last executing test programs: 6.85393532s ago: executing program 2 (id=2003): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x15a041, &(0x7f0000000480)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@dioread_lock}, {@noblock_validity}, {}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 4.784611422s ago: executing program 2 (id=2009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r0) bind$unix(r2, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x1010}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040) mkdirat(0xffffffffffffff9c, 0x0, 0x1c4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) socket$inet_sctp(0x2, 0x1, 0x84) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 4.701131344s ago: executing program 2 (id=2013): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x2c}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='usb1', 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xc000) sendmmsg$inet(r0, 0x0, 0x0, 0x24008080) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0xffffe000) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000140)=0x6) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000407b06032300010102030109022d00010100800e0904"], 0x0) 3.829207505s ago: executing program 3 (id=2015): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 3.774785446s ago: executing program 3 (id=2017): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) 3.774364486s ago: executing program 3 (id=2018): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") eventfd2(0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) unshare(0x60000600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) 3.706635988s ago: executing program 4 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000b00), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 3.325896658s ago: executing program 4 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.298132508s ago: executing program 1 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) 3.273426759s ago: executing program 2 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x1, 0x8000000000000001}, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000000, 0x2, 0x1, 0xa, 0xb, 0xb}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.250149769s ago: executing program 1 (id=2026): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 3.133748812s ago: executing program 1 (id=2027): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x808042, &(0x7f0000000140)={[{@nodiscard}, {@quota}, {@errors_remount}, {@noquota}], [{@euid_gt={'euid>', 0xee01}}, {@permit_directio}]}, 0x1, 0x4b4, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) semtimedop(0x0, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) unshare(0x2c040000) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./bus\x00', 0x3210052, &(0x7f0000000880)=ANY=[@ANYBLOB='barrier,nodiscard-norecovery,errors=continue,barrier,norecovery,norecovery,errors=remount-ro,,'], 0x3, 0xf0b, &(0x7f0000001e40)="$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") 2.064730979s ago: executing program 0 (id=2028): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.063199359s ago: executing program 3 (id=2029): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) 1.951543642s ago: executing program 3 (id=2030): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) 1.913846393s ago: executing program 4 (id=2031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfa, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x92, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40b", &(0x7f0000000a00), 0x0, 0x700}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) 1.748304837s ago: executing program 2 (id=2032): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodelalloc}, {@resgid}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$eJzs3c9rG8ceAPDvynZ+Oe/Fgbzw3jsUQw5NSSPHdn+k0EN6LG1ooL2nwlZMsBwFSw6xG2hyaC69lFAopYHSP6D3HkP/gf4VgTYQSjDtoReVlVeOYkmWfyiRGn0+sPbM7sgzo90Zz2i0bABDazL9kYv4X0R8lUQcazo2GtnByY10609uzaVbErXax78nkWT7GumT7Pd4FvlvRPz8RcSZXGu+ldW1xUKpVFzO4lPVpetTldW1s1eXCgvFheK1mdnZ82/Ozrzz9ls9q+trl/789qMH75//8tT6Nz8+On4viQtxNDvWXI99uN0cmYzJ7D0ZiwtbEk73ILNBkvS7AOzJSNbOxyLtA47FSNbqgZff5xFRA4ZUov3DkGqMAxpz+x7Ng/8xHr+3MQFqrX+y8dlIHKrPjY6sJ8/MjNL57kQP8k/z+Om3+/fSLXr3OQRAV7fvRMS50dHO/d/endtBmq156P/gxXmQjn9ebzf+yW2Of6LN+Ge8Tdvdi+7tP/eoB9l0lI7/3m07/t1ctJoYyWL/qo/5xpIrV0vFtG/7d0ScjrGDaXy79Zzz6w9rnY41j//SLc2/MRbMyvFo9OCzr5kvVAv7qXOzx3ci/t9l/Ju0Of/p+3Fph3mcLN5/pdOx7vV/vmo/RLza9vw/XdFKtl+fnKpfD1ONq6LVH3dP/tIp/13X/z/7qm6L9Pwf2b7+E0nzem1l93l8f+ivYqdjk0m2aLrL6/9A8kk9fCDbd7NQrS5PRxxIPmzdP/P0tY14I31a/9Ontu//2l3/hyPi0x3W/+6Jux2T7vn678XkMzv/87s6/7sPPPzgs+/2Xv/0/L9RD53O9uyk/9tpAffz3gEAAAAAAMCgyUXE0Uhy+c1wLpfPb3y/40QcyZXKleqZK+WVa/NRv1d2IsZyjZXu8abvQ0xnS5KN+MyW+GxEHI+Ir0cO1+P5uXJpvt+VBwAAAAAAAAAAAAAAAAAAgAEx3rj//+Dm/f+bj7H+daTfpQOeuy2P/B7rVzmAF6/rI/978aQnYCB1bf/AS2s06XcJgH7x/x+Gl/YPw0v7h+Gl/cPw0v5heGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FOXLl5Mt9r6k1tzaXz+xurKYvnG2fliZTG/tDKXnysvX88vlMsLpWJ+rrzU7e+VyuXr0zOxcnOqWqxUpyqra5eXyivXqpevLhUWipeLni0OAAAAAAAAAAAAAAAAAAAArSqra4uFUqm4LDCggUODUYyOgdHBKMYgBWojG42rNDoY5WkNjEVElzT97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Km/AwAA//9MAjET") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1aa) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x10001) 1.689524248s ago: executing program 0 (id=2033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@private2, r4}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.62636055s ago: executing program 0 (id=2034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r0) bind$unix(r2, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x1010}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040) mkdirat(0xffffffffffffff9c, 0x0, 0x1c4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) socket$inet_sctp(0x2, 0x1, 0x84) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 1.427570905s ago: executing program 1 (id=2035): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x60000600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 1.427338314s ago: executing program 4 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) 1.401761546s ago: executing program 0 (id=2037): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 1.366349226s ago: executing program 4 (id=2038): setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 1.350151366s ago: executing program 0 (id=2039): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28020480) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$x25(r4, &(0x7f0000000200), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(r0, 0x6000000) 107.730838ms ago: executing program 3 (id=2040): openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x56, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x400, @private, @remote, {[@timestamp_addr={0x44, 0x4}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x2, [{@multicast2}, {@empty, 0x5}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x10001) 107.386338ms ago: executing program 1 (id=2041): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) 107.074738ms ago: executing program 2 (id=2042): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x808042, &(0x7f0000000140)={[{@nodiscard}, {@quota}, {@errors_remount}, {@noquota}], [{@euid_gt={'euid>', 0xee01}}, {@permit_directio}]}, 0x1, 0x4b4, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) unshare(0x2c040000) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./bus\x00', 0x3210052, &(0x7f0000000880)=ANY=[@ANYBLOB='barrier,nodiscard-norecovery,errors=continue,barrier,norecovery,norecovery,errors=remount-ro,,'], 0x3, 0xf0b, &(0x7f0000001e40)="$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") 106.569427ms ago: executing program 4 (id=2043): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.50968ms ago: executing program 1 (id=2044): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) 0s ago: executing program 0 (id=2045): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r4 = gettid() r5 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000200)={r2, r3, 0x6}) sched_getaffinity(r5, 0x8, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) kernel console output (not intermixed with test programs): erface activated: batadv_slave_1 [ 33.228365][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.230040][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.236513][ T27] audit: type=1326 audit(33.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f3781a8 code=0x0 [ 33.248011][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249554][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251068][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.252608][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.266779][ T4340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.268350][ T4340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269946][ T4340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.271367][ T4340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.313790][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.314321][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.315599][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.316194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.317056][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.320951][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.368734][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.369105][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.370170][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.371537][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.372839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.378105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.382860][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.384725][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.390600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.394431][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.396113][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.403955][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.414503][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.416029][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.418453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.424282][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.426711][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.429492][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.521767][ T4418] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 33.559409][ T4418] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 34.076605][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 34.132058][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 34.133590][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 34.134980][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 34.174077][ T4341] Bluetooth: hci4: command 0x041b tx timeout [ 34.870578][ T4442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8'. [ 35.864355][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 35.938065][ T4465] kAFS: No cell specified [ 35.950472][ T4465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17'. [ 36.409599][ T4476] loop4: detected capacity change from 0 to 131072 [ 36.418849][ T4480] loop2: detected capacity change from 0 to 2048 [ 37.105411][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 37.106642][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 37.107846][ T4341] Bluetooth: hci3: command 0x040f tx timeout [ 37.109049][ T4341] Bluetooth: hci1: command 0x040f tx timeout [ 37.110259][ T4341] Bluetooth: hci4: command 0x040f tx timeout [ 37.445099][ C0] sched: RT throttling activated [ 37.562349][ T4480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.982783][ T4480] fs-verity: sha512 using implementation "sha512-ce" [ 37.990267][ T4480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.20: bg 0: block 368: padding at end of block bitmap is not set [ 37.995053][ T4480] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 38.372403][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 38.417959][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 38.450722][ T4498] 8021q: VLANs not supported on nlmon0 [ 38.463272][ T4476] F2FS-fs (loop4): Test dummy encryption mode enabled [ 38.465561][ T4476] F2FS-fs (loop4): invalid crc value [ 38.501958][ T4496] tipc: Enabling of bearer rejected, failed to enable media [ 38.519964][ T4476] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.540561][ T4476] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.550496][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.570980][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 38.653259][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 38.664974][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 38.676932][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 39.291349][ T4345] Bluetooth: hci4: command 0x0419 tx timeout [ 39.295302][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 39.297857][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 39.298472][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 39.299983][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 39.313163][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 39.314769][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 39.322244][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 39.353279][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 40.702233][ T4549] sctp: failed to load transform for md5: -2 [ 40.745089][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 40.926397][ T4570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 41.181909][ T4577] loop4: detected capacity change from 0 to 512 [ 41.183776][ T4577] EXT4-fs: Ignoring removed nobh option [ 41.212732][ T4577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.724786][ T4594] loop2: detected capacity change from 0 to 128 [ 41.756680][ T4594] [ 41.756993][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.759324][ T4594] FAT-fs (loop2): Filesystem has been set read-only [ 41.760676][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.762209][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.763695][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.765545][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.767194][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.768819][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.770513][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.772476][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.774222][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.776244][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.777835][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.779502][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 41.781000][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.100006][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.114364][ T4597] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.116430][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.126747][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.128471][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.150301][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.157500][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.158967][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.160329][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.161644][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.163154][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.164925][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.176798][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.178374][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.180259][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.181663][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.185835][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.187485][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.189021][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.190696][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.192165][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.193578][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.195859][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.197317][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.198873][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 42.198917][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.201334][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.202718][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.204123][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.208061][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.209706][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.211429][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.213050][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.214521][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.216573][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.220937][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.222460][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.223967][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.225763][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.227481][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.229395][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.231079][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.232856][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.234514][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.236257][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.238030][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.239594][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.241229][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.242774][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.244380][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.271613][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.273312][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.275710][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.277259][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.278616][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.280115][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.281472][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.288004][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.289569][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.295076][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.297670][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.299310][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.315607][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.319562][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.321090][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.322449][ T4594] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 42.405581][ T4609] loop2: detected capacity change from 0 to 764 [ 43.129160][ T4618] device bond_slave_0 entered promiscuous mode [ 43.130459][ T4618] device bond_slave_1 entered promiscuous mode [ 43.131885][ T4618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.167820][ T4618] bond1: (slave macvlan2): making interface the new active one [ 43.247812][ T4618] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 44.047448][ T4646] loop1: detected capacity change from 0 to 512 [ 44.054151][ T4646] EXT4-fs: Ignoring removed nobh option [ 44.337320][ T4643] loop0: detected capacity change from 0 to 131072 [ 44.556566][ T4643] F2FS-fs (loop0): Test dummy encryption mode enabled [ 44.558497][ T4643] F2FS-fs (loop0): invalid crc value [ 44.624051][ T4643] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.634378][ T4643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.661834][ T4646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.381728][ T4656] syz.3.56 sent an empty control message without MSG_MORE. [ 45.389786][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 45.550391][ T4672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.58'. [ 45.896867][ T4678] loop2: detected capacity change from 0 to 164 [ 46.353866][ T4687] bridge0: port 3(macvlan2) entered blocking state [ 46.355960][ T4687] bridge0: port 3(macvlan2) entered disabled state [ 46.357698][ T4687] device macvlan2 entered promiscuous mode [ 46.359190][ T4687] bridge0: port 3(macvlan2) entered blocking state [ 46.360765][ T4687] bridge0: port 3(macvlan2) entered forwarding state [ 46.363027][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 46.363458][ T4687] Zero length message leads to an empty skb [ 46.547375][ T4696] loop1: detected capacity change from 0 to 256 [ 46.911878][ T4319] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.311015][ T4706] loop3: detected capacity change from 0 to 131072 [ 47.327040][ T4706] F2FS-fs (loop3): Test dummy encryption mode enabled [ 47.332801][ T4706] F2FS-fs (loop3): invalid crc value [ 47.353155][ T4706] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.385479][ T4706] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.973996][ T4722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.984172][ T4716] loop1: detected capacity change from 0 to 32768 [ 47.988408][ T4725] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by "ss(pE{بD8HEV[\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$ rejected, failed to enable media [ 60.294360][ T4930] bridge0: port 3(erspan0) entered blocking state [ 60.295758][ T4930] bridge0: port 3(erspan0) entered disabled state [ 60.297293][ T4930] device erspan0 entered promiscuous mode [ 60.298395][ T4930] bridge0: port 3(erspan0) entered blocking state [ 60.299533][ T4930] bridge0: port 3(erspan0) entered forwarding state [ 60.311110][ T4932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.312943][ T4930] device erspan0 left promiscuous mode [ 60.314390][ T4930] bridge0: port 3(erspan0) entered disabled state [ 60.364046][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 61.440168][ T4979] process 'syz.2.145' launched './file0' with NULL argv: empty string added [ 61.747793][ T4973] device wlan0 entered promiscuous mode [ 61.826763][ T4987] loop3: detected capacity change from 0 to 2048 [ 61.850059][ T4987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.801417][ T27] audit: type=1326 audit(62.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 62.805908][ T5013] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 62.805908][ T5013] The task syz.0.156 (5013) triggered the difference, watch for misbehavior. [ 62.807042][ T27] audit: type=1326 audit(62.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.606225][ T27] audit: type=1326 audit(63.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.614575][ T27] audit: type=1326 audit(63.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.621491][ T27] audit: type=1326 audit(63.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.629286][ T27] audit: type=1326 audit(63.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.641896][ T27] audit: type=1326 audit(63.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.646407][ T27] audit: type=1326 audit(63.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.650878][ T27] audit: type=1326 audit(63.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.655040][ T27] audit: type=1326 audit(63.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.2.155" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d781a8 code=0x7fc00000 [ 63.669042][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 63.671236][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.787613][ T5023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.525746][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.527277][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.708982][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 65.716371][ T5057] loop0: detected capacity change from 0 to 32768 [ 65.743937][ T5057] XFS (loop0): Mounting V5 Filesystem [ 66.077349][ T5057] XFS (loop0): Ending clean mount [ 66.078044][ T5069] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 66.082800][ T5057] XFS (loop0): Quotacheck needed: Please wait. [ 66.100397][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 66.101587][ T5057] XFS (loop0): Quotacheck: Done. [ 66.115420][ T5081] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 66.124554][ T5057] netlink: 256 bytes leftover after parsing attributes in process `syz.0.168'. [ 66.151353][ T5081] bond1 (unregistering): Released all slaves [ 66.168442][ T4329] XFS (loop0): Unmounting Filesystem [ 66.360993][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 66.672917][ T5090] device bond2 entered promiscuous mode [ 66.800548][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.803307][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.024901][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 67.303383][ T5120] loop0: detected capacity change from 0 to 2048 [ 67.333763][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.401297][ T5124] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.611852][ T4337] Bluetooth: hci3: unexpected event 0x48 length: 39 > 3 [ 67.611875][ T4337] Bluetooth: hci3: wrong event for mode 0 [ 68.101643][ T5133] loop1: detected capacity change from 0 to 8192 [ 68.112708][ T5133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.119288][ T5133] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 68.125463][ T5133] REISERFS (device loop1): using ordered data mode [ 68.126685][ T5133] reiserfs: using flush barriers [ 68.151332][ T5133] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.155788][ T5133] REISERFS (device loop1): checking transaction log (loop1) [ 68.161712][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 68.284454][ T5133] REISERFS (device loop1): Using tea hash to sort names [ 68.289904][ T5133] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 68.317103][ T5133] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 69.225036][ T5155] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4330] was attempted by " [ 69.561366][ T5164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.201'. [ 69.596603][ T114] cfg80211: failed to load regulatory.db [ 69.638167][ T5147] netlink: 156 bytes leftover after parsing attributes in process `syz.3.195'. [ 69.643273][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 69.896524][ T5187] xt_CONNSECMARK: invalid mode: 0 [ 71.697258][ T4341] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 71.699328][ T4341] Bluetooth: hci3: Injecting HCI hardware error event [ 71.713389][ T4341] Bluetooth: hci3: hardware error 0x00 [ 71.738260][ T5219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.974939][ T5222] loop1: detected capacity change from 0 to 2048 [ 72.098126][ T5222] EXT4-fs: test_dummy_encryption requires encrypt feature [ 73.043692][ T4319] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.133790][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 73.138353][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.140402][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.143547][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.056029][ T4341] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 75.256673][ T5257] netlink: 'syz.2.224': attribute type 2 has an invalid length. [ 76.374311][ T5294] MTD: Couldn't look up './dev/mtdblock0': -2 [ 78.167382][ T5354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.168955][ T5354] IPv6: NLM_F_CREATE should be set when creating new route [ 78.170128][ T5354] IPv6: NLM_F_CREATE should be set when creating new route [ 78.173637][ T5398] device bridge1 entered promiscuous mode [ 78.175042][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 78.179019][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 78.239450][ T5354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.242829][ T5354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.030506][ T5433] loop2: detected capacity change from 0 to 512 [ 79.067604][ T5433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.091211][ T5433] EXT4-fs warning (device loop2): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 79.099091][ T5435] loop0: detected capacity change from 0 to 4096 [ 79.115520][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.175805][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 79.285071][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 82.516967][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 82.520333][ T5486] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 82.531445][ T5488] device syzkaller0 entered promiscuous mode [ 82.544790][ T5486] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 82.545921][ T4375] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 82.575371][ T5492] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 82.623889][ T5492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.630367][ T5493] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 82.713116][ T5488] tipc: Enabled bearer , priority 0 [ 82.730611][ T5498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.732019][ T5498] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 82.734245][ T5498] bond2: (slave vti0): Error -95 calling set_mac_address [ 83.290217][ T5511] loop2: detected capacity change from 0 to 32768 [ 83.304945][ T22] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.656709][ T5499] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.661093][ T5499] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.662547][ T5499] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.663950][ T5499] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.719671][ T5499] bond3: (slave geneve2): making interface the new active one [ 83.722554][ T5499] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 83.741182][ T5492] device gretap1 entered promiscuous mode [ 83.747552][ T5492] bond2: (slave gretap1): making interface the new active one [ 83.750210][ T5492] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 83.753148][ T5487] tipc: Resetting bearer [ 83.906645][ T5487] tipc: Disabling bearer [ 83.913078][ T5493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 83.931683][ T5512] device macvlan3 entered promiscuous mode [ 83.933241][ T5512] device bond2 entered promiscuous mode [ 83.934499][ T5512] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 83.997374][ T5512] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 84.085799][ T5512] device bond2 left promiscuous mode [ 84.457182][ T5531] loop0: detected capacity change from 0 to 256 [ 84.468996][ T22] tipc: Node number set to 3210880763 [ 84.579538][ T5535] netlink: 'syz.3.283': attribute type 13 has an invalid length. [ 86.039081][ T5565] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 86.086338][ T5565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.107903][ T5565] bond3: (slave gretap2): making interface the new active one [ 86.388144][ T5565] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 86.392199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 86.832931][ T5578] tipc: Enabling of bearer rejected, failed to enable media [ 86.888902][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 86.891647][ T5587] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 86.948652][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 86.957425][ T5592] device bond2 entered promiscuous mode [ 87.053650][ T5599] loop2: detected capacity change from 0 to 4096 [ 87.081024][ T5599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.148941][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 87.322736][ T5609] futex_wake_op: syz.2.315 tries to shift op by 144; fix this program [ 89.060245][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 89.061962][ T5633] netlink: 18 bytes leftover after parsing attributes in process `syz.0.314'. [ 93.151565][ T5687] tipc: Enabling of bearer rejected, failed to enable media [ 93.269529][ T5706] binder: 5705:5706 tried to acquire reference to desc 0, got 1 instead [ 93.273508][ T5706] binder_alloc: 5705: pid 5705 spamming oneway? 2 buffers allocated for a total size of 5120 [ 93.572294][ T5709] device syz_tun left promiscuous mode [ 93.574355][ T5709] bridge0: port 3(syz_tun) entered disabled state [ 93.579151][ T5706] binder_alloc: 5705: pid 5705 spamming oneway? 3 buffers allocated for a total size of 5128 [ 93.585555][ T5459] binder: undelivered TRANSACTION_COMPLETE [ 93.586703][ T5459] binder: undelivered TRANSACTION_COMPLETE [ 93.587589][ T5459] binder: undelivered TRANSACTION_COMPLETE [ 93.596985][ T5459] binder: undelivered transaction 8, process died. [ 93.598147][ T5459] binder: undelivered transaction 9, process died. [ 93.599458][ T5459] binder: undelivered transaction 7, process died. [ 93.686801][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.688924][ T5709] bond0: (slave team0): Releasing backup interface [ 93.719801][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.721187][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.723088][ T5709] device bridge_slave_0 left promiscuous mode [ 93.724355][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.951567][ T5709] device bridge_slave_1 left promiscuous mode [ 93.953048][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.978383][ T5709] bond0: (slave bond_slave_0): Releasing backup interface [ 94.052284][ T5709] bond0: (slave bond_slave_1): Releasing backup interface [ 94.138248][ T5709] team0: Port device team_slave_0 removed [ 94.146596][ T5709] team0: Port device team_slave_1 removed [ 94.147993][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.149301][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.151349][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.152577][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.160798][ T5724] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 94.466227][ T5724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.497208][ T5726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.505346][ T5726] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 94.508683][ T5726] bond3: (slave vti0): Error -95 calling set_mac_address [ 94.514788][ T5734] loop1: detected capacity change from 0 to 256 [ 94.620828][ T5727] device gretap1 entered promiscuous mode [ 94.628068][ T5727] bond3: (slave gretap1): making interface the new active one [ 94.630141][ T5727] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 94.633472][ T5730] device macvlan3 entered promiscuous mode [ 94.636617][ T5730] device bond3 entered promiscuous mode [ 94.638618][ T5730] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 94.926664][ T5730] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 94.969671][ T5730] device bond3 left promiscuous mode [ 95.057829][ T5743] tipc: Enabling of bearer rejected, failed to enable media [ 95.176862][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 95.178818][ T5753] netlink: 18 bytes leftover after parsing attributes in process `syz.3.344'. [ 95.195258][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 98.063311][ T5807] device syzkaller0 entered promiscuous mode [ 98.138850][ T5811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'. [ 98.148338][ T5798] tipc: Started in network mode [ 98.149297][ T5798] tipc: Node identity 080211, cluster identity 4711 [ 98.150790][ T5798] tipc: Enabled bearer , priority 0 [ 98.949294][ T5831] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 99.034097][ T5831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.256694][ T14] tipc: Node number set to 134353152 [ 99.373938][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.380946][ T5835] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 99.388843][ T5835] bond1: (slave vti0): Error -95 calling set_mac_address [ 99.403462][ T5831] device gretap1 entered promiscuous mode [ 99.408307][ T5831] bond1: (slave gretap1): making interface the new active one [ 99.410231][ T5831] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.421857][ T5831] device macvlan2 entered promiscuous mode [ 99.423655][ T5831] device bond1 entered promiscuous mode [ 99.424948][ T5831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.714198][ T5831] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 99.759352][ T5831] device bond1 left promiscuous mode [ 101.651935][ T5869] device syzkaller0 entered promiscuous mode [ 101.729141][ T5869] tipc: Started in network mode [ 101.730030][ T5869] tipc: Node identity 863c0d5f4a22, cluster identity 4711 [ 101.731423][ T5869] tipc: Enabled bearer , priority 0 [ 101.733972][ T5868] tipc: Resetting bearer [ 101.836188][ T5868] tipc: Disabling bearer [ 101.892551][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.895658][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.897293][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.899542][ T5877] device bridge_slave_0 left promiscuous mode [ 101.900986][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.946598][ T5877] device bridge_slave_1 left promiscuous mode [ 101.947790][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.315808][ T5877] bond0: (slave bond_slave_0): Releasing backup interface [ 102.395705][ T5877] bond0: (slave bond_slave_1): Releasing backup interface [ 102.753172][ T5877] team0: Port device team_slave_0 removed [ 102.764713][ T5877] team0: Port device team_slave_1 removed [ 102.766766][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.768297][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.770137][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.771562][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.781812][ T5877] bond1: (slave gretap1): Releasing active interface [ 104.197335][ T5916] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4340] was attempted by "ss(pE{بD8HEV[\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$, priority 0 [ 109.168640][ T6038] tipc: Resetting bearer [ 109.291565][ T6038] tipc: Disabling bearer [ 109.355336][ T4482] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 109.366450][ T6045] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 109.378640][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.380343][ T6045] device team_slave_0 entered promiscuous mode [ 109.381453][ T6045] device team_slave_1 entered promiscuous mode [ 109.382785][ T6045] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.840592][ T6055] loop1: detected capacity change from 0 to 512 [ 109.846008][ T6055] EXT4-fs: Ignoring removed nobh option [ 109.859037][ T6055] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 109.862685][ T6055] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.447: attempt to clear invalid blocks 1 len 1 [ 109.865026][ T6055] EXT4-fs (loop1): Remounting filesystem read-only [ 109.868420][ T6055] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 109.870966][ T6055] EXT4-fs (loop1): Remounting filesystem read-only [ 109.872051][ T6055] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.447: invalid indirect mapped block 1819239214 (level 0) [ 109.874450][ T6055] EXT4-fs (loop1): Remounting filesystem read-only [ 109.875863][ T6055] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.447: invalid indirect mapped block 1819239214 (level 1) [ 109.878756][ T6055] EXT4-fs (loop1): Remounting filesystem read-only [ 109.880081][ T6055] EXT4-fs (loop1): 1 truncate cleaned up [ 109.881330][ T6055] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.896806][ T6055] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 109.900286][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 109.903595][ T6061] device geneve2 entered promiscuous mode [ 109.950361][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 110.945761][ T6081] netlink: 168 bytes leftover after parsing attributes in process `syz.3.449'. [ 110.969360][ T6077] CIFS: Attempting to mount \\::1\share [ 110.973778][ T6077] CIFS: VFS: Error connecting to socket. Aborting operation. [ 110.980388][ T6077] CIFS: VFS: cifs_mount failed w/return code = -4 [ 110.980512][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.984116][ T5394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.986317][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.988889][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.990692][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.992124][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.993382][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.369034][ T5394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.379340][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.386685][ T6089] bond0: (slave team0): Releasing backup interface [ 112.162428][ T6089] device team_slave_0 left promiscuous mode [ 112.163616][ T6089] device team_slave_1 left promiscuous mode [ 112.169387][ T6089] device bridge_slave_0 left promiscuous mode [ 112.170561][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.277702][ T6089] device bridge_slave_1 left promiscuous mode [ 112.279259][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.459468][ T6089] bond0: (slave bond_slave_0): Releasing backup interface [ 112.515692][ T6097] loop1: detected capacity change from 0 to 128 [ 112.818183][ T6097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.056147][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 113.070076][ T6089] device bond_slave_0 left promiscuous mode [ 113.101745][ T6089] bond0: (slave bond_slave_1): Releasing backup interface [ 113.447295][ T6089] device bond_slave_1 left promiscuous mode [ 113.467190][ T6089] team0: Port device team_slave_0 removed [ 113.576834][ T6089] team0: Port device team_slave_1 removed [ 113.578402][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.580066][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.582195][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.583720][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.592029][ T6089] bond1: (slave macvlan2): Releasing active interface [ 113.681497][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 113.738264][ T6089] bond2: (slave gretap1): Releasing active interface [ 113.779748][ T6089] bond3: (slave gretap2): Releasing active interface [ 113.834260][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 113.842442][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 114.366918][ T5394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.371981][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 114.391378][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.392877][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.394592][ T6079] device bridge_slave_0 entered promiscuous mode [ 114.397857][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.399554][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.401319][ T6079] device bridge_slave_1 entered promiscuous mode [ 114.417681][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.420681][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.429612][ T6079] team0: Port device team_slave_0 added [ 114.432469][ T6079] team0: Port device team_slave_1 added [ 114.485778][ T5394] bond0: (slave netdevsim0): Releasing backup interface [ 114.527551][ T5394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.530571][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.531779][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.536583][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.540591][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.542025][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.547782][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.596912][ T6079] device hsr_slave_0 entered promiscuous mode [ 114.625797][ T6079] device hsr_slave_1 entered promiscuous mode [ 114.665260][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.667568][ T6079] Cannot create hsr debugfs directory [ 114.669207][ T6132] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 114.724849][ T6132] bond3: (slave gretap1): making interface the new active one [ 114.726786][ T6132] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 114.843856][ T6132] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 115.155199][ T4341] Bluetooth: hci2: command 0x041b tx timeout [ 115.276656][ T5394] tipc: Disabling bearer [ 115.277951][ T5394] tipc: Left network mode [ 115.656076][ T5394] bond1: (slave ip6gretap1): Releasing backup interface [ 115.703488][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 116.180867][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 116.537058][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 116.726506][ T6079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.767783][ T6079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.772365][ T6195] CIFS: Attempting to mount \\::1\share [ 116.774113][ T6195] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.776524][ T6195] CIFS: VFS: cifs_mount failed w/return code = -4 [ 116.865793][ T5394] bond3: (slave gretap1): Releasing active interface [ 116.938446][ T6079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.027784][ T6197] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 117.196133][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 118.029139][ T6216] bridge0: port 1(syz_tun) entered blocking state [ 118.030487][ T6216] bridge0: port 1(syz_tun) entered disabled state [ 118.032018][ T6216] device syz_tun entered promiscuous mode [ 118.034826][ T6216] bridge0: port 1(syz_tun) entered blocking state [ 118.036179][ T6216] bridge0: port 1(syz_tun) entered forwarding state [ 118.141312][ T6079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.256843][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.476'. [ 118.600662][ T6236] loop1: detected capacity change from 0 to 4096 [ 118.614500][ T6228] tipc: Enabling of bearer rejected, failed to enable media [ 118.619588][ T6236] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.642668][ T6236] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 118.646028][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.667914][ T6236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.673162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.674928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.682756][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.686624][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.690371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.692316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.694041][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.695414][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.703464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.703566][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.712628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.714745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.725845][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.727318][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.732059][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.735859][ T6242] loop0: detected capacity change from 0 to 256 [ 118.744496][ T6242] netlink: 168 bytes leftover after parsing attributes in process `syz.0.482'. [ 119.012960][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.016562][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.019974][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.024644][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.030893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.032824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.041679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.043594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.047511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.049271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.052774][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.300234][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 119.477829][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 119.855550][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.857094][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.861033][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.000585][ T5394] device hsr_slave_0 left promiscuous mode [ 120.035415][ T5394] device hsr_slave_1 left promiscuous mode [ 120.195613][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.198812][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.255660][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.276145][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.358776][ T5394] device bridge_slave_1 left promiscuous mode [ 120.362129][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.405994][ T5394] device bridge_slave_0 left promiscuous mode [ 120.407384][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.472823][ T5394] device bond_slave_0 left promiscuous mode [ 120.473997][ T5394] device bond_slave_1 left promiscuous mode [ 120.475006][ T5394] device team_slave_0 left promiscuous mode [ 120.476147][ T5394] device team_slave_1 left promiscuous mode [ 120.565545][ T5394] device veth1_macvtap left promiscuous mode [ 120.566994][ T5394] device veth0_macvtap left promiscuous mode [ 120.568247][ T5394] device veth1_vlan left promiscuous mode [ 120.570042][ T5394] device veth0_vlan left promiscuous mode [ 120.635540][ T5394] bond4 (unregistering): Released all slaves [ 121.296164][ T5394] bond3 (unregistering): Released all slaves [ 121.300234][ T5394] bond2 (unregistering): Released all slaves [ 121.418455][ T5394] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 121.421186][ T5394] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 122.107973][ T5394] bond1 (unregistering): Released all slaves [ 124.258425][ T5394] team0 (unregistering): Port device team_slave_1 removed [ 124.439628][ T5394] team0 (unregistering): Port device team_slave_0 removed [ 124.637236][ T5394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.835554][ T5394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.929323][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.930586][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.215986][ T5394] bond0 (unregistering): (slave team0): Releasing backup interface [ 126.389695][ T5394] bond0 (unregistering): Released all slaves [ 126.708191][ T6079] device veth0_vlan entered promiscuous mode [ 126.710808][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.712560][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.714175][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.716868][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.718748][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.720238][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.721611][ T6263] tipc: Cannot configure node identity twice [ 126.726767][ T6265] tipc: Enabling of bearer rejected, failed to enable media [ 126.733817][ T6079] device veth1_vlan entered promiscuous mode [ 126.750399][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.752174][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.760025][ T6079] device veth0_macvtap entered promiscuous mode [ 126.762418][ T6079] device veth1_macvtap entered promiscuous mode [ 126.768466][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.770377][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.773845][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.775908][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.778038][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.779545][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.781958][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.787632][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.789713][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.791362][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.793739][ T6079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.797851][ T6079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.799347][ T6079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.800820][ T6079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.803643][ T6277] loop1: detected capacity change from 0 to 128 [ 126.848724][ T6277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.867258][ T5339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.868676][ T5339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.870149][ T5339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.871440][ T5339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.873605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.901287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.940037][ T6278] bridge0: port 1(erspan0) entered blocking state [ 126.941354][ T6278] bridge0: port 1(erspan0) entered disabled state [ 126.942848][ T6278] device erspan0 entered promiscuous mode [ 126.944932][ T6278] bridge0: port 1(erspan0) entered blocking state [ 126.946276][ T6278] bridge0: port 1(erspan0) entered forwarding state [ 126.985073][ T6278] device erspan0 left promiscuous mode [ 126.986654][ T6278] bridge0: port 1(erspan0) entered disabled state [ 127.011109][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 127.133796][ T6296] device syzkaller0 entered promiscuous mode [ 128.436621][ T6299] netlink: 168 bytes leftover after parsing attributes in process `syz.4.495'. [ 128.951588][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 130.362928][ T6335] capability: warning: `syz.4.507' uses 32-bit capabilities (legacy support in use) [ 130.906898][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 133.385846][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 133.707060][ T6392] netlink: 'syz.2.521': attribute type 6 has an invalid length. [ 133.709195][ T6392] netlink: 72 bytes leftover after parsing attributes in process `syz.2.521'. [ 133.721307][ T27] audit: type=1326 audit(133.710:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.1.524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff809781a8 code=0x0 [ 133.819005][ T6408] binder: 6405:6408 tried to acquire reference to desc 0, got 1 instead [ 133.831552][ T6408] binder_alloc: 6405: pid 6405 spamming oneway? 2 buffers allocated for a total size of 5120 [ 133.833568][ T6408] binder_alloc: 6405: pid 6405 spamming oneway? 3 buffers allocated for a total size of 5128 [ 134.138499][ T114] binder: undelivered TRANSACTION_COMPLETE [ 134.139610][ T114] binder: undelivered TRANSACTION_COMPLETE [ 134.140743][ T114] binder: undelivered TRANSACTION_COMPLETE [ 134.169740][ T114] binder: undelivered transaction 15, process died. [ 134.170887][ T114] binder: undelivered transaction 16, process died. [ 134.172064][ T114] binder: undelivered transaction 14, process died. [ 134.306361][ T6420] netlink: 68 bytes leftover after parsing attributes in process `syz.2.530'. [ 135.592808][ T6456] mmap: syz.4.540 (6456): VmData 175845376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 137.122742][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 137.136651][ T6480] loop0: detected capacity change from 0 to 128 [ 137.156420][ T6480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.255717][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 138.806691][ T27] audit: type=1326 audit(138.800:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff809781a8 code=0x0 [ 139.058855][ T6526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.515828][ T4341] Bluetooth: hci2: command 0x2016 tx timeout [ 142.573485][ T4341] Bluetooth: hci2: command 0x0406 tx timeout [ 143.529509][ T6607] loop0: detected capacity change from 0 to 512 [ 143.548892][ T6607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 143.554604][ T6607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.568489][ T6607] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.596: inode has both inline data and extents flags [ 143.579288][ T6607] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.596: couldn't read orphan inode 15 (err -117) [ 143.582332][ T6607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.096410][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 150.195340][ T6693] device syzkaller0 entered promiscuous mode [ 150.560456][ T6707] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 150.590684][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.596866][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 150.608143][ T6707] bond1: (slave dummy0): making interface the new active one [ 150.611384][ T6707] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 150.613381][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 151.236598][ T3902] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PREFIX) [ 151.240437][ T6694] ceph: No mds server is up or the cluster is laggy [ 151.244867][ T6714] bridge0: port 4(erspan0) entered blocking state [ 151.246107][ T6714] bridge0: port 4(erspan0) entered disabled state [ 151.247581][ T6714] device erspan0 entered promiscuous mode [ 151.248752][ T6714] bridge0: port 4(erspan0) entered blocking state [ 151.249947][ T6714] bridge0: port 4(erspan0) entered forwarding state [ 151.253268][ T6714] device erspan0 left promiscuous mode [ 151.255370][ T6714] bridge0: port 4(erspan0) entered disabled state [ 151.297033][ T6720] tipc: Started in network mode [ 151.298124][ T6720] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 151.299695][ T6720] tipc: Enabled bearer , priority 0 [ 152.454800][ T5459] tipc: Node number set to 43690 [ 152.510373][ T6761] Bluetooth: MGMT ver 1.22 [ 152.606364][ T6764] bridge0: port 1(erspan0) entered blocking state [ 152.607717][ T6764] bridge0: port 1(erspan0) entered disabled state [ 152.609431][ T6764] device erspan0 entered promiscuous mode [ 152.610841][ T6764] bridge0: port 1(erspan0) entered blocking state [ 152.612133][ T6764] bridge0: port 1(erspan0) entered forwarding state [ 152.617785][ T6764] device erspan0 left promiscuous mode [ 152.618914][ T6764] bridge0: port 1(erspan0) entered disabled state [ 154.114059][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 154.115554][ T4341] Bluetooth: hci0: command 0x0406 tx timeout [ 154.116594][ T4341] Bluetooth: hci4: command 0x0406 tx timeout [ 155.004454][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.008260][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.012614][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.453534][ T6825] netlink: 'syz.4.648': attribute type 4 has an invalid length. [ 156.498484][ T6829] overlayfs: failed to clone upperpath [ 156.618650][ T6833] netlink: 'syz.4.648': attribute type 4 has an invalid length. [ 156.702179][ T6825] netlink: 'syz.4.648': attribute type 4 has an invalid length. [ 156.926516][ T6839] loop0: detected capacity change from 0 to 256 [ 156.932958][ T6839] exfat: Deprecated parameter 'utf8' [ 156.934264][ T6839] exfat: Deprecated parameter 'utf8' [ 157.217407][ T6839] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 159.338446][ T6869] batman_adv: batadv0: Adding interface: dummy0 [ 159.339653][ T6869] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.344363][ T6869] batman_adv: batadv0: Interface activated: dummy0 [ 159.364937][ T6865] batadv0: mtu less than device minimum [ 159.367852][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.371175][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.374223][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.377438][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.380565][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.383709][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.386821][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.389821][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.392771][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.827322][ T6876] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 160.149502][ T6886] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 161.536430][ T6909] netlink: 'syz.3.668': attribute type 39 has an invalid length. [ 165.101499][ T6961] fuse: Bad value for 'fd' [ 165.169136][ T6964] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 167.294135][ T6985] xt_CONNSECMARK: invalid mode: 0 [ 168.703863][ T7005] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 168.709043][ T7005] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 168.748838][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 168.794964][ T6996] overlayfs: failed to clone upperpath [ 168.895664][ T7019] loop0: detected capacity change from 0 to 1024 [ 168.898461][ T7019] EXT4-fs: Ignoring removed bh option [ 168.899464][ T7019] EXT4-fs: Ignoring removed oldalloc option [ 168.900535][ T7019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.972837][ T7019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.121711][ T7019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 169.123275][ T7019] System zones: 0-1, 3-36 [ 169.197584][ T7019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.899833][ T7031] CIFS: Attempting to mount \\127.0.0.1\share [ 169.902402][ T7031] CIFS: VFS: Error connecting to socket. Aborting operation. [ 169.903711][ T7031] CIFS: VFS: cifs_mount failed w/return code = -101 [ 170.064422][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 181.934358][ T7191] mmap: syz.2.742 (7191) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.618649][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'. [ 186.828059][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 186.829992][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 186.921584][ T7271] device dummy0 entered promiscuous mode [ 188.821623][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.822811][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.350878][ T7271] device dummy0 left promiscuous mode [ 195.152120][ T7363] loop0: detected capacity change from 0 to 32768 [ 195.824793][ T7379] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 199.211809][ T7421] device geneve1 left promiscuous mode [ 199.340055][ T7421] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.341804][ T7421] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.343484][ T7421] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.345245][ T7421] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.400539][ T7421] device gretap1 left promiscuous mode [ 199.414178][ T7425] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 199.472358][ T7427] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.474132][ T7427] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.475751][ T7427] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.477226][ T7427] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.492249][ T7427] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 199.817629][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'. [ 202.258981][ T7490] batman_adv: batadv0: Interface deactivated: dummy0 [ 203.209007][ T7522] loop0: detected capacity change from 0 to 1024 [ 203.245867][ T7522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.791799][ T7490] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.793825][ T7490] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.795702][ T7490] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.797544][ T7490] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.960605][ T7490] device macvlan2 left promiscuous mode [ 203.963395][ T7490] device bond2 left promiscuous mode [ 203.970750][ T7514] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 204.096566][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 204.314788][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 205.379892][ T7563] device syzkaller0 entered promiscuous mode [ 206.894759][ T7580] tipc: Resetting bearer [ 206.904719][ T7580] bridge0: port 1(syz_tun) entered disabled state [ 207.957518][ T7580] device wlan0 left promiscuous mode [ 207.999368][ T7580] device gretap1 left promiscuous mode [ 208.008585][ T7580] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.010113][ T7580] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.011760][ T7580] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.013448][ T7580] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.055275][ T7580] device geneve2 left promiscuous mode [ 208.067300][ T7580] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.068874][ T7580] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.070442][ T7580] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.071924][ T7580] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.168050][ T7592] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 208.182604][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 209.811894][ T4337] Bluetooth: hci2: failed to read key size for handle 200 [ 211.685418][ T7649] xt_CT: No such helper "netbios-ns" [ 213.247002][ T7680] netlink: 'syz.3.866': attribute type 4 has an invalid length. [ 220.620460][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 225.279840][ T7884] loop8: detected capacity change from 0 to 7 [ 225.797973][ T7884] Dev loop8: unable to read RDB block 7 [ 225.799314][ T7884] loop8: unable to read partition table [ 225.800332][ T7884] loop8: partition table beyond EOD, truncated [ 225.801354][ T7884] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 228.953995][ T7911] tipc: Enabled bearer , priority 0 [ 228.956366][ T7911] device syzkaller0 entered promiscuous mode [ 229.092369][ T7918] tipc: Resetting bearer [ 229.099225][ T7910] tipc: Resetting bearer [ 229.496239][ T7910] tipc: Disabling bearer [ 233.952365][ T7997] netlink: 276 bytes leftover after parsing attributes in process `syz.4.936'. [ 233.954192][ T7997] netlink: 276 bytes leftover after parsing attributes in process `syz.4.936'. [ 235.515231][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 237.237097][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 241.251561][ T8164] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 241.253373][ T8164] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 244.232375][ T8214] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 244.234522][ T8214] qfq: no options [ 245.025555][ T8224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.991'. [ 245.036422][ T4341] Bluetooth: hci2: failed to read key size for handle 200 [ 248.724267][ T8263] overlayfs: failed to clone lowerpath [ 250.638501][ T8317] loop0: detected capacity change from 0 to 512 [ 250.944927][ T8317] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1010: inode has both inline data and extents flags [ 250.948247][ T8317] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1010: couldn't read orphan inode 15 (err -117) [ 250.950769][ T8317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.797847][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 253.916822][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.918599][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.178226][ T8416] loop0: detected capacity change from 0 to 32768 [ 258.183510][ T8416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1035 (8416) [ 258.194278][ T8416] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.196388][ T8416] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 258.197958][ T8416] BTRFS info (device loop0): turning on sync discard [ 258.199195][ T8416] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 258.200805][ T8416] BTRFS info (device loop0): use zstd compression, level 3 [ 258.201936][ T8416] BTRFS info (device loop0): turning on async discard [ 258.203053][ T8416] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 258.204675][ T8416] BTRFS info (device loop0): trying to use backup root at mount time [ 258.206161][ T8416] BTRFS info (device loop0): enabling auto defrag [ 258.207236][ T8416] BTRFS info (device loop0): using free space tree [ 258.277162][ T5336] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 258.280078][ T8416] BTRFS error (device loop0): failed to load root extent [ 258.281405][ T8416] BTRFS warning (device loop0): try to load backup roots slot 1 [ 258.282836][ T5383] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 258.287374][ T8416] BTRFS warning (device loop0): couldn't read tree root [ 258.288562][ T8416] BTRFS warning (device loop0): try to load backup roots slot 2 [ 258.290326][ T8416] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 258.292536][ T8416] BTRFS warning (device loop0): couldn't read tree root [ 258.293681][ T8416] BTRFS warning (device loop0): try to load backup roots slot 3 [ 258.643837][ T8416] BTRFS info (device loop0): enabling ssd optimizations [ 258.645890][ T8416] BTRFS info (device loop0): rebuilding free space tree [ 258.661475][ T8416] BTRFS info (device loop0): checking UUID tree [ 259.440048][ T4329] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.151153][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 261.328455][ T8485] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1049'. [ 261.330908][ T8485] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1049'. [ 261.343546][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.474948][ T8519] tipc: Enabling of bearer rejected, failed to enable media [ 266.258693][ T8573] loop0: detected capacity change from 0 to 2048 [ 266.385666][ T8573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 267.102691][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 276.447909][ T8746] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 276.544184][ T8750] bond3: (slave veth7): Enslaving as an active interface with a down link [ 277.338071][ T8746] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 277.367426][ T8746] device macvlan0 entered promiscuous mode [ 277.368859][ T8746] device bond3 entered promiscuous mode [ 277.369999][ T8746] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 277.478473][ T8746] device bond3 left promiscuous mode [ 284.609477][ T8915] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1144'. [ 286.371355][ T8943] loop0: detected capacity change from 0 to 512 [ 286.382242][ T8943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.072245][ T8943] EXT4-fs (loop0): 1 truncate cleaned up [ 287.073684][ T8943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 287.191923][ T8960] overlayfs: failed to clone lowerpath [ 287.744644][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 289.308042][ T8995] nvmet: transport type 0 not supported [ 289.411131][ T9002] atomic_op 0000000015bcb097 conn xmit_atomic 0000000000000000 [ 290.892215][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.408325][ T9087] team0: Port device bridge0 added [ 298.630440][ T9198] Soft offlining pfn 0x1402ee at process virtual address 0x20000000 [ 298.639270][ T9198] Soft offlining pfn 0x1464d7 at process virtual address 0x20001000 [ 298.640836][ T9198] Soft offlining pfn 0x13ff02 at process virtual address 0x20002000 [ 298.642458][ T9198] Soft offlining pfn 0x147008 at process virtual address 0x20003000 [ 298.647845][ T9198] Injecting memory failure for pfn 0x13b837 at process virtual address 0x20000000 [ 298.911749][ T9198] Memory failure: 0x13b837: keeping poisoned page in swap cache [ 298.914294][ T9198] Memory failure: 0x13b837: recovery action for clean swapcache page: Recovered [ 298.915980][ T9198] Injecting memory failure for pfn 0x13e261 at process virtual address 0x20001000 [ 298.917716][ T9198] Memory failure: 0x13e261: recovery action for dirty LRU page: Recovered [ 298.919154][ T9198] Injecting memory failure for pfn 0x13e262 at process virtual address 0x20002000 [ 298.920657][ T9198] Memory failure: 0x13e262: recovery action for dirty LRU page: Recovered [ 301.970963][ T9238] device syzkaller0 entered promiscuous mode [ 305.612190][ T9285] loop0: detected capacity change from 0 to 32768 [ 305.968879][ T9285] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 306.434692][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1243'. [ 307.112625][ T4329] ocfs2: Unmounting device (7,0) on (node local) [ 311.747596][ T9428] loop0: detected capacity change from 0 to 512 [ 311.749356][ T9428] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.798215][ T9441] netlink: 'syz.2.1281': attribute type 27 has an invalid length. [ 312.799749][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 312.801412][ T9441] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 315.356407][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.358367][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.564027][ T9470] tipc: Enabling of bearer rejected, failed to enable media [ 321.507981][ T9543] net_ratelimit: 10 callbacks suppressed [ 321.507989][ T9543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.763365][ T9562] serio: Serial port ptm0 [ 322.201801][ T9576] Injecting memory failure for pfn 0x14ae01 at process virtual address 0x20001000 [ 322.206138][ T9576] Memory failure: 0x14ae01: recovery action for unsplit thp: Ignored [ 323.957432][ T9603] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 323.960190][ T9603] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 323.961707][ T9603] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 323.968531][ T9603] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 324.663745][ T9603] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 325.062318][ T9603] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 327.831153][ T9645] infiniband syz2: set down [ 328.150670][ T9645] infiniband syz2: added ipvlan0 [ 328.253210][ T9645] RDS/IB: syz2: added [ 328.258500][ T9645] smc: adding ib device syz2 with port count 1 [ 328.260731][ T9645] smc: ib device syz2 port 1 has pnetid [ 329.161964][ T9692] loop0: detected capacity change from 0 to 128 [ 329.170970][ T9692] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 329.543827][ T9283] udevd[9283]: incorrect ext4 checksum on /dev/loop0 [ 331.090186][ T9707] loop0: detected capacity change from 0 to 32768 [ 331.105353][ T9707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1352 (9707) [ 331.225344][ T9707] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.227359][ T9707] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 331.229189][ T9707] BTRFS info (device loop0): force clearing of disk cache [ 331.230904][ T9707] BTRFS info (device loop0): use zlib compression, level 3 [ 331.232297][ T9707] BTRFS info (device loop0): enabling ssd optimizations [ 331.233480][ T9707] BTRFS info (device loop0): using spread ssd allocation scheme [ 331.235069][ T9707] BTRFS info (device loop0): using free space tree [ 331.681969][ T9707] BTRFS info (device loop0): rebuilding free space tree [ 331.706553][ T9707] BTRFS info (device loop0): checking UUID tree [ 333.830811][ T4329] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.365297][ T9789] tipc: Enabled bearer , priority 0 [ 334.367194][ T9789] device syzkaller0 entered promiscuous mode [ 334.423146][ T9789] tipc: Resetting bearer [ 334.589633][ T9795] Injecting memory failure for pfn 0x14bf4f at process virtual address 0x20001000 [ 335.786978][ T6570] tipc: Node number set to 3424521567 [ 335.795441][ T9788] tipc: Resetting bearer [ 335.892884][ T9795] Memory failure: 0x14bf4f: recovery action for dirty LRU page: Recovered [ 335.894593][ T9795] Injecting memory failure for pfn 0x14bf50 at process virtual address 0x20002000 [ 336.031108][ T9795] Memory failure: 0x14bf50: recovery action for dirty LRU page: Recovered [ 336.032718][ T9795] Injecting memory failure for pfn 0x14bf51 at process virtual address 0x20003000 [ 336.060014][ T9795] Memory failure: 0x14bf51: recovery action for dirty LRU page: Recovered [ 336.321154][ T9798] Injecting memory failure for pfn 0x14a801 at process virtual address 0x20001000 [ 336.330022][ T9798] Memory failure: 0x14a801: recovery action for dirty LRU page: Recovered [ 336.787407][ T9788] tipc: Disabling bearer [ 338.982923][ T9850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.386663][ T4337] Bluetooth: hci4: failed to read key size for handle 200 [ 343.898155][ T9931] Device name cannot be null; rc = [-22] [ 344.737789][ T9950] tipc: Enabling of bearer rejected, failed to enable media [ 346.056198][ T9989] overlayfs: failed to clone upperpath [ 350.085292][T10041] loop0: detected capacity change from 0 to 128 [ 350.117225][T10041] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 359.340016][T10263] netem: change failed [ 359.576816][ T4337] Bluetooth: hci2: failed to read key size for handle 200 [ 359.902621][T10275] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1490'. [ 360.894566][T10290] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 360.901612][T10290] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 362.090531][T10325] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 362.171582][T10327] Device name cannot be null; rc = [-22] [ 362.346228][ T4337] Bluetooth: hci4: failed to read key size for handle 200 [ 368.148236][ T4337] Bluetooth: hci0: failed to read key size for handle 200 [ 368.278387][T10388] Device name cannot be null; rc = [-22] [ 368.286409][T10397] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 368.289205][T10397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 368.375275][T10401] overlayfs: failed to clone lowerpath [ 370.628068][T10420] overlayfs: failed to clone lowerpath [ 372.826554][T10448] bridge0: port 3(macvlan2) entered disabled state [ 372.828047][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.829340][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.892024][T10448] bridge0: port 3(macvlan2) entered blocking state [ 372.893358][T10448] bridge0: port 3(macvlan2) entered forwarding state [ 372.895887][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.897084][T10448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.898485][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.899840][T10448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.731497][T10448] team0: Port device bridge0 added [ 373.735612][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 373.831317][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.833630][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.846529][T10453] bridge0: port 3(macvlan2) entered disabled state [ 373.886073][ T39] bond4: (slave ip6gretap1): link status up again after 0 ms [ 373.887847][ T39] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 374.447179][T10519] Device name cannot be null; rc = [-22] [ 374.830887][ T5376] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 375.305301][ T39] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 375.417293][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 375.541178][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 375.826230][ T5376] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.265261][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.385265][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.495661][ T5376] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.781085][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 376.835487][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.850558][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.090580][T10570] Device name cannot be null; rc = [-22] [ 378.940256][ T5374] net_ratelimit: 11 callbacks suppressed [ 378.940266][ T5374] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.076360][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.450191][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.555203][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.245509][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.356556][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.795791][ T5379] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 380.913336][ T4552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 381.026633][ T5376] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 381.155659][ T5332] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 383.551753][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 383.777294][T10687] Device name cannot be null; rc = [-22] [ 383.995300][ T5373] net_ratelimit: 12 callbacks suppressed [ 383.995314][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.105924][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.215348][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.334845][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.458491][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.481168][T10706] Soft offlining pfn 0x147e54 at process virtual address 0x20000000 [ 384.486488][T10706] Soft offlining pfn 0x140d12 at process virtual address 0x20001000 [ 384.489945][T10706] Soft offlining pfn 0x14ac32 at process virtual address 0x20002000 [ 384.491894][T10706] Soft offlining pfn 0x14ac3b at process virtual address 0x20003000 [ 384.555206][T10706] Injecting memory failure for pfn 0x14ac24 at process virtual address 0x20000000 [ 384.778159][ T5395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.881339][T10706] Memory failure: 0x14ac24: keeping poisoned page in swap cache [ 384.882901][T10706] Memory failure: 0x14ac24: recovery action for clean swapcache page: Recovered [ 384.884466][T10706] Injecting memory failure for pfn 0x14ac23 at process virtual address 0x20001000 [ 384.900318][T10706] Memory failure: 0x14ac23: recovery action for dirty LRU page: Recovered [ 384.901911][T10706] Injecting memory failure for pfn 0x14ac3c at process virtual address 0x20002000 [ 384.906758][T10706] Memory failure: 0x14ac3c: recovery action for dirty LRU page: Recovered [ 385.165206][ T5395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 385.368921][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 385.815775][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 386.272524][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.087344][ T5342] net_ratelimit: 17 callbacks suppressed [ 389.087384][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.741469][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.845819][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.955871][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.123026][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.447694][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.575264][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.685207][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.802283][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.952303][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.200598][ T5345] net_ratelimit: 11 callbacks suppressed [ 394.200846][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.306283][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.416490][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.525812][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.651152][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.795667][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 394.905487][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.035924][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.145256][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.255246][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.547743][T10850] trusted_key: encrypted_key: keylen parameter is missing [ 396.157411][T10858] overlayfs: failed to clone lowerpath [ 396.182013][T10858] overlayfs: failed to clone lowerpath [ 397.898802][T10886] Injecting memory failure for pfn 0x149801 at process virtual address 0x20001000 [ 397.908554][T10886] Memory failure: 0x149801: recovery action for dirty LRU page: Recovered [ 398.910904][T10902] Injecting memory failure for pfn 0x14de01 at process virtual address 0x20001000 [ 398.921309][T10902] Memory failure: 0x14de01: recovery action for dirty LRU page: Recovered [ 399.237849][ T5394] net_ratelimit: 22 callbacks suppressed [ 399.237862][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 399.425616][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 399.746039][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 399.991974][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.095564][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.462291][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.565265][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.953226][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 401.056115][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 401.166477][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 404.419147][ T5356] net_ratelimit: 8 callbacks suppressed [ 404.419158][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 404.541819][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 404.617174][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 404.648217][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 404.689565][ T4337] Bluetooth: Unexpected start frame (len 18) [ 404.869867][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 404.975702][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.085698][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.302477][T11006] Device name cannot be null; rc = [-22] [ 405.311111][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.435366][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.545811][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.659033][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.779955][T11017] Injecting memory failure for pfn 0x14bc01 at process virtual address 0x20001000 [ 405.782801][T11017] Memory failure: 0x14bc01: recovery action for dirty LRU page: Recovered [ 407.138656][T11033] overlayfs: failed to clone lowerpath [ 407.199856][T11034] overlayfs: failed to clone lowerpath [ 408.757847][T11068] rdma_rxe: rxe_register_device failed with error -23 [ 408.760618][T11068] rdma_rxe: failed to add ipvlan0 [ 409.495798][ T5381] net_ratelimit: 24 callbacks suppressed [ 409.495950][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 409.605879][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 409.716575][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 409.845710][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.164408][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.285640][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.399677][T11093] Injecting memory failure for pfn 0x14ec01 at process virtual address 0x20001000 [ 410.402497][T11093] Memory failure: 0x14ec01: recovery action for dirty LRU page: Recovered [ 410.423594][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.563761][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.681714][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.711177][T11101] tipc: Enabling of bearer rejected, failed to enable media [ 411.134403][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 412.759184][T11130] overlayfs: failed to clone lowerpath [ 412.775443][T11130] overlayfs: failed to clone lowerpath [ 415.403035][ T5373] net_ratelimit: 19 callbacks suppressed [ 415.403048][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.515714][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.825370][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.946176][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 416.055309][ T5342] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 417.020885][T11179] Injecting memory failure for pfn 0x14dc01 at process virtual address 0x20001000 [ 417.815417][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 417.832551][T11179] Memory failure: 0x14dc01: recovery action for dirty LRU page: Recovered [ 417.925200][ T5395] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.035174][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.166509][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.524680][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.542446][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 420.461713][ T11] net_ratelimit: 4 callbacks suppressed [ 420.461751][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.565343][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.675433][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.820991][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.026883][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.136994][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.246343][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.356339][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.466331][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.575826][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 421.643341][T11219] tipc: Enabling of bearer rejected, failed to enable media [ 423.961534][T11245] overlayfs: failed to clone upperpath [ 424.823496][T11262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.505338][ T5378] net_ratelimit: 12 callbacks suppressed [ 425.505353][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.830051][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.942855][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.073622][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.188428][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.305472][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.436938][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.545281][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.831235][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 426.947535][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.648623][T11345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.676967][ T5338] net_ratelimit: 17 callbacks suppressed [ 430.677098][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.797933][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.905785][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.510311][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 431.615277][ T5394] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.147914][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.255394][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.320992][T11374] Soft offlining pfn 0x149e32 at process virtual address 0x20000000 [ 432.326246][T11374] Soft offlining pfn 0x14693e at process virtual address 0x20001000 [ 432.327857][T11374] Soft offlining pfn 0x147e02 at process virtual address 0x20002000 [ 432.329417][T11374] Soft offlining pfn 0x147e03 at process virtual address 0x20003000 [ 432.348686][T11374] Injecting memory failure for pfn 0x13b24a at process virtual address 0x20000000 [ 432.353496][T11374] Memory failure: 0x13b24a: keeping poisoned page in swap cache [ 432.355196][T11374] Memory failure: 0x13b24a: recovery action for clean swapcache page: Recovered [ 432.356887][T11374] Injecting memory failure for pfn 0x147c34 at process virtual address 0x20001000 [ 432.358900][T11374] Memory failure: 0x147c34: recovery action for dirty LRU page: Recovered [ 432.360450][T11374] Injecting memory failure for pfn 0x1465cc at process virtual address 0x20002000 [ 432.362044][T11374] Memory failure: 0x1465cc: recovery action for dirty LRU page: Recovered [ 432.377709][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.496149][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.615208][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.698713][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 435.301909][T11416] overlayfs: failed to clone upperpath [ 435.711467][ T5338] net_ratelimit: 9 callbacks suppressed [ 435.711481][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.995202][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.105370][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.295776][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.503643][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.615495][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.725373][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.822164][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 437.703245][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 437.968494][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 438.106115][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 438.492261][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.494174][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.247015][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 439.959831][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 440.830668][ T5373] net_ratelimit: 15 callbacks suppressed [ 440.830685][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.958766][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.066858][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.177049][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.300117][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.406903][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.635705][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.746473][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.855487][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 442.037527][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 442.276276][T11540] tipc: Enabling of bearer rejected, failed to enable media [ 442.969166][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 444.891046][T11589] tipc: Enabling of bearer rejected, failed to enable media [ 445.259006][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 445.935533][ T5372] net_ratelimit: 21 callbacks suppressed [ 445.935546][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 446.045713][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 446.166002][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 446.782500][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 446.886146][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 447.343457][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 447.456419][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 447.565303][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 447.799813][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 447.905639][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.037578][ T5371] net_ratelimit: 19 callbacks suppressed [ 451.037651][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.248761][ T5381] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.366386][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.476477][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.586464][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.696537][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.812252][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 452.812806][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.604239][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.716246][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.830952][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 454.786415][T11749] trusted_key: encrypted_key: keylen parameter is missing [ 455.275015][T11759] tipc: Enabling of bearer rejected, failed to enable media [ 455.840179][T11774] overlayfs: failed to clone upperpath [ 456.089011][ T11] net_ratelimit: 13 callbacks suppressed [ 456.089025][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.202727][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.608197][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.707982][T11794] tipc: Enabling of bearer rejected, failed to enable media [ 456.725260][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.835461][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.914892][T11805] fuse: Bad value for 'fd' [ 456.956194][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 457.065775][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 457.176167][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 457.295639][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.691031][T11813] trusted_key: encrypted_key: keylen parameter is missing [ 458.787080][ T5373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.244589][ T5356] net_ratelimit: 10 callbacks suppressed [ 461.244602][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.254618][T11862] tipc: Enabling of bearer rejected, failed to enable media [ 461.357093][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.965230][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.094972][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.351745][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.465845][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 462.509282][T11904] tipc: Can't bind to reserved service type 0 [ 462.592365][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.006701][ T5338] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.115577][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.235628][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.387205][T11914] tipc: Enabling of bearer rejected, failed to enable media [ 465.763100][T11964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1913'. [ 466.318819][ T5372] net_ratelimit: 14 callbacks suppressed [ 466.318833][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.436106][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.555322][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.665243][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.775232][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.885232][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.995245][ T5345] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.110848][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.181272][T11978] Injecting memory failure for pfn 0x150801 at process virtual address 0x20001000 [ 467.215198][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.325286][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 467.454664][T11978] Memory failure: 0x150801: recovery action for dirty LRU page: Recovered [ 467.804410][T11991] tipc: Enabling of bearer rejected, failed to enable media [ 471.342751][ T5377] net_ratelimit: 28 callbacks suppressed [ 471.342849][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.475273][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.647695][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.756709][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.865589][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.985562][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.095540][ T5344] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.393955][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.505408][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.615300][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 473.816761][T12129] netlink: 'syz.3.1963': attribute type 10 has an invalid length. [ 474.224032][T12143] netlink: 'syz.0.1966': attribute type 2 has an invalid length. [ 476.410474][ T5353] net_ratelimit: 19 callbacks suppressed [ 476.410486][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.641807][T12247] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1985'. [ 476.648869][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.795244][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.915220][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.207819][ T5378] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.240569][T12254] tipc: Enabling of bearer rejected, failed to enable media [ 477.316793][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 478.811955][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.204672][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.318804][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.438893][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.810551][ T5353] net_ratelimit: 10 callbacks suppressed [ 482.810565][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.915261][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.041946][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.175690][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.423317][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.545309][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.655779][ T5353] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.816360][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.932577][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 483.965502][T12373] fuse: Bad value for 'fd' [ 484.035251][ T5371] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.001884][ T5370] [ 488.002354][ T5370] ============================================ [ 488.003412][ T5370] WARNING: possible recursive locking detected [ 488.004440][ T5370] syzkaller #0 Not tainted [ 488.005227][ T5370] -------------------------------------------- [ 488.006304][ T5370] kworker/u4:53/5370 is trying to acquire lock: [ 488.007400][ T5370] fffffbffeffaca48 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x580/0x948 [ 488.009185][ T5370] [ 488.009185][ T5370] but task is already holding lock: [ 488.010561][ T5370] fffffbffeff96c90 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x458/0x948 [ 488.012284][ T5370] [ 488.012284][ T5370] other info that might help us debug this: [ 488.013817][ T5370] Possible unsafe locking scenario: [ 488.013817][ T5370] [ 488.015098][ T5370] CPU0 [ 488.015668][ T5370] ---- [ 488.016245][ T5370] lock(&pd_list->lock); [ 488.016993][ T5370] lock(&pd_list->lock); [ 488.017776][ T5370] [ 488.017776][ T5370] *** DEADLOCK *** [ 488.017776][ T5370] [ 488.019265][ T5370] May be due to missing lock nesting notation [ 488.019265][ T5370] [ 488.020752][ T5370] 3 locks held by kworker/u4:53/5370: [ 488.021793][ T5370] #0: ffff0000c424a938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 488.023863][ T5370] #1: ffff800021dc7c40 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 488.025917][ T5370] #2: fffffbffeff96c90 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x458/0x948 [ 488.027690][ T5370] [ 488.027690][ T5370] stack backtrace: [ 488.028749][ T5370] CPU: 1 PID: 5370 Comm: kworker/u4:53 Not tainted syzkaller #0 [ 488.030073][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 488.031853][ T5370] Workqueue: pencrypt_parallel padata_parallel_worker [ 488.033027][ T5370] Call trace: [ 488.033576][ T5370] dump_backtrace+0x1c4/0x1f0 [ 488.034409][ T5370] show_stack+0x2c/0x3c [ 488.035124][ T5370] __dump_stack+0x30/0x40 [ 488.035919][ T5370] dump_stack_lvl+0xf4/0x15c [ 488.036744][ T5370] dump_stack+0x1c/0x5c [ 488.037485][ T5370] __lock_acquire+0x15d0/0x6634 [ 488.038399][ T5370] lock_acquire+0x20c/0x638 [ 488.039250][ T5370] _raw_spin_lock+0x54/0x6c [ 488.040101][ T5370] padata_do_serial+0x580/0x948 [ 488.041019][ T5370] pcrypt_aead_enc+0x7c/0xa8 [ 488.041874][ T5370] padata_parallel_worker+0x6c/0x1b8 [ 488.042894][ T5370] process_one_work+0x7e4/0x13bc [ 488.043790][ T5370] worker_thread+0x8cc/0xfe8 [ 488.044643][ T5370] kthread+0x254/0x2e0 [ 488.045404][ T5370] ret_from_fork+0x10/0x20 [ 488.065194][ T5372] net_ratelimit: 9 callbacks suppressed [ 488.065207][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.305750][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.418435][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.435733][T12468] ceph: No mds server is up or the cluster is laggy [ 488.438355][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 488.444782][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 488.527060][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.635731][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.755230][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.865208][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 488.975190][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 489.105175][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 489.215144][ T5372] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.135156][ T5377] net_ratelimit: 34 callbacks suppressed [ 493.135172][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.245126][ T5356] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.355134][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.465123][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.575128][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.695123][ T5336] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.805134][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.915384][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.025132][ T5377] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.135149][ T5370] bond4: (slave ip6gretap1): failed to get link speed/duplex