Port device team_slave_1 added [ 82.053239][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.060237][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.086573][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.115669][ T5776] team0: Port device team_slave_0 added [ 82.134925][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.142015][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.168210][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.193799][ T5776] team0: Port device team_slave_1 added [ 82.200308][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.207737][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.233960][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.247780][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.254805][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.280910][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.305187][ T5775] hsr_slave_0: entered promiscuous mode [ 82.311608][ T5775] hsr_slave_1: entered promiscuous mode [ 82.344874][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.351868][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.378457][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.391402][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.398762][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.425216][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.473884][ T5777] hsr_slave_0: entered promiscuous mode [ 82.480935][ T5777] hsr_slave_1: entered promiscuous mode [ 82.487520][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.496476][ T5777] Cannot create hsr debugfs directory [ 82.503956][ T5788] Bluetooth: hci2: command tx timeout [ 82.583803][ T5788] Bluetooth: hci3: command tx timeout [ 82.583826][ T5781] Bluetooth: hci0: command tx timeout [ 82.584264][ T5789] Bluetooth: hci1: command tx timeout [ 82.611300][ T5778] hsr_slave_0: entered promiscuous mode [ 82.618676][ T5778] hsr_slave_1: entered promiscuous mode [ 82.625301][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.632886][ T5778] Cannot create hsr debugfs directory [ 82.650760][ T5776] hsr_slave_0: entered promiscuous mode [ 82.657787][ T5776] hsr_slave_1: entered promiscuous mode [ 82.664454][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.672016][ T5776] Cannot create hsr debugfs directory [ 83.090666][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.121456][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.153069][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.184855][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.198932][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.211013][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.229615][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.241865][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.319486][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.336760][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.353573][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.367912][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.498344][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.515781][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.527163][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.538199][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.616912][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.644220][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.674117][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.699621][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.730875][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.738425][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.751351][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.758512][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.788546][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.795790][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.810405][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.817725][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.869262][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.950229][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.981077][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.997726][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.030747][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.052560][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.059852][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.070542][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.077780][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.130378][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.265808][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.311122][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.318331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.362494][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.369718][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.491712][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.539122][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.550182][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.583823][ T5789] Bluetooth: hci2: command tx timeout [ 84.664075][ T5789] Bluetooth: hci1: command tx timeout [ 84.664334][ T5788] Bluetooth: hci3: command tx timeout [ 84.669531][ T5789] Bluetooth: hci0: command tx timeout [ 84.685326][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.771955][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.812806][ T5776] veth0_vlan: entered promiscuous mode [ 84.875004][ T5776] veth1_vlan: entered promiscuous mode [ 84.926751][ T5775] veth0_vlan: entered promiscuous mode [ 84.947119][ T5777] veth0_vlan: entered promiscuous mode [ 84.975030][ T5777] veth1_vlan: entered promiscuous mode [ 84.988039][ T5775] veth1_vlan: entered promiscuous mode [ 85.004500][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.017626][ T5776] veth0_macvtap: entered promiscuous mode [ 85.049519][ T5776] veth1_macvtap: entered promiscuous mode [ 85.118837][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.131206][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.155094][ T5778] veth0_vlan: entered promiscuous mode [ 85.172266][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.185128][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.194343][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.203259][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.223210][ T5775] veth0_macvtap: entered promiscuous mode [ 85.231001][ T5777] veth0_macvtap: entered promiscuous mode [ 85.252943][ T5777] veth1_macvtap: entered promiscuous mode [ 85.284906][ T5778] veth1_vlan: entered promiscuous mode [ 85.293780][ T5775] veth1_macvtap: entered promiscuous mode [ 85.334008][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.345775][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.359387][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.381134][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.402825][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.415631][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.452005][ T5778] veth0_macvtap: entered promiscuous mode [ 85.475860][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.486842][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.496875][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.507898][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.520086][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.530117][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.539065][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.548759][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.557628][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.590783][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.602641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.611468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.619143][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.619182][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.619198][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.630525][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.667874][ T5778] veth1_macvtap: entered promiscuous mode [ 85.708639][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.719386][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.728511][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737313][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.761120][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.775296][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.784657][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.796249][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.807840][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.819733][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.834307][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.844891][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.856280][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.892160][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.908221][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.919005][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.930607][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.941938][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.953238][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.975221][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.025969][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.037846][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.047785][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.057159][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.191093][ T5836] syz.0.1[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.203326][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.211195][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.260183][ T5836] loop0: detected capacity change from 0 to 512 [ 86.309970][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.393048][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.511037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.561476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.663859][ T5789] Bluetooth: hci2: command tx timeout [ 86.744617][ T5789] Bluetooth: hci0: command tx timeout [ 86.754150][ T5789] Bluetooth: hci3: command tx timeout [ 86.761014][ T5789] Bluetooth: hci1: command tx timeout [ 87.460283][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.496869][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.226501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.293157][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.308795][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.614314][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.282918][ C0] sched: RT throttling activated [ 89.291941][ T5788] Bluetooth: hci2: command tx timeout [ 89.302527][ T5788] Bluetooth: hci1: command tx timeout [ 89.309325][ T5788] Bluetooth: hci3: command tx timeout [ 90.017015][ T5788] Bluetooth: hci0: command tx timeout [ 91.511473][ T5860] loop0: detected capacity change from 0 to 32768 [ 91.618147][ T5860] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.690156][ T5871] loop3: detected capacity change from 0 to 512 [ 91.749519][ T5860] XFS (loop0): Ending clean mount [ 91.816155][ T5860] XFS (loop0): Quotacheck needed: Please wait. [ 91.949137][ T5871] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.4: corrupted in-inode xattr: invalid ea_ino [ 92.022654][ T5871] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 92.156280][ T787] cfg80211: failed to load regulatory.db [ 92.160381][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.176944][ T5879] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 92.176944][ T5879] [ 92.191302][ T5879] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 92.205374][ T5879] CIFS: Attempting to mount //127.0.0.1/share [ 92.240945][ T5879] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.249346][ T5879] CIFS: VFS: cifs_mount failed w/return code = -111 [ 92.295928][ T5860] XFS (loop0): Quotacheck: Done. [ 92.483325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.321687][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.649031][ T5889] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 93.677367][ T5889] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 94.633526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.401095][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.427345][ T5899] syz.2.14: attempt to access beyond end of device [ 96.427345][ T5899] loop2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 96.520127][ T5899] F2FS-fs (loop2): Unable to read 1th superblock [ 96.580886][ T5899] syz.2.14: attempt to access beyond end of device [ 96.580886][ T5899] loop2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 96.605296][ T5899] F2FS-fs (loop2): Unable to read 2th superblock [ 97.230849][ T9] smpboot: CPU 1 is now offline [ 102.368458][ T5919] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 103.130268][ T5925] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 105.479856][ T5939] loop0: detected capacity change from 0 to 1024 [ 105.498558][ T5939] EXT4-fs (loop0): filesystem is read-only [ 105.504736][ T5939] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 1280 [ 105.573571][ T5929] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.438140][ T5943] loop0: detected capacity change from 0 to 32768 [ 106.470756][ T5943] loop1: detected capacity change from 0 to 65536 [ 107.859478][ T28] audit: type=1800 audit(1790319113.007:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 108.200805][ T28] audit: type=1800 audit(1790319113.337:3): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="UDC" dev="configfs" ino=7800 res=0 errno=0 [ 110.288932][ T5961] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 110.771156][ T5963] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.899994][ T5964] gretap1: entered promiscuous mode [ 110.952837][ T5943] device-mapper: table: 248:0: thin-pool: Error allocating cell sort array (-ENOMEM) [ 111.028373][ T5943] device-mapper: ioctl: error adding target to table [ 111.085675][ T5961] macvlan2: entered promiscuous mode [ 111.243715][ T5961] macvlan2: entered allmulticast mode [ 115.151474][ T5980] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 116.073686][ T5993] syzkaller0: entered promiscuous mode [ 116.105787][ T5993] syzkaller0: entered allmulticast mode [ 118.131243][ T6005] loop2: detected capacity change from 0 to 512 [ 118.192568][ T6005] EXT4-fs (loop2): unable to read superblock [ 118.459297][ T5929] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.511559][ T6015] sctp: failed to load transform for md5: -2 [ 123.226911][ T6034] loop2: detected capacity change from 0 to 256 [ 124.674879][ T6034] ======================================================= [ 124.674879][ T6034] WARNING: The mand mount option has been deprecated and [ 124.674879][ T6034] and is ignored by this kernel. Remove the mand [ 124.674879][ T6034] option from the mount to silence this warning. [ 124.674879][ T6034] ======================================================= [ 125.405928][ T6036] loop3: detected capacity change from 0 to 32768 [ 125.470317][ T6036] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.618996][ T6036] XFS (loop3): Ending clean mount [ 125.627530][ T6036] XFS (loop3): Quotacheck needed: Please wait. [ 125.740598][ T6036] XFS (loop3): Quotacheck: Done. [ 125.932800][ T6046] loop2: detected capacity change from 0 to 164 [ 126.436574][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.324845][ T6052] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.497897][ T6057] loop2: detected capacity change from 0 to 164 [ 127.816784][ T6059] loop3: detected capacity change from 0 to 128 [ 128.040781][ T6059] EXT4-fs (loop3): Test dummy encryption mode enabled [ 128.397605][ T6059] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.505890][ T6059] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.071477][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.323926][ T6074] syzkaller0: entered promiscuous mode [ 129.628464][ T6074] syzkaller0: entered allmulticast mode [ 131.184339][ T6083] serio: Serial port ttyS3 [ 131.713793][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.720460][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.743971][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 131.776038][ T6089] loop3: detected capacity change from 0 to 512 [ 131.836007][ T6089] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.59: corrupted in-inode xattr: invalid ea_ino [ 131.895562][ T6092] loop1: detected capacity change from 0 to 164 [ 131.934926][ T6089] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.59: couldn't read orphan inode 15 (err -117) [ 132.024088][ T6089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.065878][ T28] audit: type=1800 audit(1790319141.217:4): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 141.101199][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'. [ 144.464576][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.712303][ T6129] loop3: detected capacity change from 0 to 512 [ 144.757532][ T6129] EXT4-fs: inline encryption not supported [ 144.836014][ T6129] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.899670][ T6129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.975717][ T6129] EXT4-fs (loop3): Invalid default hash set in the superblock [ 146.229869][ T6136] Zero length message leads to an empty skb [ 146.269864][ T6137] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 146.462688][ T6136] nvmet_rdma: address family 255 not supported [ 146.704250][ T6142] loop1: detected capacity change from 0 to 128 [ 146.794782][ T6142] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.887190][ T6142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.581295][ T6174] capability: warning: `syz.2.86' uses deprecated v2 capabilities in a way that may be insecure [ 156.432103][ T6192] sctp: failed to load transform for md5: -2 [ 160.205856][ T28] audit: type=1326 audit(1790319165.287:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.3.84" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43d79e159 code=0x0 [ 162.463168][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 162.811948][ T6222] mmap: syz.1.97 (6222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.872966][ T5854] IPVS: starting estimator thread 0... [ 165.023079][ T6226] IPVS: using max 26 ests per chain, 62400 per kthread [ 166.423236][ T6235] Mass Storage Function, version: 2009/09/11 [ 166.429663][ T6235] LUN: removable file: (no medium) [ 166.563754][ T6235] LUN: removable file: (no medium) [ 166.826336][ T6232] loop1: detected capacity change from 0 to 1024 [ 166.885168][ T6232] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.009792][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.354920][ T6246] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 169.215484][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.327113][ T6253] bond1: (slave gretap1): making interface the new active one [ 169.378791][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.610787][ T6257] loop3: detected capacity change from 0 to 32768 [ 169.635408][ T6257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.104 (6257) [ 169.659676][ T6257] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.670327][ T6257] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.679035][ T6257] BTRFS info (device loop3): use zlib compression, level 3 [ 169.686316][ T6257] BTRFS info (device loop3): turning on sync discard [ 169.694108][ T6257] BTRFS info (device loop3): using free space tree [ 169.729866][ T6253] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 169.897715][ T6257] BTRFS info (device loop3): enabling ssd optimizations [ 170.000931][ T6253] syz.0.101 (6253) used greatest stack depth: 18600 bytes left [ 170.584918][ T6278] xt_policy: output policy not valid in PREROUTING and INPUT [ 171.240497][ T6286] xt_policy: output policy not valid in PREROUTING and INPUT [ 171.401378][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.870297][ T6291] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 172.925099][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.933375][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.247891][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.255098][ T6291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.262996][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.270123][ T6291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.744020][ T6291] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.949302][ T6293] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 174.098440][ T6293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.177058][ T6293] team0: Port device bond0 added [ 176.241781][ T6307] kvm: kvm [6306]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 176.405888][ T6315] loop2: detected capacity change from 0 to 164 [ 176.454978][ T6317] loop3: detected capacity change from 0 to 16 [ 176.538278][ T6317] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.999107][ T6324] xt_policy: output policy not valid in PREROUTING and INPUT [ 181.276136][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.855707][ T6350] kvm: kvm [6347]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 187.687409][ T6375] loop1: detected capacity change from 0 to 512 [ 187.728676][ T6375] EXT4-fs: inline encryption not supported [ 187.814557][ T6375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.883006][ T6375] EXT4-fs (loop1): Invalid default hash set in the superblock [ 187.947763][ T6349] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.988052][ T6377] loop3: detected capacity change from 0 to 164 [ 188.098986][ T6379] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 188.140677][ T6370] process 'syz.2.132' launched './file0' with NULL argv: empty string added [ 188.716824][ T6382] xt_policy: output policy not valid in PREROUTING and INPUT [ 190.537447][ T6390] loop1: detected capacity change from 0 to 8192 [ 192.393805][ T6407] xt_policy: output policy not valid in PREROUTING and INPUT [ 193.411537][ T6417] xt_policy: output policy not valid in PREROUTING and INPUT [ 193.441843][ T28] audit: type=1800 audit(1790319198.597:6): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.141" name="power" dev="configfs" ino=9684 res=0 errno=0 [ 193.705334][ T6415] kvm: kvm [6410]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 193.761995][ T6416] ldm_validate_partition_table(): Disk read failed. [ 193.988264][ T6416] Dev nullb1: unable to read RDB block 8 [ 194.166842][ T6416] nullb1: unable to read partition table [ 194.428918][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435548][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556726][ T6416] null_blk: disk nullb1 created [ 196.438626][ T6429] loop1: detected capacity change from 0 to 1024 [ 197.260097][ T6434] xt_policy: output policy not valid in PREROUTING and INPUT [ 197.539697][ T6435] xt_policy: output policy not valid in PREROUTING and INPUT [ 199.644737][ T6445] xt_policy: output policy not valid in PREROUTING and INPUT [ 204.880959][ T6463] overlayfs: overlapping lowerdir path [ 204.928711][ T6464] overlayfs: overlapping lowerdir path [ 205.619238][ T6468] Cannot find add_set index 2 as target [ 206.466233][ T6474] xt_policy: output policy not valid in PREROUTING and INPUT [ 206.922524][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 206.928714][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 206.934876][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 206.940956][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 210.371022][ T6489] xt_policy: output policy not valid in PREROUTING and INPUT [ 210.443042][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 211.960776][ T788] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 211.985127][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.940912][ T788] usb 2-1: Product: syz [ 212.972954][ T788] usb 2-1: Manufacturer: syz [ 212.977598][ T788] usb 2-1: SerialNumber: syz [ 213.090455][ T788] usb 2-1: can't set config #1, error -71 [ 213.196128][ T788] usb 2-1: USB disconnect, device number 2 [ 214.105457][ T6502] xt_policy: output policy not valid in PREROUTING and INPUT [ 214.803772][ T6506] bond0: (slave bond_slave_0): Releasing backup interface [ 215.205842][ T6507] bond0: (slave bond_slave_1): Releasing backup interface [ 216.661640][ T6515] loop2: detected capacity change from 0 to 16 [ 217.247605][ T6515] erofs: (device loop2): mounted with root inode @ nid 36. [ 217.691136][ T6509] bond0: option mode: unable to set because the bond device is up [ 217.872147][ T9] IPVS: starting estimator thread 0... [ 217.983652][ T6524] IPVS: using max 26 ests per chain, 62400 per kthread [ 218.099601][ T6506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.763993][ T6536] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 222.772446][ T6536] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 223.012103][ T6540] syzkaller0: entered promiscuous mode [ 224.553741][ T6536] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 224.561781][ T6540] syzkaller0: entered allmulticast mode [ 224.599445][ T6546] tipc: Started in network mode [ 224.631532][ T6546] tipc: Node identity 0ae63c1bc2a8, cluster identity 4711 [ 226.061243][ T6546] tipc: Enabled bearer , priority 0 [ 226.237054][ T6546] tipc: Resetting bearer [ 226.307522][ T6546] tipc: Disabling bearer [ 226.415383][ T6554] bridge0: port 3(wlan1) entered blocking state [ 226.474452][ T6554] bridge0: port 3(wlan1) entered disabled state [ 226.481075][ T6554] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 226.727653][ T6557] loop1: detected capacity change from 0 to 32768 [ 226.789829][ T6554] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 226.834910][ T6557] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.860836][ T6554] bridge0: port 3(wlan1) entered blocking state [ 226.867475][ T6554] bridge0: port 3(wlan1) entered forwarding state [ 226.955424][ T6557] XFS (loop1): Ending clean mount [ 226.970744][ T6557] XFS (loop1): Quotacheck needed: Please wait. [ 227.476403][ T6557] XFS (loop1): Quotacheck: Done. [ 227.642336][ T6551] bridge0: port 3(wlan1) entered disabled state [ 228.147871][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.241204][ T6551] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode [ 228.296673][ T6551] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 228.319192][ T6551] bridge0: port 3(wlan1) entered disabled state [ 228.896122][ T6574] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.210532][ T6577] xt_hashlimit: size too large, truncated to 1048576 [ 229.217513][ T6577] xt_hashlimit: max too large, truncated to 1048576 [ 229.225241][ T6577] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 231.870883][ T5087] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 231.881740][ T5087] CPU: 0 PID: 5087 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 231.889311][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.899389][ T5087] Workqueue: hci0 hci_rx_work [ 231.904116][ T5087] Call Trace: [ 231.907432][ T5087] [ 231.910370][ T5087] dump_stack_lvl+0x18c/0x250 [ 231.915066][ T5087] ? show_regs_print_info+0x20/0x20 [ 231.920295][ T5087] ? load_image+0x420/0x420 [ 231.924828][ T5087] sysfs_create_dir_ns+0x26e/0x2a0 [ 231.929951][ T5087] ? __lock_acquire+0x7d80/0x7d80 [ 231.934999][ T5087] ? sysfs_warn_dup+0xa0/0xa0 [ 231.939713][ T5087] ? do_raw_spin_unlock+0x121/0x230 [ 231.944928][ T5087] kobject_add_internal+0x617/0xc90 [ 231.950138][ T5087] kobject_add+0x164/0x240 [ 231.954598][ T5087] ? kobject_init+0x1d0/0x1d0 [ 231.959284][ T5087] ? get_device_parent+0x366/0x390 [ 231.964407][ T5087] device_add+0x3fa/0xc40 [ 231.968748][ T5087] hci_conn_add_sysfs+0xd5/0x1e0 [ 231.973707][ T5087] le_conn_complete_evt+0xe9a/0x1480 [ 231.979012][ T5087] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 231.985268][ T5087] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 231.990919][ T5087] ? mutex_unlock+0x10/0x10 [ 231.995459][ T5087] ? skb_pull_data+0xf0/0x1f0 [ 232.000168][ T5087] hci_le_conn_complete_evt+0x187/0x440 [ 232.005736][ T5087] ? hci_remote_host_features_evt+0x150/0x150 [ 232.011822][ T5087] hci_event_packet+0x7b4/0x1280 [ 232.016867][ T5087] ? __lock_acquire+0x7d80/0x7d80 [ 232.021906][ T5087] ? lock_chain_count+0x20/0x20 [ 232.026767][ T5087] ? bis_list+0x290/0x290 [ 232.031114][ T5087] ? kcov_remote_start+0x513/0x810 [ 232.036237][ T5087] ? lockdep_hardirqs_on+0x98/0x150 [ 232.041449][ T5087] ? hci_send_to_monitor+0xd7/0x4f0 [ 232.046665][ T5087] hci_rx_work+0x43a/0xd60 [ 232.051102][ T5087] ? process_scheduled_works+0x975/0x1600 [ 232.056834][ T5087] process_scheduled_works+0xa60/0x1600 [ 232.062422][ T5087] ? worker_attach_to_pool+0x370/0x370 [ 232.067900][ T5087] ? assign_work+0x3cc/0x5d0 [ 232.072503][ T5087] worker_thread+0xa5e/0xfe0 [ 232.077109][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 232.081976][ T5087] ? __kthread_parkme+0x71/0x1c0 [ 232.086925][ T5087] kthread+0x2fa/0x390 [ 232.091000][ T5087] ? pr_cont_work+0x550/0x550 [ 232.095706][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 232.100308][ T5087] ret_from_fork+0x48/0x80 [ 232.104737][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 232.109331][ T5087] ret_from_fork_asm+0x11/0x20 [ 232.114116][ T5087] [ 233.040352][ T5087] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.105453][ T5087] Bluetooth: hci0: failed to register connection device [ 234.537414][ T6601] ip_tables: iptables: counters copy to user failed while replacing table [ 236.058920][ T6602] loop1: detected capacity change from 0 to 512 [ 236.153582][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.214102][ T6607] overlayfs: missing 'lowerdir' [ 236.600105][ T6611] xt_policy: output policy not valid in PREROUTING and INPUT [ 237.824566][ T6613] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 237.834170][ T6613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 237.843787][ T6613] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 237.856895][ T6613] syz.0.195 (6613) used greatest stack depth: 17944 bytes left [ 237.966541][ T28] audit: type=1800 audit(1790319242.987:7): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.195" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 238.142236][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.909085][ T6624] loop1: detected capacity change from 0 to 8192 [ 242.441012][ T6640] loop3: detected capacity change from 0 to 512 [ 242.543044][ T6640] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 243.859011][ T6644] Bluetooth: MGMT ver 1.22 [ 243.976082][ T6644] Cannot find add_set index 0 as target [ 244.180025][ T6647] xt_policy: output policy not valid in PREROUTING and INPUT [ 251.356353][ T6686] loop1: detected capacity change from 0 to 128 [ 252.524237][ T6685] syz.3.206: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 253.026562][ T6685] CPU: 0 PID: 6685 Comm: syz.3.206 Not tainted syzkaller #0 [ 253.033906][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.043968][ T6685] Call Trace: [ 253.047254][ T6685] [ 253.050204][ T6685] dump_stack_lvl+0x18c/0x250 [ 253.054919][ T6685] ? show_regs_print_info+0x20/0x20 [ 253.060134][ T6685] ? load_image+0x420/0x420 [ 253.064651][ T6685] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 253.071075][ T6685] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 253.077584][ T6685] warn_alloc+0x246/0x340 [ 253.081929][ T6685] ? zone_watermark_ok_safe+0x230/0x230 [ 253.087489][ T6685] __vmalloc_node_range+0x129/0x1320 [ 253.092783][ T6685] ? __mutex_trylock_common+0x160/0x270 [ 253.098332][ T6685] ? trace_raw_output_contention_end+0xd0/0xd0 [ 253.104498][ T6685] ? rcu_is_watching+0x15/0xb0 [ 253.109273][ T6685] ? trace_contention_end+0x39/0xe0 [ 253.114481][ T6685] ? __mutex_lock+0x30d/0xc80 [ 253.119164][ T6685] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 253.124803][ T6685] ? free_vm_area+0x50/0x50 [ 253.129335][ T6685] ? dvb_demux_do_ioctl+0x317/0x530 [ 253.134542][ T6685] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 253.140012][ T6685] ? mutex_lock_nested+0x20/0x20 [ 253.144974][ T6685] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 253.150801][ T6685] vmalloc+0x79/0x90 [ 253.154705][ T6685] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 253.160528][ T6685] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 253.166179][ T6685] dvb_demux_do_ioctl+0x454/0x530 [ 253.171219][ T6685] dvb_usercopy+0x195/0x2b0 [ 253.175750][ T6685] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 253.181307][ T6685] ? dvb_generic_ioctl+0xb0/0xb0 [ 253.186284][ T6685] ? dvb_demux_poll+0x210/0x210 [ 253.191173][ T6685] dvb_demux_ioctl+0x29/0x30 [ 253.195780][ T6685] __se_sys_ioctl+0xfd/0x170 [ 253.200386][ T6685] do_syscall_64+0x55/0xb0 [ 253.204813][ T6685] ? clear_bhb_loop+0x40/0x90 [ 253.209505][ T6685] ? clear_bhb_loop+0x40/0x90 [ 253.214196][ T6685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.220115][ T6685] RIP: 0033:0x7fc43d79e159 [ 253.224544][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.244241][ T6685] RSP: 002b:00007fc43e701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.252660][ T6685] RAX: ffffffffffffffda RBX: 00007fc43da26090 RCX: 00007fc43d79e159 [ 253.260640][ T6685] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 253.268634][ T6685] RBP: 00007fc43d83506b R08: 0000000000000000 R09: 0000000000000000 [ 253.276623][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.284608][ T6685] R13: 00007fc43da26128 R14: 00007fc43da26090 R15: 00007ffd8919aed8 [ 253.292598][ T6685] [ 254.002644][ T6691] loop2: detected capacity change from 0 to 8 [ 254.041963][ T6697] xt_policy: output policy not valid in PREROUTING and INPUT [ 254.092767][ T6691] SQUASHFS error: Failed to read block 0x8f: -5 [ 254.117248][ T28] audit: type=1800 audit(1790319259.277:8): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.215" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 254.309270][ T6685] Mem-Info: [ 254.312583][ T6685] active_anon:30859 inactive_anon:0 isolated_anon:0 [ 254.312583][ T6685] active_file:16171 inactive_file:42314 isolated_file:0 [ 254.312583][ T6685] unevictable:768 dirty:103 writeback:0 [ 254.312583][ T6685] slab_reclaimable:10782 slab_unreclaimable:91618 [ 254.312583][ T6685] mapped:30247 shmem:26902 pagetables:621 [ 254.312583][ T6685] sec_pagetables:0 bounce:0 [ 254.312583][ T6685] kernel_misc_reclaimable:0 [ 254.312583][ T6685] free:1325728 free_pcp:3207 free_cma:0 [ 254.563892][ T6699] SQUASHFS error: Failed to read block 0x285: -5 [ 254.570468][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.577828][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.585585][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.591889][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.599253][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.606772][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.613090][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.620379][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.627238][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.633511][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.640798][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.647647][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.656935][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.664990][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.671964][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.678264][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.686423][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.693261][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.699470][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.706797][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.713640][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.719841][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.727184][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.734027][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.740238][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.747579][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.754503][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.761792][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.768619][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.774851][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.782167][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.789795][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.796075][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.803484][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.810271][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.816523][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.824112][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.830907][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.837183][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.844519][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 254.851309][ T6699] SQUASHFS error: Failed to read block 0x0: -5 [ 254.867928][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.874216][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.881503][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.888422][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.895493][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.902796][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.909667][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.915918][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.923246][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.930035][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.936298][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.943606][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 254.950414][ T6698] SQUASHFS error: Failed to read block 0x0: -5 [ 254.957032][ T6698] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.964466][ T6699] SQUASHFS error: Unable to read metadata cache entry [283] [ 254.971755][ T6699] SQUASHFS error: read_indexes: reading block [283:0] [ 255.031391][ T6698] SQUASHFS error: read_indexes: reading block [283:0] [ 255.166071][ T28] audit: type=1800 audit(1790319259.717:9): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.215" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 255.308430][ T6685] Node 0 active_anon:100124kB inactive_anon:0kB active_file:64696kB inactive_file:169036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97932kB dirty:216kB writeback:0kB shmem:83140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:2212kB sec_pagetables:0kB all_unreclaimable? no [ 255.475301][ T6685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 255.536053][ T6706] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 255.601314][ T6706] rtrs_client L2075: : Failed to resolve address, err: -19 [ 255.622256][ T6685] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.652367][ T6706] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 255.755372][ T6685] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 255.774233][ T6685] Node 0 DMA32 free:1382740kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:100452kB inactive_anon:0kB active_file:64696kB inactive_file:168208kB unevictable:1536kB writepending:164kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:27376kB local_pcp:27376kB free_cma:0kB [ 255.820597][ T6685] lowmem_reserve[]: 0 0 0 0 0 [ 257.240387][ T28] audit: type=1800 audit(1790319262.387:10): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.221" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 257.274915][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.327568][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.513006][ T6685] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.637244][ T6714] nvmet_rdma: enabling port 1 (127.0.0.1:4420) [ 257.666289][ T6685] lowmem_reserve[]: 0 0 0 0 0 [ 257.685689][ T6685] Node 1 Normal free:3903180kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10400kB local_pcp:10400kB free_cma:0kB [ 259.560108][ T6714] nvme nvme0: failed to connect socket: -512 [ 259.739757][ T6685] lowmem_reserve[]: 0 0 0 0 0 [ 259.756653][ T6685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.863014][ T6685] Node 0 DMA32: 3*4kB (UME) 1*8kB (E) 662*16kB (UM) 469*32kB (UM) 172*64kB (UM) 59*128kB (UM) 60*256kB (UME) 51*512kB (UME) 11*1024kB (UM) 10*2048kB (UM) 308*4096kB (M) = 1378964kB [ 261.934713][ T6685] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 262.387708][ T6685] Node 1 Normal: 233*4kB (UME) 51*8kB (UME) 43*16kB (UME) 203*32kB (UME) 58*64kB (UME) 12*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3903180kB [ 262.822885][ T6685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.887330][ T6685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.949023][ T6685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.987333][ T6685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.024467][ T6685] 79911 total pagecache pages [ 263.048325][ T6685] 0 pages in swap cache [ 263.080108][ T6685] Free swap = 124416kB [ 263.114297][ T6685] Total swap = 124996kB [ 263.139319][ T6685] 2097051 pages RAM [ 263.158514][ T6685] 0 pages HighMem/MovableOnly [ 263.179004][ T6685] 416965 pages reserved [ 264.299878][ T6685] 0 pages cma reserved [ 268.629206][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.644565][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.652610][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.664544][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.672971][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.680911][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.854422][ T6754] ªªªªªª: renamed from vlan0 (while UP) [ 269.826593][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 270.547911][ T28] audit: type=1326 audit(1790319275.697:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 270.591266][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.618279][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.638236][ T28] audit: type=1326 audit(1790319275.697:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 270.670548][ T6751] bridge_slave_0: entered allmulticast mode [ 270.705255][ T6751] bridge_slave_0: entered promiscuous mode [ 270.736669][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.744470][ T5788] Bluetooth: hci4: command tx timeout [ 270.769758][ T28] audit: type=1326 audit(1790319275.697:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 270.797315][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.827963][ T6751] bridge_slave_1: entered allmulticast mode [ 270.855322][ T6751] bridge_slave_1: entered promiscuous mode [ 270.888306][ T28] audit: type=1326 audit(1790319275.697:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9676d5e98e code=0x7ffc0000 [ 271.118392][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.163018][ T28] audit: type=1326 audit(1790319275.707:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9676d9f457 code=0x7ffc0000 [ 271.229504][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.268450][ T6776] loop2: detected capacity change from 0 to 512 [ 271.318755][ T6776] EXT4-fs: Ignoring removed nobh option [ 271.342978][ T28] audit: type=1326 audit(1790319275.707:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 271.457940][ T6776] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.241: invalid indirect mapped block 256 (level 2) [ 271.479107][ T6751] team0: Port device team_slave_0 added [ 271.536400][ T6751] team0: Port device team_slave_1 added [ 271.555040][ T28] audit: type=1326 audit(1790319275.707:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9676d9f457 code=0x7ffc0000 [ 271.620443][ T6776] EXT4-fs (loop2): 2 truncates cleaned up [ 271.632412][ T6778] syzkaller0: entered promiscuous mode [ 271.651794][ T6776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.666060][ T6778] syzkaller0: entered allmulticast mode [ 271.724515][ T28] audit: type=1326 audit(1790319275.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9676d5e98e code=0x7ffc0000 [ 272.890706][ T6775] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.241: bg 0: block 5: invalid block bitmap [ 273.276944][ T5788] Bluetooth: hci4: command tx timeout [ 273.477821][ T6775] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 273.490513][ T6775] EXT4-fs (loop2): This should not happen!! Data will be lost [ 273.490513][ T6775] [ 273.500191][ T6775] EXT4-fs (loop2): Total free blocks count 0 [ 273.506253][ T6775] EXT4-fs (loop2): Free/Dirty block details [ 273.512195][ T6775] EXT4-fs (loop2): free_blocks=0 [ 273.517274][ T6775] EXT4-fs (loop2): dirty_blocks=33 [ 273.522706][ T6775] EXT4-fs (loop2): Block reservation details [ 273.529592][ T6775] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 273.542997][ T28] audit: type=1326 audit(1790319275.707:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 273.700010][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.719327][ T6778] tipc: Enabled bearer , priority 0 [ 273.752105][ T28] audit: type=1326 audit(1790319275.707:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9676d9e159 code=0x7ffc0000 [ 273.940067][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.975372][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.210278][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.529284][ T6790] tipc: Resetting bearer [ 274.607869][ T6777] tipc: Resetting bearer [ 274.674129][ T6777] tipc: Disabling bearer [ 274.734432][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.760379][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.985655][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.209951][ T6751] hsr_slave_0: entered promiscuous mode [ 275.255076][ T6751] hsr_slave_1: entered promiscuous mode [ 275.273133][ T6751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.280736][ T6751] Cannot create hsr debugfs directory [ 275.303330][ T5788] Bluetooth: hci4: command tx timeout [ 276.304954][ T6817] xt_policy: output policy not valid in PREROUTING and INPUT [ 276.523522][ T6820] comedi comedi1: board detection failed [ 277.382910][ T5788] Bluetooth: hci4: command tx timeout [ 277.498474][ T6821] loop1: detected capacity change from 0 to 164 [ 278.855862][ T6820] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 278.886777][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.252'. [ 279.009635][ T6751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.053151][ T6829] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 279.096370][ T6751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.122660][ T6185] rtrs_client L2018: : CM error (CM event: address error, err: -19) [ 279.159285][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 279.159296][ T28] audit: type=1804 audit(1790319284.317:33): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.253" name="/newroot/67/file1" dev="fuse" ino=1 res=1 errno=0 [ 279.217535][ T6829] rtrs_client L2618: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 279.231360][ T6751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.278268][ T6751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.392505][ T28] audit: type=1326 audit(1790319286.887:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.1.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff43d39e159 code=0x0 [ 282.488126][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.621650][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.865055][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.872199][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.905121][ T6845] xt_policy: output policy not valid in PREROUTING and INPUT [ 282.961393][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.968646][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.253434][ T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 283.478300][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 283.721226][ T788] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 283.763535][ T788] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 283.803499][ T788] usb 3-1: Product: syz [ 283.903077][ T788] usb 3-1: Manufacturer: syz [ 283.907712][ T788] usb 3-1: SerialNumber: syz [ 283.973840][ T788] usb 3-1: config 0 descriptor?? [ 284.015757][ T6847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.099965][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.596668][ T6860] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 285.176684][ T6868] kvm: kvm [6865]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 285.235238][ T6751] veth0_vlan: entered promiscuous mode [ 285.265130][ T6868] kvm: kvm [6865]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 285.309326][ T6751] veth1_vlan: entered promiscuous mode [ 285.496473][ T6868] kvm_intel: kvm [6865]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 286.915977][ T6878] can0: slcan on ttyS3. [ 287.004441][ T6879] can0 (unregistered): slcan off ttyS3. [ 287.166249][ T6751] veth0_macvtap: entered promiscuous mode [ 287.236276][ T6751] veth1_macvtap: entered promiscuous mode [ 287.325169][ T788] usb 3-1: USB disconnect, device number 2 [ 287.364720][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.429693][ T6881] loop1: detected capacity change from 0 to 1024 [ 287.442083][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.522961][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.570290][ T6881] hfsplus: failed to load catalog file [ 287.587484][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.785375][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.190710][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.239241][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.452065][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.709981][ T6892] xt_policy: output policy not valid in PREROUTING and INPUT [ 288.750954][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.830413][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.868340][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.895323][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.933212][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.976643][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.005336][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.030078][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.057538][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.621774][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.699615][ T6751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.835350][ T6751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.897077][ T6751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.935430][ T6751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.837375][ T6900] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 292.847603][ T6900] netlink: 'syz.1.270': attribute type 2 has an invalid length. [ 293.173069][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 293.213381][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.038223][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.147696][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.199508][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.622386][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.882771][ T6923] xt_policy: output policy not valid in PREROUTING and INPUT [ 294.917393][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.138222][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 297.177517][ T6926] sctp: failed to load transform for md5: -2 [ 297.322710][ T6932] loop2: detected capacity change from 0 to 164 [ 299.570571][ T6949] null_blk: disk rnullb0 created [ 299.773138][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 300.048751][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 300.287430][ T5817] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 300.572401][ T6960] xt_policy: output policy not valid in PREROUTING and INPUT [ 300.580924][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.609355][ T5817] usb 2-1: Product: syz [ 300.626345][ T5817] usb 2-1: Manufacturer: syz [ 300.644333][ T5817] usb 2-1: SerialNumber: syz [ 300.678231][ T5817] usb 2-1: config 0 descriptor?? [ 300.709512][ T5817] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 301.161612][ T6963] se_dev->se_dev_ptr already set for storage object [ 301.450581][ T5817] gspca_ov534_9: reg_w failed -71 [ 302.231719][ T6967] SET target dimension over the limit! [ 303.212877][ T5817] gspca_ov534_9: Unknown sensor 0000 [ 303.213007][ T5817] ov534_9: probe of 2-1:0.0 failed with error -22 [ 303.335650][ T6966] syz.2.288 uses obsolete (PF_INET,SOCK_PACKET) [ 303.425926][ T5817] usb 2-1: USB disconnect, device number 3 [ 304.623133][ T6973] MTRR 1 not used [ 309.577537][ T6993] xt_policy: output policy not valid in PREROUTING and INPUT [ 310.866753][ T6996] netlink: 84 bytes leftover after parsing attributes in process `syz.1.296'. [ 314.139628][ T28] audit: type=1800 audit(1790319319.297:35): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.304" name="ipv4_address" dev="configfs" ino=13031 res=0 errno=0 [ 314.403586][ T7024] xt_policy: output policy not valid in PREROUTING and INPUT [ 314.553979][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 314.563880][ T7019] syz.2.303: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 314.579486][ T7019] CPU: 0 PID: 7019 Comm: syz.2.303 Not tainted syzkaller #0 [ 314.586826][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.596911][ T7019] Call Trace: [ 314.600204][ T7019] [ 314.603149][ T7019] dump_stack_lvl+0x18c/0x250 [ 314.607850][ T7019] ? show_regs_print_info+0x20/0x20 [ 314.613079][ T7019] ? load_image+0x420/0x420 [ 314.617598][ T7019] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 314.624028][ T7019] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 314.630541][ T7019] warn_alloc+0x246/0x340 [ 314.634890][ T7019] ? zone_watermark_ok_safe+0x230/0x230 [ 314.640457][ T7019] ? __mutex_trylock_common+0x160/0x270 [ 314.646017][ T7019] __vmalloc_node_range+0x129/0x1320 [ 314.651337][ T7019] ? tomoyo_path_number_perm+0x217/0x5e0 [ 314.657003][ T7019] ? rcu_is_watching+0x15/0xb0 [ 314.661801][ T7019] ? trace_contention_end+0x39/0xe0 [ 314.667020][ T7019] ? __mutex_lock+0x30d/0xc80 [ 314.671724][ T7019] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 314.677399][ T7019] ? tomoyo_path_number_perm+0x217/0x5e0 [ 314.683056][ T7019] ? free_vm_area+0x50/0x50 [ 314.687586][ T7019] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 314.692638][ T7019] vmalloc+0x79/0x90 [ 314.696574][ T7019] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 314.701615][ T7019] dvb_dvr_do_ioctl+0x12e/0x220 [ 314.706508][ T7019] dvb_usercopy+0x195/0x2b0 [ 314.711029][ T7019] ? dvb_dvr_release+0x3e0/0x3e0 [ 314.715984][ T7019] ? dvb_generic_ioctl+0xb0/0xb0 [ 314.720957][ T7019] ? dvb_dvr_poll+0x230/0x230 [ 314.725672][ T7019] dvb_dvr_ioctl+0x29/0x30 [ 314.730127][ T7019] __se_sys_ioctl+0xfd/0x170 [ 314.734742][ T7019] do_syscall_64+0x55/0xb0 [ 314.739182][ T7019] ? clear_bhb_loop+0x40/0x90 [ 314.743873][ T7019] ? clear_bhb_loop+0x40/0x90 [ 314.748567][ T7019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.754486][ T7019] RIP: 0033:0x7f9676d9e159 [ 314.758925][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.778539][ T7019] RSP: 002b:00007f9677c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.786965][ T7019] RAX: ffffffffffffffda RBX: 00007f9677025fa0 RCX: 00007f9676d9e159 [ 314.794942][ T7019] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 314.802918][ T7019] RBP: 00007f9676e3506b R08: 0000000000000000 R09: 0000000000000000 [ 314.810917][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.818895][ T7019] R13: 00007f9677026038 R14: 00007f9677025fa0 R15: 00007ffc6fcce418 [ 314.826891][ T7019] [ 314.830007][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.838460][ T7019] Mem-Info: [ 314.841603][ T7019] active_anon:52759 inactive_anon:0 isolated_anon:0 [ 314.841603][ T7019] active_file:15845 inactive_file:42917 isolated_file:0 [ 314.841603][ T7019] unevictable:768 dirty:264 writeback:0 [ 314.841603][ T7019] slab_reclaimable:10861 slab_unreclaimable:94530 [ 314.841603][ T7019] mapped:24341 shmem:48991 pagetables:531 [ 314.841603][ T7019] sec_pagetables:0 bounce:0 [ 314.841603][ T7019] kernel_misc_reclaimable:0 [ 314.841603][ T7019] free:1297693 free_pcp:6319 free_cma:0 [ 314.886906][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.893004][ T7019] Node 0 active_anon:211036kB inactive_anon:0kB active_file:63380kB inactive_file:171464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97364kB dirty:1052kB writeback:0kB shmem:194428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11056kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no [ 314.925519][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.932527][ T7019] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 314.962792][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.968917][ T7019] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.996055][ T7019] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 315.002714][ T7019] Node 0 DMA32 free:1271968kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:211000kB inactive_anon:0kB active_file:63380kB inactive_file:170636kB unevictable:1536kB writepending:1052kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:15068kB local_pcp:15068kB free_cma:0kB [ 315.033425][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.039593][ T7019] lowmem_reserve[]: 0 0 0 0 0 [ 315.044347][ T7019] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.071028][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.077497][ T7019] lowmem_reserve[]: 0 0 0 0 0 [ 315.082223][ T7019] Node 1 Normal free:3903436kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10208kB local_pcp:10208kB free_cma:0kB [ 315.111690][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.118710][ T7019] lowmem_reserve[]: 0 0 0 0 0 [ 315.123509][ T7019] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.136235][ T7019] Node 0 DMA32: 4*4kB (UE) 2*8kB (UE) 0*16kB 122*32kB (UME) 271*64kB (UM) 163*128kB (UM) 24*256kB (UM) 18*512kB (UM) 6*1024kB (ME) 2*2048kB (M) 294*4096kB (UM) = 1271968kB [ 315.153567][ T7019] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 315.165440][ T7019] Node 1 Normal: 233*4kB (UME) 51*8kB (UME) 43*16kB (UME) 205*32kB (UME) 59*64kB (UME) 13*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3903436kB [ 315.183449][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.189521][ T7019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.199111][ T7019] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.209396][ T7019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.219028][ T7019] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.228445][ T7019] 107750 total pagecache pages [ 315.233255][ T7019] 0 pages in swap cache [ 315.237411][ T7019] Free swap = 124400kB [ 315.241593][ T7019] Total swap = 124996kB [ 315.245801][ T7019] 2097051 pages RAM [ 315.249629][ T7019] 0 pages HighMem/MovableOnly [ 315.254358][ T7019] 416965 pages reserved [ 315.258514][ T7019] 0 pages cma reserved [ 315.278511][ T28] audit: type=1800 audit(1790319319.377:36): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.304" name="ipv4_port" dev="configfs" ino=13035 res=0 errno=0 [ 316.339515][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.306'. [ 316.443986][ T28] audit: type=1800 audit(1790319319.397:37): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.304" name="num" dev="configfs" ino=13036 res=0 errno=0 [ 316.598340][ T28] audit: type=1800 audit(1790319319.407:38): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.304" name="local" dev="configfs" ino=13037 res=0 errno=0 [ 316.618276][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.768442][ T7034] loop2: detected capacity change from 0 to 512 [ 316.838338][ T7034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 316.873385][ T7034] System zones: 1-12 [ 316.902003][ T7034] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.309: missing EA_INODE flag [ 317.026024][ T7034] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.309: error while reading EA inode 12 err=-117 [ 317.111263][ T7034] EXT4-fs (loop2): 1 orphan inode deleted [ 317.163920][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.235148][ T7039] loop4: detected capacity change from 0 to 8192 [ 317.309210][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.315723][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.054798][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.470299][ T7053] Cannot find set identified by id 0 to match [ 323.899857][ T7059] xt_policy: output policy not valid in PREROUTING and INPUT [ 324.469111][ T7065] loop1: detected capacity change from 0 to 256 [ 324.507654][ T7065] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 324.522239][ T7065] exFAT-fs (loop1): failed to load alloc-bitmap [ 324.528684][ T7065] exFAT-fs (loop1): failed to recognize exfat type [ 327.358060][ T7077] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 327.539728][ T6185] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 327.664404][ T9] (NULL device *): Create Association LS failed: Association Allocation Failed [ 327.684845][ T7088] loop4: detected capacity change from 0 to 164 [ 327.713931][ T6185] (NULL device *): queue 0 connect admin queue failed (-6). [ 327.754730][ T6185] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 327.973361][ T6185] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 328.293767][ T7077] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys" [ 330.560409][ T7104] xt_policy: output policy not valid in PREROUTING and INPUT [ 330.603706][ T6187] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 331.238916][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 331.295945][ T6187] (NULL device *): queue 0 connect admin queue failed (-6). [ 331.871382][ T6187] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 333.868779][ T6187] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 334.027287][ T7118] binder_alloc: 7111: binder_alloc_buf, no vma [ 336.757641][ T6188] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 338.096979][ T5817] (NULL device *): Create Association LS failed: Association Allocation Failed [ 338.403075][ T6188] (NULL device *): queue 0 connect admin queue failed (-6). [ 338.410433][ T6188] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 338.781093][ T6188] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 339.272747][ T7147] xt_policy: output policy not valid in PREROUTING and INPUT [ 341.012944][ T6183] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 341.469532][ T788] (NULL device *): Create Association LS failed: Association Allocation Failed [ 343.391886][ T6183] (NULL device *): queue 0 connect admin queue failed (-6). [ 343.472066][ T6183] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 343.521369][ T6183] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 345.977698][ T6183] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 346.098148][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 346.159725][ T6183] (NULL device *): queue 0 connect admin queue failed (-6). [ 346.206409][ T6183] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 346.274615][ T6183] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 346.853302][ T7172] xt_policy: output policy not valid in PREROUTING and INPUT [ 348.924071][ T1020] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 349.025065][ T7179] nvmet: adding nsid 1 to subsystem testsubsys [ 349.066059][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 349.111431][ T1020] (NULL device *): queue 0 connect admin queue failed (-6). [ 349.152416][ T1020] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 349.206431][ T1020] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 349.667582][ T7182] xt_policy: output policy not valid in PREROUTING and INPUT [ 349.801629][ T7185] loop1: detected capacity change from 0 to 4096 [ 349.869551][ T7185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.305398][ T6189] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 351.586244][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 351.675199][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 351.733031][ T6189] (NULL device *): queue 0 connect admin queue failed (-6). [ 351.790818][ T6189] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 351.841514][ T6189] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 353.507693][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.139704][ T1020] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 354.513744][ T7206] xt_policy: output policy not valid in PREROUTING and INPUT [ 354.663530][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 354.687970][ T1020] (NULL device *): queue 0 connect admin queue failed (-6). [ 354.749311][ T1020] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 354.939022][ T7212] xt_policy: output policy not valid in PREROUTING and INPUT [ 355.037530][ T1020] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 355.048542][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 355.119745][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 355.200351][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.235143][ T7208] bond2: (slave bond0): making interface the new active one [ 355.284491][ T7208] bond2: (slave bond0): Enslaving as an active interface with an up link [ 355.312373][ T7217] netlink: 'syz.2.356': attribute type 29 has an invalid length. [ 355.342913][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 355.393028][ T7217] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 355.423006][ T7223] syzkaller0: entered promiscuous mode [ 355.440672][ T7223] syzkaller0: entered allmulticast mode [ 355.662556][ T7219] tipc: Started in network mode [ 355.712382][ T7219] tipc: Node identity 96f494e39cdc, cluster identity 4711 [ 355.766060][ T7219] tipc: Enabled bearer , priority 0 [ 355.789524][ T7228] xt_policy: output policy not valid in PREROUTING and INPUT [ 356.494140][ T7232] tipc: Resetting bearer [ 356.920635][ T5817] tipc: Node number set to 170431715 [ 357.074441][ T7218] tipc: Resetting bearer [ 357.156295][ T7218] tipc: Disabling bearer [ 357.167099][ T1020] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 357.189544][ T7240] [ 357.191895][ T7240] ====================================================== [ 357.199007][ T7240] WARNING: possible circular locking dependency detected [ 357.206031][ T7240] syzkaller #0 Not tainted [ 357.210459][ T7240] ------------------------------------------------------ [ 357.217466][ T7240] syz.2.362/7240 is trying to acquire lock: [ 357.223351][ T7240] ffffffff8ddf43f0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.234591][ T7240] [ 357.234591][ T7240] but task is already holding lock: [ 357.241949][ T7240] ffff8880602cb400 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 357.252315][ T7240] [ 357.252315][ T7240] which lock already depends on the new lock. [ 357.252315][ T7240] [ 357.262817][ T7240] [ 357.262817][ T7240] the existing dependency chain (in reverse order) is: [ 357.271827][ T7240] [ 357.271827][ T7240] -> #3 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 357.280538][ T7240] down_write+0x97/0x200 [ 357.285320][ T7240] configfs_depend_item_unlocked+0x157/0x430 [ 357.291828][ T7240] usbg_make_tpg+0x1e1/0x550 [ 357.296952][ T7240] target_fabric_make_tpg+0xa4/0x6d0 [ 357.302767][ T7240] configfs_mkdir+0x515/0x9e0 [ 357.307991][ T7240] vfs_mkdir+0x2a5/0x470 [ 357.312755][ T7240] do_mkdirat+0x1dc/0x450 [ 357.317601][ T7240] __x64_sys_mkdirat+0x89/0xa0 [ 357.322908][ T7240] do_syscall_64+0x55/0xb0 [ 357.327871][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.334299][ T7240] [ 357.334299][ T7240] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 357.342205][ T7240] __mutex_lock+0x135/0xc80 [ 357.347227][ T7240] tcm_alloc_inst+0x65/0x190 [ 357.352335][ T7240] usb_get_function_instance+0xdd/0x2e0 [ 357.358402][ T7240] function_make+0x11c/0x350 [ 357.363516][ T7240] configfs_mkdir+0x515/0x9e0 [ 357.368736][ T7240] vfs_mkdir+0x2a5/0x470 [ 357.373503][ T7240] do_mkdirat+0x1dc/0x450 [ 357.378353][ T7240] __x64_sys_mkdirat+0x89/0xa0 [ 357.383638][ T7240] do_syscall_64+0x55/0xb0 [ 357.388601][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.395028][ T7240] [ 357.395028][ T7240] -> #1 (func_lock){+.+.}-{3:3}: [ 357.402154][ T7240] __mutex_lock+0x135/0xc80 [ 357.407183][ T7240] usb_get_function_instance+0x2e/0x2e0 [ 357.413269][ T7240] function_make+0x11c/0x350 [ 357.418400][ T7240] configfs_mkdir+0x515/0x9e0 [ 357.423621][ T7240] vfs_mkdir+0x2a5/0x470 [ 357.428406][ T7240] do_mkdirat+0x1dc/0x450 [ 357.433276][ T7240] __x64_sys_mkdirat+0x89/0xa0 [ 357.438675][ T7240] do_syscall_64+0x55/0xb0 [ 357.443654][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.450102][ T7240] [ 357.450102][ T7240] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 357.458367][ T7240] __lock_acquire+0x37ef/0x7d80 [ 357.463750][ T7240] lock_acquire+0x19e/0x420 [ 357.468784][ T7240] __mutex_lock+0x135/0xc80 [ 357.473812][ T7240] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.480518][ T7240] configfs_symlink+0x5a5/0xfe0 [ 357.485914][ T7240] vfs_symlink+0x138/0x2b0 [ 357.490857][ T7240] do_symlinkat+0x1ba/0x400 [ 357.495889][ T7240] __x64_sys_symlinkat+0x99/0xb0 [ 357.501352][ T7240] do_syscall_64+0x55/0xb0 [ 357.506297][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.512718][ T7240] [ 357.512718][ T7240] other info that might help us debug this: [ 357.512718][ T7240] [ 357.522947][ T7240] Chain exists of: [ 357.522947][ T7240] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#23 [ 357.522947][ T7240] [ 357.537911][ T7240] Possible unsafe locking scenario: [ 357.537911][ T7240] [ 357.545361][ T7240] CPU0 CPU1 [ 357.550727][ T7240] ---- ---- [ 357.556086][ T7240] lock(&sb->s_type->i_mutex_key#23); [ 357.561551][ T7240] lock(tpg_instances_lock); [ 357.568761][ T7240] lock(&sb->s_type->i_mutex_key#23); [ 357.576740][ T7240] lock(gadget_subsys.su_mutex); [ 357.581765][ T7240] [ 357.581765][ T7240] *** DEADLOCK *** [ 357.581765][ T7240] [ 357.589905][ T7240] 2 locks held by syz.2.362/7240: [ 357.594927][ T7240] #0: ffff888143ac0418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 357.604191][ T7240] #1: ffff8880602cb400 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 357.615005][ T7240] [ 357.615005][ T7240] stack backtrace: [ 357.620894][ T7240] CPU: 0 PID: 7240 Comm: syz.2.362 Not tainted syzkaller #0 [ 357.628185][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.638257][ T7240] Call Trace: [ 357.641547][ T7240] [ 357.644483][ T7240] dump_stack_lvl+0x18c/0x250 [ 357.649174][ T7240] ? load_image+0x420/0x420 [ 357.653695][ T7240] ? show_regs_print_info+0x20/0x20 [ 357.658908][ T7240] ? print_circular_bug+0x12b/0x1a0 [ 357.664124][ T7240] check_noncircular+0x2fc/0x400 [ 357.669070][ T7240] ? print_deadlock_bug+0x5d0/0x5d0 [ 357.674273][ T7240] ? lockdep_lock+0xf5/0x230 [ 357.678877][ T7240] ? _find_first_zero_bit+0xd6/0x100 [ 357.684168][ T7240] __lock_acquire+0x37ef/0x7d80 [ 357.689044][ T7240] ? __lock_acquire+0x1336/0x7d80 [ 357.694073][ T7240] ? verify_lock_unused+0x140/0x140 [ 357.699288][ T7240] lock_acquire+0x19e/0x420 [ 357.703800][ T7240] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.710142][ T7240] ? __might_sleep+0xe0/0xe0 [ 357.714756][ T7240] ? read_lock_is_recursive+0x20/0x20 [ 357.720138][ T7240] __mutex_lock+0x135/0xc80 [ 357.724649][ T7240] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.731007][ T7240] ? __might_sleep+0xe0/0xe0 [ 357.735612][ T7240] ? uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.741945][ T7240] ? read_lock_is_recursive+0x20/0x20 [ 357.747323][ T7240] ? mutex_lock_nested+0x20/0x20 [ 357.752265][ T7240] ? configfs_symlink+0x469/0xfe0 [ 357.757308][ T7240] ? make_vfsuid+0x67/0xb0 [ 357.761739][ T7240] ? generic_permission+0x1ed/0x590 [ 357.766941][ T7240] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 357.773112][ T7240] ? inode_permission+0xf3/0x480 [ 357.778053][ T7240] ? bpf_lsm_inode_permission+0x9/0x10 [ 357.783535][ T7240] ? security_inode_permission+0xb0/0xf0 [ 357.789191][ T7240] configfs_symlink+0x5a5/0xfe0 [ 357.794049][ T7240] ? from_kgid+0x153/0x6a0 [ 357.798472][ T7240] ? generic_permission+0x1ed/0x590 [ 357.803673][ T7240] ? detach_groups+0x370/0x370 [ 357.808465][ T7240] ? inode_permission+0xf3/0x480 [ 357.813402][ T7240] ? bpf_lsm_inode_symlink+0x9/0x10 [ 357.818618][ T7240] ? security_inode_symlink+0xb6/0x100 [ 357.824094][ T7240] vfs_symlink+0x138/0x2b0 [ 357.828537][ T7240] do_symlinkat+0x1ba/0x400 [ 357.833041][ T7240] ? vfs_symlink+0x2b0/0x2b0 [ 357.837665][ T7240] __x64_sys_symlinkat+0x99/0xb0 [ 357.842607][ T7240] do_syscall_64+0x55/0xb0 [ 357.847034][ T7240] ? clear_bhb_loop+0x40/0x90 [ 357.851725][ T7240] ? clear_bhb_loop+0x40/0x90 [ 357.856411][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.862311][ T7240] RIP: 0033:0x7f9676d9e159 [ 357.866727][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.886333][ T7240] RSP: 002b:00007f9677c7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 357.894747][ T7240] RAX: ffffffffffffffda RBX: 00007f9677025fa0 RCX: 00007f9676d9e159 [ 357.902719][ T7240] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 357.910692][ T7240] RBP: 00007f9676e3506b R08: 0000000000000000 R09: 0000000000000000 [ 357.918664][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.926634][ T7240] R13: 00007f9677026038 R14: 00007f9677025fa0 R15: 00007ffc6fcce418 [ 357.934634][ T7240] [ 357.974958][ T5840] (NULL device *): Create Association LS failed: Association Allocation Failed [ 357.996014][ T1020] (NULL device *): queue 0 connect admin queue failed (-6). [ 358.017033][ T1020] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 358.035915][ T1020] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 360.103807][ T6188] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 360.119089][ T5817] (NULL device *): Create Association LS failed: Association Allocation Failed [ 360.129475][ T6188] (NULL device *): queue 0 connect admin queue failed (-6). [ 360.140088][ T6188] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 360.149193][ T6188] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 362.184136][ T6186] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 362.199566][ T8] (NULL device *): Create Association LS failed: Association Allocation Failed [ 362.210167][ T6186] (NULL device *): queue 0 connect admin queue failed (-6). [ 362.219026][ T6186] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 362.228960][ T6186] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 364.263386][ T6188] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 364.278700][ T5840] (NULL device *): Create Association LS failed: Association Allocation Failed [ 364.290869][ T6188] (NULL device *): queue 0 connect admin queue failed (-6). [ 364.304510][ T6188] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 364.312101][ T6188] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 366.343224][ T6183] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 366.359106][ T5817] (NULL device *): Create Association LS failed: Association Allocation Failed [ 366.370458][ T6183] (NULL device *): queue 0 connect admin queue failed (-6). [ 366.382718][ T6183] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 366.390474][ T6183] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds