last executing test programs: 6m42.280712229s ago: executing program 4 (id=309): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005, 0x0, 0x480}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0700000004000000080000000280000000000000", @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 6m39.433213056s ago: executing program 4 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 6m37.422234073s ago: executing program 4 (id=326): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x22902, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 6m35.651579375s ago: executing program 4 (id=333): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40086602, 0x0) setns(r1, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 6m33.145165823s ago: executing program 4 (id=342): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d", 0x7, 0xfffffffffffffffe) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @p_u16=&(0x7f0000000280)=0x4}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m30.090677666s ago: executing program 4 (id=361): socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbc6, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6m29.03104526s ago: executing program 32 (id=361): socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbc6, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2m3.768453216s ago: executing program 0 (id=1153): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m1.226948305s ago: executing program 0 (id=1158): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 2m0.284695698s ago: executing program 0 (id=1160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7ff, @remote, 0x8}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m59.903885736s ago: executing program 0 (id=1170): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 1m59.671213542s ago: executing program 0 (id=1172): mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 1m58.821198532s ago: executing program 0 (id=1178): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) 1m57.848472195s ago: executing program 33 (id=1178): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) 13.247026789s ago: executing program 1 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100000005002500010000000500290000", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4008054) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_ethernet(0x7e, 0x0, 0x0) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f0, 0x6}, {0x10007, 0x30000080}]}}) 12.567904265s ago: executing program 1 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x40, 0x200) kcmp(r0, r0, 0x4, r2, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2002b000201000a000002a257fc5ad90f0a00bb6a880000d6c8db0000dba67e060a0000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e9", 0x9f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$eJzs3c9rXNUeAPDvnUnatM1r8t7r67O11WgVgz+SJv1hFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakoRO6duUnmZ6dN4jTJ5wPTOefOufeec+85mXPPmXsbwJY1kP6TRPRGxI8R0VeOVicYKL8tzM+O35yfHU9icfHVX5Ms3Y352fE8ab7erkpksBBR+DCJp5P6/U5funx2rFSavFCJD8+ce3t4+tLlJ86cGzs9eXry/OiJE0ePjDx5fPRY1XoNNlVnR4Nlablu7H936sC+F16/+vL4yatvfPt5uq29B8ufV8qxrY3NR9ysy8WLEXN1yQbSo/bbYqb2s4fb2tHG8a8V4aSrgxnhthQjIj1d3Vn774tiLJ+8vnj+g45mDlhX6XfT9uYfzy0Cm1gSnc4B0Bn5F316/Zu/4q9/qPNxF7j+zPJF/8L87PjC0nhGVxQqy7vXcf8DEXFy7o9P0lfUjKcAAKyHrG/zeE3/L1OIvdl7ea5jd2UOpT8i/h0R/4mI/0bEnoj4X0SW9v8RcU955cW+Nvc/UBOv7/8UrjXM8xpJ+39Prej7LczPVg+HFaK/mL2V5zj6ozs5daY0ebhyTAaje3saH2mxj6+eaz6ttLL/l77SPNRk4FpXecHSRibGZsbW6iBcfz9if1dV+SvHP1maCUhrwL6I2H97m96dB848+tmBZokalT/vC9/SGswzLX4a8Uj5/M9FTflzSZP5ybSOHx89NtwTpcnDw3mtqPfdD1deabb/VZV/DaTnf2d1/a9J0fd7Up6v7Y5SafLC9O3v48pPHzW9psnaf8vyL9X/JWn935a8ls1Zf/9mednFsZmZCyMR25KXsnilsfREunx0ed2LlXiePi3/4KFG9b+Q/Y2Lyvm/NyLSSnwwYvd9EXF/Je8PRMSDEXGoRfm/efaht1qUP4kkOnr+J6Jx+6/oT1bO199BoHj26y+bzdvfuv6n5/9oNrs+WFmS/f2LnpblajeDqz+CAAAAcPcrRERvJIWhcnigNwqFoaHyb/j3xM5CaWp65rFTU++cnyjfI9Af3YV8pKtvxXjoSJL//r0cH62MFeefH6mMG39c3JHFh8anShMdLjtsdbuq23/k7T/1S7HTuQPWXfN5tBa3BgCbQm37L9SlSNq68RbYeNr5HY1rAdicGrT/Fc/Q+LP6VqH651wAG1hXgxCwNTRq9e/VxOv6/42esgVsOPXt/+cGj6wDNiO9fti6tH/YurR/2JJWc1//nQfymwVaJs6z2DBNT9t3+G+VQP54mPXc145YXhKFLNAbTdfa2amjkY9Vt0zc184GI+KLVeenuAblSltM9ZLirQq4ykC7/xkGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3e3vAAAA//+EGt/a") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12.474869817s ago: executing program 6 (id=1558): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 11.149562408s ago: executing program 1 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) 10.113170323s ago: executing program 6 (id=1564): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x9, 0x0, 0x0, 0xb, 0x2}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x71]}}, 0x0, 0x34, 0x0, 0x0, 0x6, 0x10000}, 0x28) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e", 0x9}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.989221115s ago: executing program 1 (id=1566): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x20044804) 9.609882044s ago: executing program 1 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de939313"]) 9.600418015s ago: executing program 6 (id=1569): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x2) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 7.745124328s ago: executing program 1 (id=1571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.735405419s ago: executing program 6 (id=1572): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x6, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) 5.368792504s ago: executing program 5 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}], 0x74) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r5, &(0x7f0000000400)='wwnn=0x3333333333333333,', 0x18) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) 5.321897725s ago: executing program 6 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) request_key(&(0x7f0000000040)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) 5.11268662s ago: executing program 2 (id=1582): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00bbccddeeff8899aabbccddeeff001122284455667788992abb01ddeeff0011223344556677da4d9dbbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x446f9958c1a2aa84, 0x30, 0x30, 0x30, 0x2f, 0x36, 0x64, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4.26897208s ago: executing program 5 (id=1583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x37}]}, 0x24}}, 0x8840) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) r7 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r7, 0x0, 0x20000000) r8 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x141200) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r8, 0x800a6f2f, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 4.175935942s ago: executing program 2 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100000005002500010000000500290000", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4008054) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_ethernet(0x7e, 0x0, 0x0) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f0, 0x6}, {0x10007, 0x30000080}]}}) 4.133947743s ago: executing program 3 (id=1585): r0 = syz_clone3(&(0x7f0000000080)={0x1a8808400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0xfffffeaa}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) open(0x0, 0x101200, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 4.032199335s ago: executing program 3 (id=1586): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x9, 0x240200) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f000000020000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0x5) 2.98713297s ago: executing program 2 (id=1587): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x28a43, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) 2.97636292s ago: executing program 5 (id=1588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) 2.5624101s ago: executing program 3 (id=1589): epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2.56221101s ago: executing program 5 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, 0x0, 0x20004010) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0', 0x1) 2.257199247s ago: executing program 2 (id=1591): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x20044804) 1.531158294s ago: executing program 5 (id=1592): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) 1.505107274s ago: executing program 2 (id=1594): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$eJzs3M1rXFUbAPDn3nw3eZv05eV93xbBgNSK4jRtikJXrWtRQRddNiaTEjL9MBPBhIJp3asLERcF6Z8guLcuXAku6kLrX1DEIkU3rYvInY9kSGaSfsz01Pb3g5N7zpzJPM8zt517DsxNAE+tyeJHHrE/Ik5nEeONx/OIGKz1hiPW6s+7e/vibNGyWF9/+/cssoi4c/vibPO1ssZxtDEYjojrr2Xx74+2x62urC7OVCrlpcb48PLZC4erK6svL5ydOVM+Uz53bPrVY9OvTE93sdabF9794pkf33j+8tWPp978fO/3WZyIscZcax3dMhmTG+9Jq/6ImOl2sET6GvW01pn1J0wIAIAd5S1ruP/GePTF5uJtPL77KWlyAAAAQFes90WsAwAAAE+4zP4fAAAAnnDN7wHcuX1xttnSfiPh0bp1MiIm6vU372+uz/THWu04HAMRseePLFpva83qv/bQJotIX/9QLlr06D7knaxdioj/tzv/Wa3+idpd3NvrzyNiqgvxJ7eMH+v6xzZ/r6j/RBfip64fgKfTtZP1C9n261++sf6JNtf//jbXrgeR+vrXXP/d3bb+26y/r8P67617jHHgrxevd5prXf+d+uSXuSJ+cXyoou7DrUsRB/rb1Z9t1J91qP90+5cc2vrA6OzNK53iF/UX9Tbbo65//WrEwWhff1O2098nOjy/UClP1X92iHHw21OHOsVvPf9FK+I39wKPQnH+93Sof7fzf+EeY0z877f9neZ2rz//dTB7p9Zr/sP6YGZ5eelIxGD2em082Pr40Z1zaT6n+RpF/S88t/P//3b1F58Ja433odgLXGoci/HlLTFHDx796sHr762i/rkHPP+f3mOML7+58l6nudT1AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDPkEfEWGR5aaOf56VSxGhE/Cf25JXz1eWX5s+/f26umIuYiIF8fqFSnooYifo4K8ZHav3N8dEt4+mI2BcRn42P1Mal2fOVudTFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGE0IsYiy0sRkUfEn+N5XiqlzgoAAADouonUCQAAAAA9Z/8PAAAATz77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHps37PXbmQRsXZ8pNYKg425gaSZAb2Wp04ASKYvdQJAMv2pEwCSsccHsl3mhzvODN1PmA/v58kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH4O7b92I4uIteMjtVYYbMwNJM0M6LU8dQJAMn2pEwCS6U+dAJCMPT6Q7TI/3HFmqOu5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD4Gqu1LC9FRF7r53mpFPGviJiIgWx+oVKeioi9EfHz+MBQMT6SOmkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6rrqyujhTqZSXdHR0dDY6qT+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIobqyujhTqZSXqqkzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKrrqwuzlQq5aUedlLXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOn8HAAD///gOBqY=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1.261865631s ago: executing program 3 (id=1595): syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.101101434s ago: executing program 5 (id=1596): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x80000001, 0x8001) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x800}, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 472.783449ms ago: executing program 6 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000004004005040000000600000050010000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 472.431749ms ago: executing program 3 (id=1598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 32.71196ms ago: executing program 2 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4008054) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_ethernet(0x7e, 0x0, 0x0) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f0, 0x6}, {0x10007, 0x30000080}]}}) 0s ago: executing program 3 (id=1600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x28a43, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): 0] type 1 family 0 port 8472 - 0 [ 155.466945][ T5203] tipc: Resetting bearer [ 155.526920][ T5203] tipc: Disabling bearer [ 155.548321][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 155.567966][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 156.447320][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 156.646039][ T5222] netlink: 288 bytes leftover after parsing attributes in process `syz.4.231'. [ 157.504246][ T5232] FAULT_INJECTION: forcing a failure. [ 157.504246][ T5232] name failslab, interval 1, probability 0, space 0, times 1 [ 157.517578][ T5232] CPU: 1 PID: 5232 Comm: syz.3.235 Not tainted syzkaller #0 [ 157.524914][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.535104][ T5232] Call Trace: [ 157.538419][ T5232] [ 157.541386][ T5232] dump_stack_lvl+0x188/0x250 [ 157.546158][ T5232] ? show_regs_print_info+0x20/0x20 [ 157.551397][ T5232] ? load_image+0x410/0x410 [ 157.555939][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 157.561298][ T5232] ? __might_sleep+0xf0/0xf0 [ 157.565944][ T5232] should_fail+0x383/0x4b0 [ 157.570407][ T5232] should_failslab+0x5/0x20 [ 157.574962][ T5232] slab_pre_alloc_hook+0x51/0xc0 [ 157.580210][ T5232] ? zswap_frontswap_store+0x403/0x1530 [ 157.585801][ T5232] kmem_cache_alloc+0x3d/0x280 [ 157.590606][ T5232] zswap_frontswap_store+0x403/0x1530 [ 157.596042][ T5232] ? page_swapcount+0x224/0x300 [ 157.600950][ T5232] ? zswap_frontswap_init+0x100/0x100 [ 157.606374][ T5232] ? __rwlock_init+0x140/0x140 [ 157.611450][ T5232] ? _raw_spin_unlock+0x24/0x40 [ 157.616344][ T5232] ? page_swapcount+0x224/0x300 [ 157.621238][ T5232] __frontswap_store+0x331/0x4a0 [ 157.626226][ T5232] swap_writepage+0x5f/0xa0 [ 157.630959][ T5232] shrink_page_list+0x43a8/0x6de0 [ 157.636063][ T5232] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 157.642258][ T5232] ? finish_lock_switch+0x12d/0x290 [ 157.647523][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 157.652760][ T5232] ? finish_lock_switch+0x12d/0x290 [ 157.657995][ T5232] ? finish_task_switch+0x12f/0x650 [ 157.663245][ T5232] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.669278][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 157.674519][ T5232] reclaim_pages+0x712/0x990 [ 157.679176][ T5232] ? isolate_lru_page+0xbd0/0xbd0 [ 157.684254][ T5232] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 157.690794][ T5232] ? __lock_acquire+0x7b50/0x7b50 [ 157.695879][ T5232] ? rcu_lock_release+0x20/0x20 [ 157.700773][ T5232] ? finish_task_switch+0x12f/0x650 [ 157.706107][ T5232] walk_pgd_range+0xb28/0x1370 [ 157.710956][ T5232] __walk_page_range+0x136/0x590 [ 157.715933][ T5232] ? vmacache_find+0x238/0x590 [ 157.720739][ T5232] ? find_vma+0xd2/0x230 [ 157.725023][ T5232] walk_page_range+0x3a3/0x550 [ 157.729832][ T5232] ? page_mapped_in_vma+0x520/0x520 [ 157.735079][ T5232] ? preempt_schedule_thunk+0x16/0x18 [ 157.740496][ T5232] do_madvise+0x16a6/0x2aa0 [ 157.745064][ T5232] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 157.750567][ T5232] ? finish_lock_switch+0x12d/0x290 [ 157.755806][ T5232] ? finish_task_switch+0x12f/0x650 [ 157.761077][ T5232] ? __schedule+0x11cb/0x4350 [ 157.765826][ T5232] ? release_firmware_map_entry+0x190/0x190 [ 157.771759][ T5232] ? preempt_schedule_irq+0xe6/0x160 [ 157.777084][ T5232] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.783104][ T5232] ? lock_chain_count+0x20/0x20 [ 157.787995][ T5232] ? lockdep_hardirqs_on+0x94/0x140 [ 157.793249][ T5232] __x64_sys_madvise+0xa2/0xb0 [ 157.798060][ T5232] do_syscall_64+0x4c/0xa0 [ 157.802515][ T5232] ? clear_bhb_loop+0x30/0x80 [ 157.807223][ T5232] ? clear_bhb_loop+0x30/0x80 [ 157.811943][ T5232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.817883][ T5232] RIP: 0033:0x7fcfc4e4a159 [ 157.822360][ T5232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.842089][ T5232] RSP: 002b:00007fcfc3081028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 157.850548][ T5232] RAX: ffffffffffffffda RBX: 00007fcfc50d2090 RCX: 00007fcfc4e4a159 [ 157.858644][ T5232] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 157.866655][ T5232] RBP: 00007fcfc4ee103b R08: 0000000000000000 R09: 0000000000000000 [ 157.874669][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.882941][ T5232] R13: 00007fcfc50d2128 R14: 00007fcfc50d2090 R15: 00007ffc04f80158 [ 157.890973][ T5232] [ 158.617305][ T5233] netlink: 56 bytes leftover after parsing attributes in process `syz.0.234'. [ 160.025443][ T5247] loop2: detected capacity change from 0 to 2048 [ 160.061191][ T5247] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.102941][ T5247] NILFS (loop2): mounting unchecked fs [ 160.108037][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop2 [ 160.166303][ T5247] NILFS (loop2): recovery complete [ 160.194408][ T5251] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.602018][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.610884][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.194641][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.229805][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.712309][ T5233] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.722326][ T5233] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.732056][ T5233] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.741258][ T5233] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.953428][ T5293] FAULT_INJECTION: forcing a failure. [ 163.953428][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 163.966468][ T5293] CPU: 0 PID: 5293 Comm: syz.0.247 Not tainted syzkaller #0 [ 163.973796][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.983888][ T5293] Call Trace: [ 163.987204][ T5293] [ 163.990166][ T5293] dump_stack_lvl+0x188/0x250 [ 163.994887][ T5293] ? show_regs_print_info+0x20/0x20 [ 164.000135][ T5293] ? load_image+0x410/0x410 [ 164.004680][ T5293] ? __might_sleep+0xf0/0xf0 [ 164.009310][ T5293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.015345][ T5293] should_fail+0x383/0x4b0 [ 164.019805][ T5293] should_failslab+0x5/0x20 [ 164.024354][ T5293] slab_pre_alloc_hook+0x51/0xc0 [ 164.029345][ T5293] ? zswap_frontswap_store+0x403/0x1530 [ 164.034944][ T5293] kmem_cache_alloc+0x3d/0x280 [ 164.039750][ T5293] zswap_frontswap_store+0x403/0x1530 [ 164.045172][ T5293] ? page_swapcount+0x224/0x300 [ 164.050063][ T5293] ? zswap_frontswap_init+0x100/0x100 [ 164.055485][ T5293] ? __rwlock_init+0x140/0x140 [ 164.060301][ T5293] ? _raw_spin_unlock+0x24/0x40 [ 164.065200][ T5293] ? page_swapcount+0x224/0x300 [ 164.070093][ T5293] __frontswap_store+0x331/0x4a0 [ 164.075080][ T5293] swap_writepage+0x5f/0xa0 [ 164.079621][ T5293] shrink_page_list+0x43a8/0x6de0 [ 164.084716][ T5293] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 164.090914][ T5293] ? __lock_acquire+0x13dc/0x7b50 [ 164.095993][ T5293] ? verify_lock_unused+0x140/0x140 [ 164.101270][ T5293] reclaim_pages+0x712/0x990 [ 164.105932][ T5293] ? isolate_lru_page+0xbd0/0xbd0 [ 164.111028][ T5293] ? asm_sysvec_call_function_single+0x16/0x20 [ 164.117230][ T5293] ? do_raw_spin_unlock+0x11d/0x230 [ 164.122505][ T5293] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 164.129065][ T5293] ? rcu_lock_release+0x20/0x20 [ 164.133968][ T5293] walk_pgd_range+0xb28/0x1370 [ 164.138808][ T5293] __walk_page_range+0x136/0x590 [ 164.143794][ T5293] ? vmacache_find+0x238/0x590 [ 164.148606][ T5293] ? find_vma+0xd2/0x230 [ 164.152908][ T5293] walk_page_range+0x3a3/0x550 [ 164.157717][ T5293] ? local_lock_release+0x97/0x170 [ 164.162882][ T5293] ? page_mapped_in_vma+0x520/0x520 [ 164.168143][ T5293] do_madvise+0x16a6/0x2aa0 [ 164.172703][ T5293] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 164.178234][ T5293] ? verify_lock_unused+0x140/0x140 [ 164.183514][ T5293] ? verify_lock_unused+0x140/0x140 [ 164.188886][ T5293] ? __context_tracking_exit+0x4c/0x80 [ 164.194402][ T5293] ? __lock_acquire+0x7b50/0x7b50 [ 164.199489][ T5293] ? lock_chain_count+0x20/0x20 [ 164.204400][ T5293] __x64_sys_madvise+0xa2/0xb0 [ 164.209212][ T5293] do_syscall_64+0x4c/0xa0 [ 164.213708][ T5293] ? clear_bhb_loop+0x30/0x80 [ 164.218462][ T5293] ? clear_bhb_loop+0x30/0x80 [ 164.223278][ T5293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.229222][ T5293] RIP: 0033:0x7ff12f50c159 [ 164.233677][ T5293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.253323][ T5293] RSP: 002b:00007ff12d743028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 164.262284][ T5293] RAX: ffffffffffffffda RBX: 00007ff12f794090 RCX: 00007ff12f50c159 [ 164.270437][ T5293] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 164.278559][ T5293] RBP: 00007ff12f5a303b R08: 0000000000000000 R09: 0000000000000000 [ 164.286587][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.294602][ T5293] R13: 00007ff12f794128 R14: 00007ff12f794090 R15: 00007fff59c5d5a8 [ 164.302636][ T5293] [ 164.821888][ T5305] device hsr0 entered promiscuous mode [ 164.850769][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 165.240679][ T5317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.169163][ T5333] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 166.525564][ T5334] loop4: detected capacity change from 0 to 2048 [ 166.606185][ T5334] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 166.667226][ T5334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.712963][ T5333] device bond1 entered promiscuous mode [ 166.732537][ T5333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.769420][ T5336] bond1: (slave erspan1): making interface the new active one [ 166.783327][ T5336] device erspan1 entered promiscuous mode [ 166.791795][ T5336] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 166.807137][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 168.008586][ T5354] FAULT_INJECTION: forcing a failure. [ 168.008586][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 168.021452][ T5354] CPU: 1 PID: 5354 Comm: syz.2.264 Not tainted syzkaller #0 [ 168.028797][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.038894][ T5354] Call Trace: [ 168.042212][ T5354] [ 168.045171][ T5354] dump_stack_lvl+0x188/0x250 [ 168.049894][ T5354] ? show_regs_print_info+0x20/0x20 [ 168.055138][ T5354] ? load_image+0x410/0x410 [ 168.059686][ T5354] ? lockdep_hardirqs_on+0x94/0x140 [ 168.064965][ T5354] should_fail+0x383/0x4b0 [ 168.069450][ T5354] should_failslab+0x5/0x20 [ 168.074073][ T5354] slab_pre_alloc_hook+0x51/0xc0 [ 168.079056][ T5354] ? zswap_frontswap_store+0x403/0x1530 [ 168.084733][ T5354] kmem_cache_alloc+0x3d/0x280 [ 168.089540][ T5354] zswap_frontswap_store+0x403/0x1530 [ 168.094965][ T5354] ? page_swapcount+0x224/0x300 [ 168.099857][ T5354] ? zswap_frontswap_init+0x100/0x100 [ 168.105273][ T5354] ? __rwlock_init+0x140/0x140 [ 168.110083][ T5354] ? _raw_spin_unlock+0x24/0x40 [ 168.114969][ T5354] ? page_swapcount+0x224/0x300 [ 168.119868][ T5354] __frontswap_store+0x331/0x4a0 [ 168.124848][ T5354] swap_writepage+0x5f/0xa0 [ 168.129385][ T5354] shrink_page_list+0x43a8/0x6de0 [ 168.134477][ T5354] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 168.140664][ T5354] ? finish_lock_switch+0x12d/0x290 [ 168.145910][ T5354] ? lockdep_hardirqs_on+0x94/0x140 [ 168.151149][ T5354] ? finish_lock_switch+0x12d/0x290 [ 168.156389][ T5354] ? finish_task_switch+0x12f/0x650 [ 168.161645][ T5354] ? __lock_acquire+0x13dc/0x7b50 [ 168.166736][ T5354] reclaim_pages+0x712/0x990 [ 168.171386][ T5354] ? isolate_lru_page+0xbd0/0xbd0 [ 168.176464][ T5354] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 168.183017][ T5354] ? __lock_acquire+0x7b50/0x7b50 [ 168.188098][ T5354] ? rcu_lock_release+0x20/0x20 [ 168.192994][ T5354] ? finish_task_switch+0x12f/0x650 [ 168.198242][ T5354] walk_pgd_range+0xb28/0x1370 [ 168.203076][ T5354] __walk_page_range+0x136/0x590 [ 168.208056][ T5354] ? vmacache_find+0x238/0x590 [ 168.212859][ T5354] ? find_vma+0xd2/0x230 [ 168.217147][ T5354] walk_page_range+0x3a3/0x550 [ 168.221951][ T5354] ? page_mapped_in_vma+0x520/0x520 [ 168.227182][ T5354] ? find_vma+0x1d4/0x230 [ 168.231567][ T5354] ? preempt_schedule_thunk+0x16/0x18 [ 168.237078][ T5354] do_madvise+0x16a6/0x2aa0 [ 168.241638][ T5354] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 168.247133][ T5354] ? finish_lock_switch+0x12d/0x290 [ 168.252375][ T5354] ? finish_task_switch+0x12f/0x650 [ 168.257618][ T5354] ? __schedule+0x11cb/0x4350 [ 168.262344][ T5354] ? verify_lock_unused+0x140/0x140 [ 168.267619][ T5354] ? release_firmware_map_entry+0x190/0x190 [ 168.273559][ T5354] ? preempt_schedule_irq+0xe6/0x160 [ 168.278897][ T5354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.284931][ T5354] ? lock_chain_count+0x20/0x20 [ 168.290021][ T5354] ? lockdep_hardirqs_on+0x94/0x140 [ 168.295280][ T5354] __x64_sys_madvise+0xa2/0xb0 [ 168.300102][ T5354] do_syscall_64+0x4c/0xa0 [ 168.304555][ T5354] ? clear_bhb_loop+0x30/0x80 [ 168.309268][ T5354] ? clear_bhb_loop+0x30/0x80 [ 168.313979][ T5354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.319916][ T5354] RIP: 0033:0x7f778a9e4159 [ 168.324369][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.344115][ T5354] RSP: 002b:00007f7788c1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 168.352574][ T5354] RAX: ffffffffffffffda RBX: 00007f778ac6c090 RCX: 00007f778a9e4159 [ 168.360594][ T5354] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 168.368610][ T5354] RBP: 00007f778aa7b03b R08: 0000000000000000 R09: 0000000000000000 [ 168.376625][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.384720][ T5354] R13: 00007f778ac6c128 R14: 00007f778ac6c090 R15: 00007ffd20bd1ee8 [ 168.392838][ T5354] [ 168.395949][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.841829][ T5359] loop3: detected capacity change from 0 to 128 [ 168.985389][ T5361] device syzkaller0 entered promiscuous mode [ 169.598793][ T5378] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 169.627532][ T5378] rtrs_client L2062: : Failed to resolve address, err: -19 [ 169.637844][ T5378] rtrs_client L2614: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 169.757781][ T5359] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.939121][ T5359] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.879250][ T5419] FAULT_INJECTION: forcing a failure. [ 173.879250][ T5419] name fail_futex, interval 1, probability 0, space 0, times 1 [ 173.935493][ T5419] CPU: 1 PID: 5419 Comm: syz.4.283 Not tainted syzkaller #0 [ 173.942951][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.953050][ T5419] Call Trace: [ 173.956367][ T5419] [ 173.959336][ T5419] dump_stack_lvl+0x188/0x250 [ 173.964062][ T5419] ? show_regs_print_info+0x20/0x20 [ 173.969311][ T5419] ? load_image+0x410/0x410 [ 173.973870][ T5419] should_fail+0x383/0x4b0 [ 173.978432][ T5419] get_futex_key+0x1a1/0x12d0 [ 173.983161][ T5419] ? release_firmware_map_entry+0x190/0x190 [ 173.989104][ T5419] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.995131][ T5419] ? futex_wait_restart+0x250/0x250 [ 174.000379][ T5419] ? lock_chain_count+0x20/0x20 [ 174.005372][ T5419] ? preempt_schedule+0xbc/0xd0 [ 174.010279][ T5419] futex_wait_setup+0x4b/0x520 [ 174.015101][ T5419] ? schedule_preempt_disabled+0x20/0x20 [ 174.020778][ T5419] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 174.026761][ T5419] futex_wait+0x22f/0x680 [ 174.031185][ T5419] ? do_futex+0x12b0/0x12b0 [ 174.035755][ T5419] ? verify_lock_unused+0x140/0x140 [ 174.040999][ T5419] ? verify_lock_unused+0x140/0x140 [ 174.046290][ T5419] do_futex+0xdc2/0x12b0 [ 174.050600][ T5419] ? futex_exit_release+0x1c0/0x1c0 [ 174.055887][ T5419] ? __context_tracking_exit+0x4c/0x80 [ 174.061405][ T5419] __se_sys_futex+0x389/0x420 [ 174.066142][ T5419] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.072277][ T5419] ? __x64_sys_futex+0xf0/0xf0 [ 174.077137][ T5419] ? __x64_sys_futex+0x1d/0xf0 [ 174.081946][ T5419] do_syscall_64+0x4c/0xa0 [ 174.086402][ T5419] ? clear_bhb_loop+0x30/0x80 [ 174.091126][ T5419] ? clear_bhb_loop+0x30/0x80 [ 174.095849][ T5419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.101784][ T5419] RIP: 0033:0x7f03702b5159 [ 174.106254][ T5419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.125929][ T5419] RSP: 002b:00007f036e4ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.134400][ T5419] RAX: ffffffffffffffda RBX: 00007f037053d098 RCX: 00007f03702b5159 [ 174.142409][ T5419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f037053d098 [ 174.150422][ T5419] RBP: 00007f037053d090 R08: 0000000000000000 R09: 0000000000000000 [ 174.158565][ T5419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.166578][ T5419] R13: 00007f037053d128 R14: 00007fff00215c40 R15: 00007fff00215d28 [ 174.174603][ T5419] [ 180.015552][ T26] audit: type=1800 audit(1788898022.708:34): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.300" name="in_ports" dev="configfs" ino=36486 res=0 errno=0 [ 182.590534][ T5506] loop2: detected capacity change from 0 to 128 [ 182.700442][ T5506] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 182.982077][ T4311] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 183.359350][ T5524] loop2: detected capacity change from 0 to 512 [ 183.486700][ T5524] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 185.459757][ T5547] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 186.018345][ T5547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.801584][ T5553] device macvlan2 entered promiscuous mode [ 186.832050][ T5553] device bond2 entered promiscuous mode [ 186.933973][ T5553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.106150][ T5553] team0: Port device macvlan2 added [ 187.475730][ T5556] bond2: (slave ip6gretap1): making interface the new active one [ 187.549816][ T5556] device ip6gretap1 entered promiscuous mode [ 187.557502][ T5556] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 187.575848][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 188.162067][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 188.571375][ T5574] device bond_slave_0 entered promiscuous mode [ 188.578071][ T5574] device bond_slave_1 entered promiscuous mode [ 188.608753][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 188.934888][ T5577] device bond_slave_0 left promiscuous mode [ 188.940941][ T5577] device bond_slave_1 left promiscuous mode [ 189.466547][ T5597] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 189.516833][ T5605] loop4: detected capacity change from 0 to 128 [ 189.557868][ T5605] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.648555][ T5597] device bond2 entered promiscuous mode [ 189.715424][ T5597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.823033][ T5607] bond2: (slave erspan1): making interface the new active one [ 189.842452][ T5607] device erspan1 entered promiscuous mode [ 189.854533][ T5607] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 189.889681][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 190.112328][ T5622] device syzkaller0 entered promiscuous mode [ 191.230714][ T5630] loop0: detected capacity change from 0 to 256 [ 191.883271][ T3977] Bluetooth: hci4: command 0x0406 tx timeout [ 191.887556][ T5630] exfat: Deprecated parameter 'utf8' [ 191.890895][ T3977] Bluetooth: hci2: command 0x0406 tx timeout [ 191.900694][ T3977] Bluetooth: hci1: command 0x0406 tx timeout [ 191.907062][ T3977] Bluetooth: hci0: command 0x0406 tx timeout [ 191.913139][ T3977] Bluetooth: hci3: command 0x0406 tx timeout [ 191.926578][ T5630] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 192.071010][ T4186] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 192.114285][ T4186] FAT-fs (loop4): Filesystem has been set read-only [ 192.236301][ T4186] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 192.399436][ T5641] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 192.435905][ T5638] tipc: Enabling of bearer rejected, failed to enable media [ 192.452503][ T5641] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 193.264341][ T5668] device syzkaller0 entered promiscuous mode [ 193.358640][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 194.778017][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.784355][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.109118][ T5689] loop2: detected capacity change from 0 to 16 [ 196.141760][ T5689] erofs: (device loop2): mounted with root inode @ nid 36. [ 196.156734][ T5689] attempt to access beyond end of device [ 196.156734][ T5689] loop2: rw=524288, want=32, limit=16 [ 196.193228][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 196.210168][ T26] audit: type=1800 audit(1788898038.978:35): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.360" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 197.357868][ T5689] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 197.367325][ T5689] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 197.376355][ T5689] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 197.385477][ T5689] attempt to access beyond end of device [ 197.385477][ T5689] loop2: rw=524288, want=56, limit=16 [ 197.396458][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 197.413258][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.432391][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.451262][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.469329][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.814806][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.836232][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.857713][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 197.878683][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 198.718476][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 198.739921][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 198.761648][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 198.783549][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 198.924791][ T5689] attempt to access beyond end of device [ 198.924791][ T5689] loop2: rw=0, want=24, limit=16 [ 198.935733][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[9000] [ 198.960629][ T5689] attempt to access beyond end of device [ 198.960629][ T5689] loop2: rw=0, want=24, limit=16 [ 198.972161][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[9000] [ 198.995805][ T5689] attempt to access beyond end of device [ 198.995805][ T5689] loop2: rw=0, want=24, limit=16 [ 199.006475][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[9000] [ 199.031272][ T5689] attempt to access beyond end of device [ 199.031272][ T5689] loop2: rw=0, want=24, limit=16 [ 199.042037][ T5689] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[9000] [ 199.247635][ T5735] tipc: Enabling of bearer rejected, failed to enable media [ 199.825667][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 199.896660][ T5707] chnl_net:caif_netlink_parms(): no params data found [ 200.662354][ T5760] overlayfs: failed to clone upperpath [ 201.504746][ T1281] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 201.552574][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.607831][ T1281] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 201.627359][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.672596][ T5707] device bridge_slave_0 entered promiscuous mode [ 201.731793][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.777778][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.841753][ T5707] device bridge_slave_1 entered promiscuous mode [ 201.904974][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 201.953746][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.617476][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.733942][ T5707] team0: Port device team_slave_0 added [ 202.742064][ T5707] team0: Port device team_slave_1 added [ 202.764061][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.771090][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.835873][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.940816][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.985839][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.236789][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.598122][ T5707] device hsr_slave_0 entered promiscuous mode [ 203.627081][ T5707] device hsr_slave_1 entered promiscuous mode [ 203.644273][ T5707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.661148][ T5707] Cannot create hsr debugfs directory [ 203.980883][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 204.123530][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.763794][ T5707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.832893][ T5707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.918063][ T5707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.953496][ T5801] loop0: detected capacity change from 0 to 1024 [ 204.972743][ T5707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.215678][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.296742][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.348897][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.386345][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.485968][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.696629][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 205.841560][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.101319][ T3977] Bluetooth: hci0: command 0x0419 tx timeout [ 206.134265][ T5707] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.155546][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.164055][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.215332][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.234037][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.285301][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.293853][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.296653][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.301134][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.319486][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.335451][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.359260][ T5825] jffs2: notice: (5825) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.394251][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.401649][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.410407][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.425437][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.433661][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.445295][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.477039][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.484499][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.511930][ T5828] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.525483][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.534683][ T5828] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.536118][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.575543][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.604193][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.636730][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.668345][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.686754][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.701024][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.773528][ T5837] tipc: Enabling of bearer rejected, failed to enable media [ 206.790405][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.855744][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 206.905921][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.930361][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.939246][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.007301][ T5844] "syz.2.397" (5844) uses obsolete ecb(arc4) skcipher [ 207.063174][ T5813] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.321099][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.391813][ T5707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.482722][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.577625][ T5707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.631848][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.682214][ T5801] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.743829][ T5843] device bridge1 entered promiscuous mode [ 207.788094][ T5843] team0: Port device bridge1 added [ 207.817098][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.885478][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.926587][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.976777][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.020911][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.089443][ T5859] device syzkaller0 entered promiscuous mode [ 209.498179][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.498328][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.505846][ T5707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.595176][ T5881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.599576][ T5881] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.054327][ T5902] loop3: detected capacity change from 0 to 128 [ 212.193586][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.339679][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.546048][ T5913] netlink: 260 bytes leftover after parsing attributes in process `syz.3.415'. [ 212.557738][ T5913] netlink: 104 bytes leftover after parsing attributes in process `syz.3.415'. [ 212.567193][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 212.580856][ T4196] Bluetooth: Wrong link type (-22) [ 212.664191][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.735533][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.927291][ T5707] device veth0_vlan entered promiscuous mode [ 212.970667][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.005762][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.075951][ T5707] device veth1_vlan entered promiscuous mode [ 213.235433][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.243836][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.408962][ T5707] device veth0_macvtap entered promiscuous mode [ 213.443409][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.463611][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.534386][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.618689][ T5707] device veth1_macvtap entered promiscuous mode [ 213.732796][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.794273][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.846524][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.898058][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.951546][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.012278][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.086007][ T5932] loop0: detected capacity change from 0 to 128 [ 214.093967][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.127725][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.168564][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.189850][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.216664][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.287176][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.298061][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.308220][ T5707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.328962][ T5707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.349642][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.368856][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.398693][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.442053][ T5932] md/raid1:md123: active with 1 out of 1 mirrors [ 214.444774][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.458793][ T5932] md123: detected capacity change from 0 to 10 [ 214.476940][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.487120][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.506068][ T5707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.520251][ T5707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.532668][ T5707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.543328][ T5707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.562999][ T5941] tipc: Enabled bearer , priority 0 [ 214.570693][ T5938] device syzkaller0 entered promiscuous mode [ 214.656063][ T5938] tipc: Resetting bearer [ 215.573367][ T5937] tipc: Resetting bearer [ 215.605942][ T5937] tipc: Disabling bearer [ 215.657671][ T4352] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 215.687576][ T4352] Bluetooth: hci1: Injecting HCI hardware error event [ 215.822259][ T4196] Bluetooth: hci1: hardware error 0x00 [ 216.487211][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.515939][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.625853][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.677280][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.685643][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.693754][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.820046][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.879164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.986488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.237489][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.817845][ T5994] loop3: detected capacity change from 0 to 512 [ 219.946833][ T5994] EXT4-fs (loop3): 1 truncate cleaned up [ 219.952550][ T5994] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 220.285415][ T5994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.430: bg 0: block 465: padding at end of block bitmap is not set [ 220.361753][ T5994] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 220.379710][ T5994] EXT4-fs (loop3): This should not happen!! Data will be lost [ 220.379710][ T5994] [ 220.396323][ T5994] EXT4-fs (loop3): Total free blocks count 0 [ 220.409896][ T5994] EXT4-fs (loop3): Free/Dirty block details [ 220.417058][ T5994] EXT4-fs (loop3): free_blocks=0 [ 220.423199][ T5994] EXT4-fs (loop3): dirty_blocks=2 [ 220.434950][ T5994] EXT4-fs (loop3): Block reservation details [ 220.441242][ T5994] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 220.518025][ T4369] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 220.532451][ T4369] EXT4-fs (loop3): This should not happen!! Data will be lost [ 220.532451][ T4369] [ 223.457586][ T6043] device bridge1 entered promiscuous mode [ 223.583664][ T6043] team0: Port device bridge1 added [ 223.607949][ T6041] loop5: detected capacity change from 0 to 1024 [ 223.623533][ T6045] device bridge2 entered promiscuous mode [ 223.649017][ T6045] team0: Port device bridge2 added [ 224.489440][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.565653][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.637520][ T6059] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.694260][ T6059] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.714636][ T6061] device syzkaller0 entered promiscuous mode [ 224.744596][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.817572][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.873189][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 224.923819][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 225.251677][ T6059] hfsplus: request for non-existent node 33423360 in B*Tree [ 225.294994][ T6059] hfsplus: request for non-existent node 33423360 in B*Tree [ 225.339822][ T6076] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 225.717863][ T6076] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 226.504366][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.573088][ T6041] hfsplus: request for non-existent node 33423360 in B*Tree [ 226.682878][ T6081] loop3: detected capacity change from 0 to 2048 [ 226.857968][ T6081] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 226.960552][ T6081] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 228.179955][ T6108] device bridge1 entered promiscuous mode [ 228.269074][ T6108] team0: Port device bridge1 added [ 228.318851][ T6109] device syzkaller0 entered promiscuous mode [ 228.483727][ T6119] loop5: detected capacity change from 0 to 8 [ 228.618275][ T6119] SQUASHFS error: zlib decompression failed, data probably corrupt [ 228.770126][ T6119] SQUASHFS error: Failed to read block 0x9b: -5 [ 228.803523][ T6119] SQUASHFS error: Unable to read metadata cache entry [99] [ 229.244403][ T6119] SQUASHFS error: Unable to read inode 0x127 [ 230.141215][ T6136] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 230.417174][ T6149] syzkaller0: create flow: hash 395309703 index 2 [ 231.433033][ T4231] syzkaller0: tun_net_xmit 76 [ 231.455466][ T4231] syzkaller0: tun_net_xmit 48 [ 231.499803][ T4251] syzkaller0: tun_net_xmit 76 [ 231.935099][ T4231] syzkaller0: tun_net_xmit 76 [ 232.383402][ T4231] syzkaller0: tun_net_xmit 76 [ 232.500134][ T6173] device bridge1 entered promiscuous mode [ 232.565794][ T6173] team0: Port device bridge1 added [ 232.599393][ T6166] syzkaller0: delete flow: hash 395309703 index 2 [ 232.721669][ T6181] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 232.770984][ T6181] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 232.812095][ T6181] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 232.837181][ T6181] pit: kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 232.872802][ T6181] pit: kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 232.897940][ T6188] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 9 (only 8 groups) [ 232.925476][ T6181] pit: kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 232.960865][ T6181] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 232.987745][ T6181] pit: kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 233.017666][ T6181] pit: kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 233.045413][ T6181] pit: kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 233.930697][ T6200] syz.3.481 (6200): attempted to duplicate a private mapping with mremap. This is not supported. [ 235.400447][ T6214] loop2: detected capacity change from 0 to 8 [ 235.433418][ T6213] jffs2: notice: (6213) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.662013][ T6223] MTDSB: Device #1 doesn't appear to exist [ 235.662013][ T6223] [ 235.803217][ T6225] device bridge2 entered promiscuous mode [ 235.853622][ T6225] team0: Port device bridge2 added [ 236.042559][ T6230] bridge0: port 3(team0) entered blocking state [ 236.055054][ T6230] bridge0: port 3(team0) entered disabled state [ 236.069722][ T6230] device team0 entered promiscuous mode [ 236.122664][ T6230] device team_slave_0 entered promiscuous mode [ 236.212867][ T6230] device team_slave_1 entered promiscuous mode [ 236.289271][ T6230] bridge0: port 3(team0) entered blocking state [ 236.296205][ T6230] bridge0: port 3(team0) entered forwarding state [ 236.313165][ T6231] device bridge3 entered promiscuous mode [ 236.380852][ T6231] team0: Port device bridge3 added [ 236.428368][ T6239] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 236.467128][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.674119][ T6241] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 237.865659][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 238.255025][ T4251] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 238.855165][ T6222] block2mtd: error: cannot open device /dev/loop0 [ 239.929053][ T6267] device syzkaller0 entered promiscuous mode [ 239.993759][ T6273] netlink: 'syz.2.500': attribute type 13 has an invalid length. [ 240.045060][ T4251] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 240.062939][ T4251] usb 4-1: can't read configurations, error -71 [ 240.123974][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 240.137335][ T6273] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 240.166362][ T6278] device bridge2 entered promiscuous mode [ 240.246583][ T6278] team0: Port device bridge2 added [ 240.397466][ T6284] device bridge2 entered promiscuous mode [ 240.437333][ T6284] team0: Port device bridge2 added [ 240.457930][ T6278] bridge0: port 3(team0) entered blocking state [ 240.485025][ T6278] bridge0: port 3(team0) entered disabled state [ 240.503845][ T6278] device team0 entered promiscuous mode [ 240.519178][ T6278] device team_slave_0 entered promiscuous mode [ 240.526513][ T6278] device team_slave_1 entered promiscuous mode [ 240.538459][ T6278] bridge0: port 3(team0) entered blocking state [ 240.544941][ T6278] bridge0: port 3(team0) entered forwarding state [ 240.556663][ T6286] bridge0: port 3(team0) entered blocking state [ 240.577431][ T6286] bridge0: port 3(team0) entered disabled state [ 240.608038][ T6286] device team0 entered promiscuous mode [ 240.624286][ T6286] device team_slave_0 entered promiscuous mode [ 240.638939][ T6286] device team_slave_1 entered promiscuous mode [ 240.658893][ T6286] bridge0: port 3(team0) entered blocking state [ 240.665334][ T6286] bridge0: port 3(team0) entered forwarding state [ 242.707522][ T6291] loop3: detected capacity change from 0 to 4096 [ 242.770855][ T6311] loop5: detected capacity change from 0 to 2048 [ 242.911891][ T6311] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.286501][ T6291] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 245.312074][ T6343] device bridge3 entered promiscuous mode [ 245.322318][ T6343] team0: Port device bridge3 added [ 246.340617][ T6355] loop5: detected capacity change from 0 to 512 [ 246.671178][ T6355] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 246.700589][ T6355] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.763287][ T6388] device bridge1 entered promiscuous mode [ 250.782606][ T6388] team0: Port device bridge1 added [ 250.825086][ T6391] bridge0: port 3(team0) entered blocking state [ 250.862502][ T6391] bridge0: port 3(team0) entered disabled state [ 250.967852][ T6391] device team0 entered promiscuous mode [ 251.004955][ T6391] device team_slave_0 entered promiscuous mode [ 251.035213][ T6391] device team_slave_1 entered promiscuous mode [ 252.432800][ T6398] device bridge3 entered promiscuous mode [ 253.794804][ T6398] team0: Port device bridge3 added [ 254.058388][ T6426] loop3: detected capacity change from 0 to 1024 [ 254.254152][ T6426] EXT4-fs (loop3): Ignoring removed bh option [ 254.280504][ T6426] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.395867][ T6426] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,nogrpid,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 255.738058][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744418][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.770177][ T6449] device bridge3 entered promiscuous mode [ 255.804338][ T6449] team0: Port device bridge3 added [ 255.984156][ T6452] device bridge4 entered promiscuous mode [ 256.033778][ T6452] team0: Port device bridge4 added [ 256.086713][ T6454] device syzkaller0 entered promiscuous mode [ 256.312765][ T6459] tc action pedit 'at' offset 5 out of bounds [ 256.492469][ T6465] device bridge5 entered promiscuous mode [ 256.542232][ T6465] team0: Port device bridge5 added [ 257.445436][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 257.867701][ T6488] jffs2: notice: (6488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.892204][ T6488] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.901843][ T6488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.905589][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.933318][ T21] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.951038][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.996464][ T21] usb 3-1: config 0 descriptor?? [ 258.049573][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 258.085605][ T6481] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 258.094768][ T6481] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 258.114980][ T4352] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.178964][ T6495] device bridge4 entered promiscuous mode [ 258.187453][ T6495] team0: Port device bridge4 added [ 258.265062][ T21] pwc: send_video_command error -71 [ 258.270379][ T21] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 258.290903][ T21] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 258.326003][ T21] usb 3-1: USB disconnect, device number 2 [ 258.345401][ T6497] device bridge2 entered promiscuous mode [ 258.369593][ T6497] team0: Port device bridge2 added [ 258.495057][ T4352] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.599734][ T6503] device syzkaller0 entered promiscuous mode [ 258.609041][ T4352] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.785742][ T4352] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 258.865303][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 258.957725][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.994126][ T4352] usb 6-1: Product: syz [ 259.026001][ T4352] usb 6-1: Manufacturer: syz [ 259.077487][ T4352] usb 6-1: SerialNumber: syz [ 259.315441][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.339720][ T4352] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 259.376912][ T21] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.494724][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.525158][ T4352] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 259.667677][ T21] usb 3-1: config 0 descriptor?? [ 259.864716][ T4352] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 259.873789][ T21] usb 3-1: can't set config #0, error -71 [ 259.883118][ T21] usb 3-1: USB disconnect, device number 3 [ 259.998687][ T6524] overlayfs: failed to clone upperpath [ 261.767639][ T6539] tipc: Started in network mode [ 261.915028][ T6539] tipc: Node identity 92c57688de54, cluster identity 4711 [ 261.942523][ T6539] tipc: Enabled bearer , priority 0 [ 262.002496][ T6539] device syzkaller0 entered promiscuous mode [ 262.052560][ T6539] tipc: Resetting bearer [ 262.236296][ T6544] device bridge4 entered promiscuous mode [ 262.551871][ T6544] team0: Port device bridge4 added [ 262.733666][ T6538] tipc: Resetting bearer [ 262.872753][ T6538] tipc: Disabling bearer [ 262.909787][ T6545] device bridge4 entered promiscuous mode [ 262.922161][ T6545] team0: Port device bridge4 added [ 263.143541][ T6556] block device autoloading is deprecated and will be removed. [ 263.916804][ T6484] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 264.135338][ T6484] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 264.209443][ T4262] usb 6-1: USB disconnect, device number 2 [ 264.468166][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.505428][ T4262] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 264.522001][ T6568] loop2: detected capacity change from 0 to 2048 [ 264.800475][ T4262] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 264.829129][ T6568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.435914][ T4262] ti_usb_3410_5052 6-1:2.0: device disconnected [ 265.612801][ T6571] bond1: (slave team0): Releasing active interface [ 266.150392][ T6596] overlayfs: failed to clone upperpath [ 266.743529][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.793281][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.837325][ T6571] device bridge_slave_0 left promiscuous mode [ 266.843642][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.896682][ T6571] device bridge_slave_1 left promiscuous mode [ 266.902993][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.809180][ T6571] bond0: (slave bond_slave_0): Releasing backup interface [ 267.836688][ T6571] bond0: (slave bond_slave_1): Releasing backup interface [ 267.911038][ T6571] team0: Port device team_slave_0 removed [ 267.970075][ T6571] team0: Port device team_slave_1 removed [ 267.983586][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.992073][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.009472][ T6608] dccp_v6_rcv: dropped packet with invalid checksum [ 268.023092][ T6571] bond2: (slave erspan1): Releasing active interface [ 268.038406][ T6571] device erspan1 left promiscuous mode [ 268.084398][ T6571] team0: Port device bridge1 removed [ 268.110936][ T6571] team0: Port device bridge2 removed [ 268.131730][ T6571] team0: Port device bridge3 removed [ 268.149802][ T6571] team0: Port device bridge4 removed [ 268.234408][ T6593] device bridge6 entered promiscuous mode [ 268.263793][ T6593] team0: Port device bridge6 added [ 269.467566][ T6631] loop5: detected capacity change from 0 to 128 [ 270.286535][ T6631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 270.310336][ T6631] System zones: 1-3, 19-19, 35-36 [ 270.498638][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 270.595122][ T6631] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.697193][ T4358] Bluetooth: hci2: command 0x0409 tx timeout [ 277.918927][ T4358] Bluetooth: hci2: command 0x041b tx timeout [ 277.927331][ T6697] dccp_v6_rcv: dropped packet with invalid checksum [ 278.853170][ T6714] device bridge3 entered promiscuous mode [ 278.940195][ T6714] team0: Port device bridge3 added [ 278.995743][ T6671] chnl_net:caif_netlink_parms(): no params data found [ 279.282338][ T6699] overlayfs: failed to clone upperpath [ 279.329261][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.371906][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.381413][ T6671] device bridge_slave_0 entered promiscuous mode [ 279.392063][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.400166][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.408946][ T6671] device bridge_slave_1 entered promiscuous mode [ 279.453805][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.484617][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.267996][ T4358] Bluetooth: hci2: command 0x040f tx timeout [ 280.302827][ T6671] team0: Port device team_slave_0 added [ 280.333712][ T6671] team0: Port device team_slave_1 added [ 280.646964][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.701865][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.235011][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.278885][ T6755] loop3: detected capacity change from 0 to 512 [ 281.354464][ T6755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.366647][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.373631][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.458097][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.535938][ T6755] EXT4-fs (loop3): 1 truncate cleaned up [ 281.541650][ T6755] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 281.609005][ T6671] device hsr_slave_0 entered promiscuous mode [ 281.641825][ T6671] device hsr_slave_1 entered promiscuous mode [ 281.676457][ T6671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.733775][ T6671] Cannot create hsr debugfs directory [ 281.945699][ T6767] device bridge5 entered promiscuous mode [ 281.953271][ T6767] team0: Port device bridge5 added [ 282.295129][ T3977] Bluetooth: hci2: command 0x0419 tx timeout [ 282.689101][ T26] audit: type=1326 audit(1788898125.458:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 282.776761][ T26] audit: type=1326 audit(1788898125.488:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 282.805835][ T6671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.826063][ T26] audit: type=1326 audit(1788898125.488:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 282.896204][ T26] audit: type=1326 audit(1788898125.488:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 282.942106][ T26] audit: type=1326 audit(1788898125.488:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 282.978678][ T6790] jffs2: notice: (6790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.046707][ T6790] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.055679][ T6790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.066561][ T26] audit: type=1326 audit(1788898125.488:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 283.103220][ T26] audit: type=1326 audit(1788898125.488:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 283.153766][ T26] audit: type=1326 audit(1788898125.488:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 283.185628][ T6671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.226000][ T6797] loop5: detected capacity change from 0 to 1024 [ 283.258643][ T26] audit: type=1326 audit(1788898125.518:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 283.330057][ T26] audit: type=1326 audit(1788898125.518:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.3.633" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc4e4a159 code=0x7ffc0000 [ 283.350227][ T6797] hfsplus: unable to load nls mapping "cp43" [ 283.375014][ T6797] hfsplus: unable to parse mount options [ 283.393373][ T6671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.801175][ T6671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.103245][ T6828] MTRR 2 not used [ 286.372529][ T6831] device bridge4 entered promiscuous mode [ 286.403168][ T6831] team0: Port device bridge4 added [ 286.503730][ C0] Unknown status report in ack skb [ 286.586628][ T6671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.609061][ T6841] loop3: detected capacity change from 0 to 512 [ 286.627887][ T6671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.648237][ T6671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 286.677969][ T6671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 286.709999][ T6841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 286.720382][ T6841] System zones: 1-12 [ 286.796625][ T6841] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.648: missing EA_INODE flag [ 286.813462][ T6841] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.648: error while reading EA inode 12 err=-117 [ 286.830972][ T6841] EXT4-fs (loop3): 1 orphan inode deleted [ 286.836817][ T6841] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 287.024734][ T4358] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 287.046022][ T6850] capability: warning: `syz.1.650' uses 32-bit capabilities (legacy support in use) [ 287.346404][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.547937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.575635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.590805][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.623313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.642861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.670507][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.677700][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.723933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.755429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.775793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.809732][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.816908][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.825827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.835348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.855601][ T4358] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 287.886103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.894599][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.910917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.919019][ T4358] usb 6-1: Product: syz [ 287.923217][ T4358] usb 6-1: Manufacturer: syz [ 287.929328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.938016][ T4358] usb 6-1: SerialNumber: syz [ 287.947471][ T4358] usb 6-1: config 0 descriptor?? [ 288.043521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.081021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.132897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.379451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.388152][ T4358] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.169693][ T6671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.315453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.324067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.805606][ T4358] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 290.061572][ T4358] usb 6-1: USB disconnect, device number 3 [ 290.210774][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.225587][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.262871][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.852031][ T6883] No such timeout policy "syz1" [ 291.726214][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.746681][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.283401][ T6671] device veth0_vlan entered promiscuous mode [ 292.539334][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.556082][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.680513][ T6671] device veth1_vlan entered promiscuous mode [ 292.722609][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.735971][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.768298][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.932700][ T6904] device bridge6 entered promiscuous mode [ 292.988103][ T6904] team0: Port device bridge6 added [ 293.043886][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.096190][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.318091][ T6671] device veth0_macvtap entered promiscuous mode [ 293.366143][ T6671] device veth1_macvtap entered promiscuous mode [ 293.396240][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.408635][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.418688][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.429346][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.439887][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.456835][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.472234][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.493212][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.166234][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.175772][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.190027][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.259435][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.268566][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.439170][ T6924] device bridge7 entered promiscuous mode [ 294.451823][ T6924] team0: Port device bridge7 added [ 294.461222][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.472576][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.483000][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.493500][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.625685][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.947277][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.322297][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.333331][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.344760][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.788599][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.836850][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.854408][ T6671] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.876795][ T6671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.893196][ T6671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.924544][ T6671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.185494][ T6945] device bridge8 entered promiscuous mode [ 296.192915][ T6945] team0: Port device bridge8 added [ 298.119131][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.134568][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.172528][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.209180][ T6970] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 298.434276][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.538373][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.719621][ T6972] netlink: 72 bytes leftover after parsing attributes in process `syz.0.684'. [ 298.856610][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.108521][ T6980] device bridge5 entered promiscuous mode [ 299.128024][ T6980] team0: Port device bridge5 added [ 299.177969][ T6985] bridge0: port 1(team0) entered blocking state [ 299.204985][ T6985] bridge0: port 1(team0) entered disabled state [ 299.224974][ T6985] device team0 entered promiscuous mode [ 299.242669][ T6979] device syzkaller0 entered promiscuous mode [ 299.539370][ T6987] device syzkaller0 entered promiscuous mode [ 306.097720][ T7049] binder: BINDER_SET_CONTEXT_MGR already set [ 306.387360][ T7051] netlink: 288 bytes leftover after parsing attributes in process `syz.3.702'. [ 307.285669][ T7049] binder: 7043:7049 ioctl 4018620d 200000004a80 returned -16 [ 307.477290][ T7057] device syzkaller0 entered promiscuous mode [ 308.458942][ T7072] device bridge5 entered promiscuous mode [ 308.606974][ T7072] team0: Port device bridge5 added [ 308.785231][ T7076] netlink: 80 bytes leftover after parsing attributes in process `syz.2.711'. [ 311.036855][ T7083] tipc: Started in network mode [ 311.095035][ T7083] tipc: Node identity ac1414aa, cluster identity 4711 [ 311.113532][ T7083] tipc: New replicast peer: 172.20.20.187 [ 311.147066][ T7083] tipc: Enabled bearer , priority 10 [ 312.910295][ T4251] tipc: Node number set to 2886997162 [ 313.432286][ T7096] netlink: 288 bytes leftover after parsing attributes in process `syz.5.717'. [ 313.859405][ T7099] loop2: detected capacity change from 0 to 164 [ 315.739838][ T7117] device bond_slave_0 entered promiscuous mode [ 315.746125][ T7117] device bond_slave_1 entered promiscuous mode [ 315.866552][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 315.883668][ T7117] device bond_slave_0 left promiscuous mode [ 315.889707][ T7117] device bond_slave_1 left promiscuous mode [ 316.881223][ T7121] device bridge6 entered promiscuous mode [ 316.888843][ T7121] team0: Port device bridge6 added [ 317.026062][ T7133] loop5: detected capacity change from 0 to 512 [ 317.087506][ T7133] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.148149][ T7135] MTRR 2 not used [ 317.180231][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.186921][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.277819][ T7133] EXT4-fs (loop5): 1 truncate cleaned up [ 317.325060][ T7133] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 317.424908][ T7140] device syzkaller0 entered promiscuous mode [ 317.720507][ T7142] tipc: Enabled bearer , priority 0 [ 317.851090][ T7142] device syzkaller0 entered promiscuous mode [ 317.881418][ T7142] tipc: Resetting bearer [ 318.514004][ T7141] tipc: Resetting bearer [ 318.562665][ T7141] tipc: Disabling bearer [ 319.927609][ T7159] device syzkaller0 entered promiscuous mode [ 320.181920][ T7162] jffs2: notice: (7162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 321.310877][ T7188] device bridge7 entered promiscuous mode [ 321.343534][ T7188] team0: Port device bridge7 added [ 321.541906][ T7192] tipc: Enabled bearer , priority 0 [ 321.571504][ T7192] device syzkaller0 entered promiscuous mode [ 321.627199][ T7192] tipc: Resetting bearer [ 321.644075][ T7191] tipc: Resetting bearer [ 321.855390][ T7197] loop2: detected capacity change from 0 to 4096 [ 322.364936][ T7191] tipc: Disabling bearer [ 322.567055][ T7197] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.456991][ T7212] device syzkaller0 entered promiscuous mode [ 323.631185][ T7214] device bridge1 entered promiscuous mode [ 323.710284][ T7214] team0: Port device bridge1 added [ 323.779806][ T7218] bridge0: port 3(team0) entered blocking state [ 323.794949][ T7218] bridge0: port 3(team0) entered disabled state [ 323.815825][ T7218] device team0 entered promiscuous mode [ 323.831002][ T7218] device team_slave_0 entered promiscuous mode [ 323.845143][ T7218] device team_slave_1 entered promiscuous mode [ 323.853742][ T7218] bridge0: port 3(team0) entered blocking state [ 323.860217][ T7218] bridge0: port 3(team0) entered forwarding state [ 324.088014][ T7227] siw: device registration error -23 [ 324.600745][ T7229] device bridge8 entered promiscuous mode [ 324.799050][ T7229] team0: Port device bridge8 added [ 325.405366][ T7242] xt_HMARK: spi-set and port-set can't be combined [ 326.868742][ T7256] loop2: detected capacity change from 0 to 256 [ 327.019188][ T7256] exfat: Deprecated parameter 'utf8' [ 327.073468][ T7256] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 327.318569][ T7255] device bridge7 entered promiscuous mode [ 327.358645][ T7255] team0: Port device bridge7 added [ 327.426590][ T7239] loop5: detected capacity change from 0 to 32768 [ 327.505861][ T7239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.756 (7239) [ 327.759240][ T7264] jffs2: notice: (7264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.795327][ T7239] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 327.832130][ T7267] device bridge9 entered promiscuous mode [ 327.865214][ T7239] BTRFS info (device loop5): force clearing of disk cache [ 327.872428][ T7239] BTRFS info (device loop5): metadata ratio 0 [ 327.890617][ T7267] team0: Port device bridge9 added [ 327.932229][ T7270] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 327.959234][ T7239] BTRFS info (device loop5): enabling ssd optimizations [ 328.051845][ T7239] BTRFS info (device loop5): using spread ssd allocation scheme [ 328.115016][ T7239] BTRFS info (device loop5): using free space tree [ 328.135333][ T21] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 328.195030][ T21] Bluetooth: hci0: Injecting HCI hardware error event [ 328.234655][ T7239] BTRFS info (device loop5): has skinny extents [ 328.265562][ T4201] Bluetooth: hci0: hardware error 0x00 [ 328.905161][ T7306] kAFS: No cell specified [ 329.746361][ T7239] BTRFS error (device loop5): open_ctree failed: -12 [ 329.812872][ T7312] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 330.076215][ T7312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.778'. [ 330.511961][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 330.620631][ T7319] netlink: 64 bytes leftover after parsing attributes in process `syz.5.779'. [ 330.738714][ T7321] device bridge2 entered promiscuous mode [ 330.777415][ T7321] team0: Port device bridge2 added [ 331.003747][ T7333] device bridge10 entered promiscuous mode [ 331.012099][ T7333] team0: Port device bridge10 added [ 331.028225][ T7334] device bridge3 entered promiscuous mode [ 332.375999][ T7334] team0: Port device bridge3 added [ 332.495473][ T21] usb 1-1: unable to read config index 0 descriptor/all [ 332.503176][ T21] usb 1-1: can't read configurations, error -71 [ 333.898628][ T7357] device syzkaller0 entered promiscuous mode [ 334.618324][ T7366] "syz.1.792" (7366) uses obsolete ecb(arc4) skcipher [ 337.526428][ T7385] device syzkaller0 entered promiscuous mode [ 339.737753][ T7404] device bridge4 entered promiscuous mode [ 339.777213][ T7404] team0: Port device bridge4 added [ 341.764435][ T7428] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 343.884221][ T7458] device bridge9 entered promiscuous mode [ 343.908574][ T7458] team0: Port device bridge9 added [ 343.917198][ T7459] IPVS: Error connecting to the multicast addr [ 344.043284][ T7465] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.052499][ T7465] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.061271][ T7465] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.070058][ T7465] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.938682][ T7465] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 346.086323][ T7484] device syzkaller0 entered promiscuous mode [ 346.197209][ T7487] retu-mfd 0-0001: could not read Retu revision: -5 [ 346.240533][ T7487] retu-mfd: probe of 0-0001 failed with error -5 [ 346.282630][ T7487] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 347.678623][ T7490] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 347.686139][ T7490] retu-mfd: probe of 0-0002 failed with error -5 [ 347.692785][ T7490] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 352.072530][ T7569] device syzkaller0 entered promiscuous mode [ 353.143661][ T7580] using random self ethernet address [ 353.211935][ T7583] device bridge10 entered promiscuous mode [ 353.224909][ T7580] using random host ethernet address [ 353.247718][ T7583] team0: Port device bridge10 added [ 353.320793][ T7588] tc action pedit 'at' offset 5 out of bounds [ 353.623398][ T7574] loop2: detected capacity change from 0 to 32768 [ 354.173203][ T7593] device bridge8 entered promiscuous mode [ 354.232460][ T7593] team0: Port device bridge8 added [ 354.838979][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.838979][ T7608] [ 354.863837][ T7608] ERROR: (device loop2): remounting filesystem as read-only [ 354.871745][ T7608] xtLookup: xtSearch returned -5 [ 354.876904][ T7608] add_index: get/read_metapage failed! [ 354.882405][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.882405][ T7608] [ 354.892573][ T7608] xtLookup: xtSearch returned -5 [ 354.897593][ T7608] free_index: error reading directory table [ 354.903596][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.903596][ T7608] [ 354.913662][ T7608] xtLookup: xtSearch returned -5 [ 354.918647][ T7608] free_index: error reading directory table [ 354.924558][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.924558][ T7608] [ 354.936137][ T7608] xtLookup: xtSearch returned -5 [ 354.941119][ T7608] free_index: error reading directory table [ 354.947071][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.947071][ T7608] [ 354.957116][ T7608] xtLookup: xtSearch returned -5 [ 354.962078][ T7608] free_index: error reading directory table [ 354.968030][ T7608] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 354.968030][ T7608] [ 354.978076][ T7608] xtLookup: xtSearch returned -5 [ 354.983033][ T7608] free_index: error reading directory table [ 358.155554][ T7651] device bridge11 entered promiscuous mode [ 358.219133][ T7651] team0: Port device bridge11 added [ 358.410858][ T7658] device bridge11 entered promiscuous mode [ 358.437968][ T7658] team0: Port device bridge11 added [ 358.469133][ T7665] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7665] [ 359.910790][ T7681] loop2: detected capacity change from 0 to 128 [ 360.988019][ T7688] attempt to access beyond end of device [ 360.988019][ T7688] loop2: rw=2049, want=585, limit=128 [ 361.500236][ T7695] attempt to access beyond end of device [ 361.500236][ T7695] loop2: rw=524288, want=369, limit=128 [ 361.913590][ T7695] attempt to access beyond end of device [ 361.913590][ T7695] loop2: rw=0, want=153, limit=128 [ 362.079676][ T7707] device bridge6 entered promiscuous mode [ 362.126601][ T7707] team0: Port device bridge6 added [ 362.359640][ T7711] device bridge9 entered promiscuous mode [ 362.417236][ T7711] team0: Port device bridge9 added [ 362.481464][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 362.577920][ T7723] device syzkaller0 entered promiscuous mode [ 363.314990][ T4230] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 363.394904][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 363.748550][ T7737] loop2: detected capacity change from 0 to 128 [ 363.854526][ T7737] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 363.883372][ T7737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.995157][ T4230] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.045557][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.075119][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.099862][ T4230] usb 6-1: Product: syz [ 364.104142][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.131055][ T4230] usb 6-1: Manufacturer: syz [ 364.151549][ T21] usb 1-1: Product: syz [ 364.159315][ T4230] usb 6-1: SerialNumber: syz [ 364.176100][ T21] usb 1-1: Manufacturer: syz [ 364.198402][ T4230] usb 6-1: config 0 descriptor?? [ 364.213368][ T21] usb 1-1: SerialNumber: syz [ 364.250684][ T21] usb 1-1: config 0 descriptor?? [ 364.495018][ T4230] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.540941][ T21] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.635602][ T4230] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 365.665899][ T21] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 365.737795][ T4230] usb 6-1: USB disconnect, device number 4 [ 365.770542][ T21] usb 1-1: USB disconnect, device number 4 [ 366.162094][ T7765] kernel profiling enabled (shift: 7) [ 366.235845][ T7769] device bridge12 entered promiscuous mode [ 366.259194][ T7769] team0: Port device bridge12 added [ 366.340036][ T7771] device bridge10 entered promiscuous mode [ 366.375019][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 366.384366][ T7771] team0: Port device bridge10 added [ 368.837541][ T1108] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.854954][ T1108] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 369.885115][ T1108] usb 4-1: can't read configurations, error -71 [ 370.165019][ T7308] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 370.745223][ T7308] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 370.764690][ T7308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.792645][ T7820] device bridge12 entered promiscuous mode [ 370.802941][ T7820] team0: Port device bridge12 added [ 370.805576][ T7308] usb 1-1: Product: syz [ 370.812374][ T7308] usb 1-1: Manufacturer: syz [ 370.827508][ T7308] usb 1-1: SerialNumber: syz [ 370.847481][ T7308] usb 1-1: config 0 descriptor?? [ 371.836102][ T7308] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.887389][ T7830] device bridge13 entered promiscuous mode [ 371.911481][ T7830] team0: Port device bridge13 added [ 371.925249][ T4230] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 372.850709][ T7838] overlayfs: failed to clone upperpath [ 373.365019][ T7308] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 373.415009][ T4230] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 374.065915][ T7308] usb 1-1: USB disconnect, device number 5 [ 374.072023][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.114899][ T4230] usb 6-1: Product: syz [ 374.131210][ T4230] usb 6-1: Manufacturer: syz [ 374.147277][ T4230] usb 6-1: SerialNumber: syz [ 374.205877][ T4230] usb 6-1: config 0 descriptor?? [ 376.319006][ T4230] usb 6-1: can't set config #0, error -71 [ 376.525788][ T4230] usb 6-1: USB disconnect, device number 5 [ 377.554202][ T7865] device bridge14 entered promiscuous mode [ 377.798110][ T7865] team0: Port device bridge14 added [ 378.619386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.629813][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.021246][ T7879] device bridge15 entered promiscuous mode [ 379.060588][ T7879] team0: Port device bridge15 added [ 379.926622][ T7885] loop2: detected capacity change from 0 to 256 [ 380.965757][ T7885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 381.198072][ T26] kauditd_printk_skb: 149 callbacks suppressed [ 381.198089][ T26] audit: type=1326 audit(1788898223.968:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 381.509409][ T26] audit: type=1326 audit(1788898224.038:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 381.537050][ T26] audit: type=1326 audit(1788898224.038:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 381.662700][ T26] audit: type=1326 audit(1788898224.038:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 382.540450][ T26] audit: type=1326 audit(1788898224.068:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 382.595152][ T26] audit: type=1326 audit(1788898224.088:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 382.619791][ T26] audit: type=1326 audit(1788898224.098:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 382.644164][ T26] audit: type=1326 audit(1788898224.098:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ce9aa1ec2 code=0x7ffc0000 [ 382.668826][ T26] audit: type=1326 audit(1788898224.308:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 382.693847][ T26] audit: type=1326 audit(1788898224.308:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.1.926" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce9aa2159 code=0x7ffc0000 [ 385.785392][ T7934] netlink: 2 bytes leftover after parsing attributes in process `syz.0.934'. [ 386.235093][ T7938] loop5: detected capacity change from 0 to 256 [ 386.357944][ T7938] exfat: Deprecated parameter 'utf8' [ 386.639356][ T4251] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 387.223684][ T7938] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 388.904465][ T7949] tipc: Enabling of bearer rejected, failed to enable media [ 388.995036][ T4251] usb 3-1: device descriptor read/all, error -71 [ 389.175293][ T7961] device bridge7 entered promiscuous mode [ 389.192269][ T7961] team0: Port device bridge7 added [ 389.224318][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.232817][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.241252][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.249684][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.258093][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.266521][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.274971][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.283329][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.291740][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.300147][ T7959] tc action pedit unable to extract header offset for header type (0x4) [ 389.308571][ T7959] 0: reclassify loop, rule prio 0, protocol 800 [ 392.833158][ T8004] loop3: detected capacity change from 0 to 256 [ 393.005523][ T4360] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 393.177283][ T8004] exfat: Deprecated parameter 'utf8' [ 393.287434][ T8004] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 393.718203][ T8022] device bridge16 entered promiscuous mode [ 393.963478][ T8022] team0: Port device bridge16 added [ 394.085381][ T4360] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.151692][ T4360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.280209][ T4360] usb 6-1: Product: syz [ 394.332715][ T4360] usb 6-1: Manufacturer: syz [ 394.381324][ T4360] usb 6-1: SerialNumber: syz [ 394.476329][ T4360] usb 6-1: config 0 descriptor?? [ 394.729978][ T8028] device bridge11 entered promiscuous mode [ 394.776049][ T8028] team0: Port device bridge11 added [ 394.795287][ T4360] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 395.925108][ T4360] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 395.934692][ T4360] usb 6-1: USB disconnect, device number 6 [ 396.055026][ T3977] Bluetooth: hci2: command 0x0406 tx timeout [ 397.853100][ T4230] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 398.448419][ T4230] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.458860][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.467325][ T4230] usb 1-1: Product: syz [ 398.471605][ T4230] usb 1-1: Manufacturer: syz [ 398.476548][ T4230] usb 1-1: SerialNumber: syz [ 398.483265][ T4230] usb 1-1: config 0 descriptor?? [ 398.754993][ T4230] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.915045][ T4230] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 399.923946][ T4230] usb 1-1: USB disconnect, device number 6 [ 401.877426][ T8059] tipc: Enabling of bearer rejected, failed to enable media [ 403.114338][ T8080] loop5: detected capacity change from 0 to 512 [ 403.872605][ T8080] EXT4-fs (loop5): Unrecognized mount option "data=writeback.journal_async_commit" or missing value [ 404.945850][ T8094] ceph: No mds server is up or the cluster is laggy [ 405.444978][ T4230] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 406.496625][ T4230] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.506078][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.514106][ T4230] usb 4-1: Product: syz [ 406.518771][ T4230] usb 4-1: Manufacturer: syz [ 406.523404][ T4230] usb 4-1: SerialNumber: syz [ 406.530544][ T4230] usb 4-1: config 0 descriptor?? [ 407.265124][ T4230] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 407.272432][ T4230] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 408.424906][ T4230] usb 4-1: USB disconnect, device number 6 [ 413.808619][ T8177] tipc: Enabling of bearer rejected, failed to enable media [ 415.877851][ T8190] Cannot find add_set index 4 as target [ 417.949930][ T8209] CacheFiles: No cache directory specified [ 419.111970][ T8218] device bridge13 entered promiscuous mode [ 419.954217][ T8225] loop2: detected capacity change from 0 to 512 [ 420.254867][ T4360] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 420.656852][ T8236] capability: warning: `syz.1.1015' uses deprecated v2 capabilities in a way that may be insecure [ 420.918269][ T8225] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1012: iget: bad i_size value: 38620345925642 [ 420.970489][ T8225] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1012: couldn't read orphan inode 15 (err -117) [ 421.385268][ T8225] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.848438][ T8229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1012: bg 0: block 5: invalid block bitmap [ 421.935716][ T4360] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 421.976366][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.337221][ T4360] usb 1-1: Product: syz [ 422.351009][ T8251] device syzkaller0 entered promiscuous mode [ 422.351852][ T8229] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 324 with error 28 [ 422.370552][ T4360] usb 1-1: Manufacturer: syz [ 422.377739][ T8251] tipc: Enabled bearer , priority 0 [ 422.384036][ T4360] usb 1-1: SerialNumber: syz [ 422.405766][ T4360] usb 1-1: config 0 descriptor?? [ 422.425581][ T8251] tipc: Resetting bearer [ 422.435680][ T8229] EXT4-fs (loop2): This should not happen!! Data will be lost [ 422.435680][ T8229] [ 422.456508][ T8229] EXT4-fs (loop2): Total free blocks count 0 [ 422.461415][ T8249] tipc: Resetting bearer [ 422.468669][ T8229] EXT4-fs (loop2): Free/Dirty block details [ 422.474668][ T8229] EXT4-fs (loop2): free_blocks=0 [ 422.486769][ T8229] EXT4-fs (loop2): dirty_blocks=324 [ 422.492045][ T8229] EXT4-fs (loop2): Block reservation details [ 422.498418][ T8229] EXT4-fs (loop2): i_reserved_data_blocks=324 [ 422.522788][ T8249] tipc: Disabling bearer [ 422.765013][ T4360] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.573677][ T8269] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 424.706341][ T4360] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 424.814212][ T4360] usb 1-1: USB disconnect, device number 7 [ 425.861451][ T8294] input: syz1 as /devices/virtual/input/input5 [ 434.114615][ T8392] loop3: detected capacity change from 0 to 4096 [ 434.214219][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 434.256684][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 435.425487][ T8392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 435.490520][ T8428] dns_resolver: Unsupported content type (6) [ 436.530139][ T8436] loop2: detected capacity change from 0 to 512 [ 436.705025][ T8436] EXT4-fs (loop2): Unrecognized mount option "data=writeback.journal_async_commit" or missing value [ 436.772253][ T8446] device syzkaller0 entered promiscuous mode [ 438.159822][ T8447] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.168946][ T8447] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.177720][ T8447] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.186495][ T8447] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.093032][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099419][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.209136][ T8495] loop2: detected capacity change from 0 to 256 [ 440.821262][ T8495] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 441.172668][ T8495] attempt to access beyond end of device [ 441.172668][ T8495] loop2: rw=524288, want=34359738496, limit=256 [ 442.175911][ T8495] attempt to access beyond end of device [ 442.175911][ T8495] loop2: rw=0, want=34359738496, limit=256 [ 442.235264][ T26] kauditd_printk_skb: 276 callbacks suppressed [ 442.235279][ T26] audit: type=1800 audit(1788898285.008:481): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1075" name="file1" dev="loop2" ino=1048633 res=0 errno=0 [ 445.593054][ T8552] xt_HMARK: spi-set and port-set can't be combined [ 446.167224][ T8564] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 449.928074][ T8607] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 451.033724][ T8631] xt_connbytes: Forcing CT accounting to be enabled [ 451.040566][ T8631] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 451.856264][ T8653] overlayfs: failed to clone upperpath [ 454.181621][ T8685] UBIFS error (pid: 8685): cannot open "(null)", error -22 [ 455.523069][ T8697] tipc: Enabling of bearer rejected, failed to enable media [ 457.175278][ T8723] infiniband syz2: set down [ 457.180451][ T8723] infiniband syz2: added team_slave_1 [ 457.660261][ T8723] infiniband syz2: Couldn't open port 1 [ 457.765311][ T8723] RDS/IB: syz2: added [ 457.770422][ T8723] smc: adding ib device syz2 with port count 1 [ 457.777000][ T8723] smc: ib device syz2 port 1 has pnetid [ 458.443611][ T8726] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 458.513559][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'. [ 458.742657][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 459.052279][ T8759] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 459.109908][ T8757] mmap: syz.5.1145 (8757) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 462.280300][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 462.356575][ T8800] device team0 left promiscuous mode [ 462.361927][ T8800] device team_slave_0 left promiscuous mode [ 462.374288][ T8800] device team_slave_1 left promiscuous mode [ 462.384058][ T8800] bridge0: port 3(team0) entered disabled state [ 462.500466][ T8800] device bridge_slave_1 left promiscuous mode [ 462.515075][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.672237][ T8800] device bridge_slave_0 left promiscuous mode [ 462.725134][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.731454][ T8857] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 464.828569][ T26] audit: type=1800 audit(1788898307.598:482): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1155" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 464.829656][ T8807] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 464.861072][ T8807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 464.870688][ T8807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 465.317355][ T8890] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 466.483676][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 466.556820][ T8905] bond0: option lp_interval: invalid value (0) [ 467.147125][ T8905] bond0: option lp_interval: allowed values 1 - 2147483647 [ 467.168463][ T8922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1180'. [ 467.245579][ T8922] siw: device registration error -23 [ 469.132250][ T4239] tipc: Left network mode [ 469.375439][ T4239] bond2: (slave ip6gretap1): Releasing active interface [ 470.587160][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1192'. [ 470.694833][ T4251] Bluetooth: hci4: command 0x0409 tx timeout [ 470.735567][ T4239] bond1: (slave erspan1): Releasing active interface [ 470.759545][ T4239] device erspan1 left promiscuous mode [ 471.790799][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 471.908302][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.916829][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.925117][ T8938] device bridge_slave_0 entered promiscuous mode [ 472.045448][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.069009][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.131721][ T8938] device bridge_slave_1 entered promiscuous mode [ 472.223899][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.302686][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.775657][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 473.008917][ T8938] team0: Port device team_slave_0 added [ 473.497548][ T8938] team0: Port device team_slave_1 added [ 473.530560][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'. [ 473.624015][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.632429][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.641197][ T4239] device team0 left promiscuous mode [ 473.648203][ T4239] device team_slave_0 left promiscuous mode [ 474.166492][ T4239] device team_slave_1 left promiscuous mode [ 474.295077][ T4239] bridge0: port 3(team0) entered disabled state [ 474.870612][ T4251] Bluetooth: hci4: command 0x040f tx timeout [ 474.920123][ T4239] device bridge_slave_1 left promiscuous mode [ 474.945357][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.075211][ T4239] device bridge_slave_0 left promiscuous mode [ 475.081458][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.374083][ T4239] device bond2 left promiscuous mode [ 476.472811][ T4239] team0 (unregistering): Port device bridge11 removed [ 476.578787][ T4239] team0 (unregistering): Port device bridge10 removed [ 477.543193][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 477.600983][ T4239] team0 (unregistering): Port device bridge9 removed [ 477.648323][ T4239] team0 (unregistering): Port device bridge8 removed [ 477.709657][ T4239] team0 (unregistering): Port device bridge7 removed [ 477.770924][ T4239] team0 (unregistering): Port device bridge6 removed [ 477.829530][ T4239] team0 (unregistering): Port device bridge5 removed [ 477.889966][ T4239] team0 (unregistering): Port device bridge4 removed [ 477.948071][ T4239] team0 (unregistering): Port device bridge3 removed [ 478.029130][ T4239] team0 (unregistering): Port device bridge2 removed [ 478.087353][ T4239] team0 (unregistering): Port device bridge1 removed [ 478.145811][ T4239] team0 (unregistering): Port device macvlan2 removed [ 478.157381][ T4239] bond2 (unregistering): Released all slaves [ 478.178569][ T4239] bond1 (unregistering): Released all slaves [ 478.297004][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 478.314497][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 478.335187][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.364636][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.511533][ T4239] bond0 (unregistering): Released all slaves [ 478.661135][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1214'. [ 478.709643][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.725479][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.981820][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.426527][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.758661][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.800184][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.921078][ T9122] nfs: Unknown parameter 'úxé­§^zóRè¡J§Ì�üP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›�™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]�'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 481.293869][ T8938] device hsr_slave_0 entered promiscuous mode [ 481.361268][ T8938] device hsr_slave_1 entered promiscuous mode [ 481.460655][ T8938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.470617][ T8938] Cannot create hsr debugfs directory [ 485.117466][ T8938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 486.186516][ T8938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.414586][ T8938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.451491][ T8938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.690309][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.412841][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.468494][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.509220][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.557266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.585654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.622140][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.629349][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.667991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.707167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.744462][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.751728][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.978664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.989440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.007329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.028526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.237880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.487281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.919513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.955838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.981412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.024347][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.505503][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 491.554289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.752873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.762028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.355436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.362982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.377284][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.792701][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.819793][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.862062][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.878056][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.906434][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.935916][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.965596][ T8938] device veth0_vlan entered promiscuous mode [ 498.005657][ T8938] device veth1_vlan entered promiscuous mode [ 498.111328][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 498.130121][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 498.168747][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.196112][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.228450][ T8938] device veth0_macvtap entered promiscuous mode [ 498.274003][ T8938] device veth1_macvtap entered promiscuous mode [ 498.805640][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.885858][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 499.206975][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.315130][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.368148][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.402541][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.443972][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.492307][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.633813][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.861645][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.081093][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.325624][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.355945][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.366391][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.436357][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.655872][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.696937][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.826077][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.058213][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.324981][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.399403][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.451347][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.508525][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.511432][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.514880][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.579373][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.610104][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.691144][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.744874][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.789401][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.822993][ T8938] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.859369][ T8938] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.087241][ T8938] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.247385][ T8938] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.243923][ T9454] UBIFS error (pid: 9454): cannot open "(null)", error -22 [ 504.542108][ T8835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.546540][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.555029][ T8835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.581227][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.583780][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.631484][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.885414][ T8281] Bluetooth: Wrong link type (-22) [ 514.826476][ T9583] loop6: detected capacity change from 0 to 32768 [ 516.272051][ T9583] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 517.928086][ T8938] ocfs2: Unmounting device (7,6) on (node local) [ 517.974972][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 518.237931][ T9636] device syzkaller0 entered promiscuous mode [ 520.369046][ T9678] loop6: detected capacity change from 0 to 512 [ 520.407120][ T9683] device bridge0 entered promiscuous mode [ 521.192820][ T9678] EXT4-fs (loop6): inline encryption not supported [ 521.211707][ T9678] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 521.371303][ T9678] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1363: corrupted in-inode xattr [ 521.501505][ T9678] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1363: couldn't read orphan inode 15 (err -117) [ 521.574513][ T9678] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x00000000000000ff,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,barrier=0x0000000000000098,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=continue,,errors=continue. Quota mode: none. [ 522.875956][ T9733] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1374'. [ 523.428355][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 524.461902][ T9755] tipc: Enabling of bearer rejected, failed to enable media [ 524.530600][ T9757] netlink: 'syz.2.1382': attribute type 15 has an invalid length. [ 524.586967][ T9757] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 524.595835][ T9757] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 524.605125][ T9757] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 524.614189][ T9757] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 525.535097][ T9757] netlink: 'syz.2.1382': attribute type 15 has an invalid length. [ 525.654266][ T9780] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1388'. [ 525.913751][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1391'. [ 526.215570][ T4251] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 526.238538][ T4251] Bluetooth: hci2: Injecting HCI hardware error event [ 526.293431][ T8281] Bluetooth: hci2: hardware error 0x00 [ 526.831892][ T9799] CIFS: Attempting to mount \\127.0.0.1\share [ 528.415316][ T9799] CIFS: VFS: No username specified [ 531.772353][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 533.566581][ T9870] xt_cgroup: path and classid specified [ 534.805271][ T9896] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1418'. [ 535.670086][ T9908] fuse: Bad value for 'fd' [ 535.841287][ T9916] overlayfs: failed to clone upperpath [ 537.026767][ T9935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1431'. [ 539.566703][ T9985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1445'. [ 540.609342][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 540.771677][T10007] overlayfs: missing 'lowerdir' [ 540.823703][T10007] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 540.947982][T10007] bridge0: port 3(team0) entered disabled state [ 540.957184][T10007] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.964601][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.505994][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1459'. [ 545.914132][T10083] loop6: detected capacity change from 0 to 256 [ 547.415303][T10083] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 547.436058][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 548.129911][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 548.168485][ T26] audit: type=1800 audit(1788898404.946:483): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1455" name="file1" dev="loop6" ino=1048649 res=0 errno=0 [ 548.203166][T10097] device bridge8 entered promiscuous mode [ 549.628073][T10148] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 551.215196][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 551.816709][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 552.804957][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 552.851036][T10179] device bridge9 entered promiscuous mode [ 553.865034][T10194] device syzkaller0 entered promiscuous mode [ 555.747258][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 555.795060][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 557.401979][T10209] device bridge5 entered promiscuous mode [ 557.637473][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1498'. [ 557.753399][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 558.063291][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 559.458550][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 559.508423][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 559.557941][T10248] device bridge6 entered promiscuous mode [ 562.295163][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 562.413091][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 563.019731][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.026120][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.058611][T10282] device bridge7 entered promiscuous mode [ 563.097724][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1511'. [ 567.071607][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 567.085678][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 567.115157][T10338] device bridge10 entered promiscuous mode [ 567.165719][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1509'. [ 567.203292][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1509'. [ 567.259152][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1525'. [ 567.325701][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1525'. [ 567.366602][T10344] device bridge13 entered promiscuous mode [ 569.121279][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 569.154819][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 569.194007][T10394] device bridge14 entered promiscuous mode [ 569.229525][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1538'. [ 569.251803][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1538'. [ 569.417553][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1522'. [ 569.486101][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'. [ 569.506535][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'. [ 569.533944][T10414] device bridge15 entered promiscuous mode [ 569.738420][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 570.850704][T10439] loop6: detected capacity change from 0 to 256 [ 571.659144][T10439] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 571.975583][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 572.041856][T10462] device bridge17 entered promiscuous mode [ 575.519456][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 575.681033][T10503] device bridge11 entered promiscuous mode [ 577.674945][T10522] loop6: detected capacity change from 0 to 32768 [ 578.160208][T10522] XFS (loop6): Mounting V5 Filesystem [ 578.249037][T10522] XFS (loop6): Ending clean mount [ 579.867659][T10558] ceph: No mds server is up or the cluster is laggy [ 579.876028][ T8938] XFS (loop6): Unmounting Filesystem [ 580.852587][T10571] futex_wake_op: syz.3.1593 tries to shift op by 144; fix this program [ 580.964676][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 580.986954][T10574] device bridge8 entered promiscuous mode [ 582.321888][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1588'. [ 585.109449][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 585.126194][T10613] [ 585.128596][T10613] ====================================================== [ 585.135644][T10613] WARNING: possible circular locking dependency detected [ 585.142705][T10613] syzkaller #0 Not tainted [ 585.147152][T10613] ------------------------------------------------------ [ 585.154204][T10613] syz.6.1597/10613 is trying to acquire lock: [ 585.160301][T10613] ffff88801d455aa0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 585.171847][T10613] [ 585.171847][T10613] but task is already holding lock: [ 585.179765][T10613] ffff888060592520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 585.189221][T10613] [ 585.189221][T10613] which lock already depends on the new lock. [ 585.189221][T10613] [ 585.199750][T10613] [ 585.199750][T10613] the existing dependency chain (in reverse order) is: [ 585.208800][T10613] [ 585.208800][T10613] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 585.216504][T10613] __mutex_lock_common+0x1e5/0x2400 [ 585.222304][T10613] mutex_lock_nested+0x17/0x20 [ 585.227649][T10613] tcm_set_name+0x26/0x90 [ 585.232546][T10613] function_make+0x195/0x350 [ 585.237696][T10613] configfs_mkdir+0x511/0x9e0 [ 585.242939][T10613] vfs_mkdir+0x386/0x570 [ 585.247741][T10613] do_mkdirat+0x1dd/0x5c0 [ 585.252626][T10613] __x64_sys_mkdir+0x6a/0x80 [ 585.257776][T10613] do_syscall_64+0x4c/0xa0 [ 585.262757][T10613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.269227][T10613] [ 585.269227][T10613] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 585.277642][T10613] __mutex_lock_common+0x1e5/0x2400 [ 585.283415][T10613] mutex_lock_nested+0x17/0x20 [ 585.288745][T10613] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 585.295469][T10613] configfs_symlink+0x5a4/0x13b0 [ 585.301202][T10613] vfs_symlink+0x245/0x3d0 [ 585.306189][T10613] do_symlinkat+0x1ab/0x6b0 [ 585.311256][T10613] __x64_sys_symlink+0x7a/0x90 [ 585.316586][T10613] do_syscall_64+0x4c/0xa0 [ 585.321742][T10613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.328203][T10613] [ 585.328203][T10613] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 585.337028][T10613] __lock_acquire+0x2c66/0x7b50 [ 585.342460][T10613] lock_acquire+0x19e/0x400 [ 585.347528][T10613] down_write+0x38/0x60 [ 585.352463][T10613] configfs_depend_item_unlocked+0x14f/0x430 [ 585.359023][T10613] usbg_make_tpg+0x1f3/0x580 [ 585.364181][T10613] target_fabric_make_tpg+0xa0/0x6d0 [ 585.367715][T10619] device bridge9 entered promiscuous mode [ 585.370028][T10613] configfs_mkdir+0x511/0x9e0 [ 585.380988][T10613] vfs_mkdir+0x386/0x570 [ 585.385795][T10613] do_mkdirat+0x1dd/0x5c0 [ 585.390681][T10613] __x64_sys_mkdir+0x6a/0x80 [ 585.395837][T10613] do_syscall_64+0x4c/0xa0 [ 585.400970][T10613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.407434][T10613] [ 585.407434][T10613] other info that might help us debug this: [ 585.407434][T10613] [ 585.418145][T10613] Chain exists of: [ 585.418145][T10613] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 585.418145][T10613] [ 585.433410][T10613] Possible unsafe locking scenario: [ 585.433410][T10613] [ 585.441042][T10613] CPU0 CPU1 [ 585.446519][T10613] ---- ---- [ 585.452266][T10613] lock(&opts->dep_lock); [ 585.456734][T10613] lock(gadget_subsys.su_mutex); [ 585.464328][T10613] lock(&opts->dep_lock); [ 585.471472][T10613] lock(&sb->s_type->i_mutex_key#26); [ 585.476992][T10613] [ 585.476992][T10613] *** DEADLOCK *** [ 585.476992][T10613] [ 585.485177][T10613] 5 locks held by syz.6.1597/10613: [ 585.490585][T10613] #0: ffff88801e41e460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 585.499881][T10613] #1: ffff8880626133f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 585.510971][T10613] #2: ffffffff8cc242b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 585.521011][T10613] #3: ffffffff8cf20b08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 585.530753][T10613] #4: ffff888060592520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 585.540438][T10613] [ 585.540438][T10613] stack backtrace: [ 585.546366][T10613] CPU: 0 PID: 10613 Comm: syz.6.1597 Not tainted syzkaller #0 [ 585.553889][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.564010][T10613] Call Trace: [ 585.567349][T10613] [ 585.570316][T10613] dump_stack_lvl+0x188/0x250 [ 585.575115][T10613] ? load_image+0x410/0x410 [ 585.579680][T10613] ? show_regs_print_info+0x20/0x20 [ 585.585076][T10613] ? print_circular_bug+0x12b/0x1a0 [ 585.590335][T10613] check_noncircular+0x296/0x330 [ 585.595326][T10613] ? look_up_lock_class+0x71/0x110 [ 585.600502][T10613] ? add_chain_block+0x9b0/0x9b0 [ 585.605484][T10613] ? lockdep_lock+0xf1/0x1f0 [ 585.610151][T10613] ? mark_lock+0x94/0x320 [ 585.614534][T10613] ? mark_lock+0x94/0x320 [ 585.618906][T10613] ? _find_first_zero_bit+0xd1/0xf0 [ 585.624161][T10613] __lock_acquire+0x2c66/0x7b50 [ 585.629088][T10613] ? verify_lock_unused+0x140/0x140 [ 585.634335][T10613] ? __mutex_trylock_common+0x15c/0x260 [ 585.640020][T10613] ? rcu_lock_release+0x20/0x20 [ 585.644995][T10613] lock_acquire+0x19e/0x400 [ 585.649564][T10613] ? configfs_depend_item_unlocked+0x14f/0x430 [ 585.655765][T10613] ? __might_sleep+0xf0/0xf0 [ 585.660486][T10613] ? __kasan_kmalloc+0xc6/0xe0 [ 585.665294][T10613] ? read_lock_is_recursive+0x10/0x10 [ 585.670716][T10613] ? mutex_lock_io_nested+0x60/0x60 [ 585.675968][T10613] down_write+0x38/0x60 [ 585.680254][T10613] ? configfs_depend_item_unlocked+0x14f/0x430 [ 585.686453][T10613] configfs_depend_item_unlocked+0x14f/0x430 [ 585.692482][T10613] usbg_make_tpg+0x1f3/0x580 [ 585.697181][T10613] ? mutex_lock_io_nested+0x60/0x60 [ 585.702472][T10613] ? usbg_drop_tport+0x20/0x20 [ 585.707278][T10613] ? vscnprintf+0x80/0x80 [ 585.711698][T10613] target_fabric_make_tpg+0xa0/0x6d0 [ 585.717021][T10613] ? target_fabric_release_wwn+0xa0/0xa0 [ 585.722694][T10613] configfs_mkdir+0x511/0x9e0 [ 585.727474][T10613] vfs_mkdir+0x386/0x570 [ 585.731762][T10613] do_mkdirat+0x1dd/0x5c0 [ 585.736129][T10613] ? vfs_mkdir+0x570/0x570 [ 585.740587][T10613] ? getname_flags+0x1f9/0x4f0 [ 585.745390][T10613] __x64_sys_mkdir+0x6a/0x80 [ 585.750018][T10613] do_syscall_64+0x4c/0xa0 [ 585.754476][T10613] ? clear_bhb_loop+0x30/0x80 [ 585.759185][T10613] ? clear_bhb_loop+0x30/0x80 [ 585.763897][T10613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 585.769824][T10613] RIP: 0033:0x7f779302a159 [ 585.774270][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.793908][T10613] RSP: 002b:00007f7791282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 585.802362][T10613] RAX: ffffffffffffffda RBX: 00007f77932b1fa0 RCX: 00007f779302a159 [ 585.810373][T10613] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 585.818469][T10613] RBP: 00007f77930c103b R08: 0000000000000000 R09: 0000000000000000 [ 585.826488][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.834507][T10613] R13: 00007f77932b2038 R14: 00007f77932b1fa0 R15: 00007fffd40bce08 [ 585.842615][T10613]