last executing test programs: 15m41.378480981s ago: executing program 1 (id=490): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="4700000001003f", 0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 15m40.702921398s ago: executing program 1 (id=492): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 15m36.613289588s ago: executing program 1 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 15m36.198688979s ago: executing program 1 (id=501): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m31.086391071s ago: executing program 1 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15m28.038672225s ago: executing program 1 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) 15m12.430660412s ago: executing program 32 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) 14m23.901511123s ago: executing program 5 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 14m21.415223005s ago: executing program 5 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a", @ANYRES16=r5, @ANYBLOB, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4044804, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 14m11.640899512s ago: executing program 5 (id=603): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getitimer(0x1, &(0x7f0000000040)) r2 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)="52000000230001010002060000000000000000000000000000000000000000003f0000000000000000", 0x29) 13m55.663859149s ago: executing program 33 (id=603): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getitimer(0x1, &(0x7f0000000040)) r2 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)="52000000230001010002060000000000000000000000000000000000000000003f0000000000000000", 0x29) 11m41.750881374s ago: executing program 0 (id=768): timer_getoverrun(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000540)=@ethtool_coalesce={0xe, 0xc, 0x7f, 0x2, 0x70, 0x2, 0x2, 0x5, 0xfb94, 0x3, 0x7, 0xd1f4, 0x8, 0x1, 0x5, 0x4, 0x200156, 0xfffffffd, 0x4, 0x0, 0x8000, 0x4}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008089, &(0x7f0000000780)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@noauto_da_alloc}, {@nouser_xattr}, {@abort}], [{@obj_role={'obj_role', 0x3d, '\xa5\xb2W\xc2\xb2\xaa\xaa\x8a\x8fY\xcb1\xbe\xfaL\x91\x11F\xb5Q\xc2\xf3\xa4\a;H\x91j\xeaK\xack\x99\xa7\x84\xfb\xd3\xaf\xa13\xa32\xb9\xe6=\xef5CG&\x96\xb6\x7f\xd4\xd6\xdf_v\xbc\xa8\x03,\xf9\x93\x87\x0f9P9\xfc9\x1f\xe1\xbd\x8c2]\xf5\xd1\x9f\x06\n\xdc\xe0.\x01o~\x18;%\x92QH\x94\xc9\xfb\xed\x99(\xd7A7\x06\x00o\xaf\xeaXW\xf1\xb8fY\x8e\x8fG\xaeO$mH\x92C.\x88\xd0\xe7c\xba\xc9\\\xc6@\x85\x8aC\xfbyO\xd9\xba\xd6o\xfbiy\xb2\xe3\xc4v\x89#\xe2X\xd0M1h\x81#\x88|\x1b\x06Yv\\~\x92\xbf\x16C]fN>\x1a\xa2{9U.\x85S\xc2K\xe99{r+9\x10\x9e\xfe\x06\xa2\x03\xed\xc3\x8a<&\xdb\x05\xe7\xc2\xa9\x90\xa4\xdc\xa2\xf6b\xdd\x1cR\xeb\xbc\xc5t/J\xe7\xd6b\x06\xc3\xb3\x19y@\x96\xae\xf1T\xe1\xf25)\x9c\xfe\x8f\xdaky\xb7\xcb\xa3'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'root'}}]}, 0x2, 0x5e9, &(0x7f0000000180)="$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") 11m40.164440829s ago: executing program 0 (id=770): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="4700000001003f", 0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=") 11m39.923535721s ago: executing program 0 (id=771): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/106) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0x8000b, 0x4, 0xfffffffe}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='foo:m', 0x5) 11m38.334202927s ago: executing program 0 (id=773): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) mount$fuse(0x0, 0x0, 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) 11m29.234427578s ago: executing program 0 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11m28.30404515s ago: executing program 0 (id=785): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 11m12.994064363s ago: executing program 34 (id=785): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r6, 0x0, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1m37.444396822s ago: executing program 4 (id=1707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 1m35.296723332s ago: executing program 4 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0xc0800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000400)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) syz_open_procfs(0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027b0180c200000186dd60122d9200083a010008"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, r6, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) 1m26.819311795s ago: executing program 4 (id=1724): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) unshare(0x28000600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x3, 0xfffa}, 0x3a, [0x8000, 0x401, 0xb, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x7fff, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x7, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xa, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x9, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0xbe0f, 0x8a6, 0x7, 0xa, 0xffffffff, 0x5, 0x20, 0x120000, 0x2008077f, 0x2, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x2000004, 0xffff, 0x5, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x1, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r6 = syz_open_pts(r5, 0xea283) dup3(r6, r5, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) 1m19.013928452s ago: executing program 4 (id=1732): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x8, 0x5, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x1}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) 1m12.802821176s ago: executing program 4 (id=1737): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1400, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x300e461, 0x0, 0x2, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 1m11.245685153s ago: executing program 4 (id=1741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r8 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r8) 56.170909371s ago: executing program 35 (id=1741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r8 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r8) 32.150700887s ago: executing program 8 (id=1782): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(r2) sendmsg$nl_generic(r3, 0x0, 0xc840) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000010011ab01ec4fb4788e667e5651d5390e7961c6bdeaf9f998a7ef852e97a8f58a79153cae7c113be28f86199888f1c60d67aed97739de3d0833be8cb2a05e1594"], 0x0) 32.005917429s ago: executing program 6 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 23.67023051s ago: executing program 2 (id=1797): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x7fff, 0x4, 0x9, 0x612, 0x4, 0x2, 0x0, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x53c7, 0x662831c2, 0x7, 0x2, 0x1}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x9, 0xfff7, 0x9, 0x78ca, 0xfffffffc, 0xf61f, 0xf75, 0x1, r0}, &(0x7f00000002c0)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="800066180a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x6, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x1, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) 23.66987157s ago: executing program 8 (id=1798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x275}], 0x1) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x800, &(0x7f0000003640)="$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") removexattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000000)={0x8, 0x1, 0xfffffffffffff353, 0x1, 0x7, 0x2, 0xc}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000009180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x80, 0x508101, 0x0, 0x3, 0x8, 0xa7fff, 0x0, 0x0, 0x91, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={0x1020, 0x0, 0xc, {0x3, 0x0, 0x7, 0x800}}, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000008180)={0x0, "5e97461069416b3f42d9b02dc0c4e3bc"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) 23.622384727s ago: executing program 6 (id=1799): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb) setpriority(0x1, 0x0, 0x80000000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000c40)={{0x2, 0x1}, {0x7f, 0xff}, 0x9, 0x5, 0xc}) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@dont_appraise}, {@appraise}]}}) write(r4, 0x0, 0x0) futex_waitv(&(0x7f0000000a40)=[{0x30a, &(0x7f0000000080)=0x100000001, 0x2}, {0xffffffffffffffdd, &(0x7f0000000340)=0x6, 0x82}, {0x3736, &(0x7f0000000540)=0x5, 0x2}, {0xa6, &(0x7f0000000580)=0x8, 0x2}, {0x7, &(0x7f00000005c0)=0x1, 0x2}, {0xb38, &(0x7f0000000640)=0x101, 0x82}, {0x7, &(0x7f0000000680)=0x8000, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x2}, {0x1000, &(0x7f00000000c0)=0x2, 0x82}, {0x2, &(0x7f0000000740)=0x100, 0x2}, {0x33c0000000000000, &(0x7f0000000780)=0xa6, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x1, &(0x7f0000000800)=0x2, 0x2}, {0x5, &(0x7f0000000880)=0x7, 0x2}, {0x7000000000000, &(0x7f00000008c0)=0xfffffffffffffff7, 0x2}, {0x200, &(0x7f0000000900)=0x52, 0x82}, {0x0, &(0x7f0000000940)=0x6b, 0x82}, {0x94, &(0x7f0000000980)=0x2d328a0f, 0x2}, {0xfffffffffffffffe, &(0x7f0000000440)=0xb385, 0x82}, {0x6, &(0x7f0000000a00)=0x8, 0x82}], 0x14, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x482, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa) 23.565937587s ago: executing program 3 (id=1800): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r3) write(0xffffffffffffffff, &(0x7f0000000600)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='loop\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r5, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r5) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) ioctl(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a00)) 22.513003333s ago: executing program 8 (id=1801): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 19.211719556s ago: executing program 2 (id=1803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, 0x0, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 15.701249423s ago: executing program 2 (id=1804): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 14.296254765s ago: executing program 8 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setrlimit(0x2, &(0x7f0000000000)={0x1000, 0x4}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) statx(0xffffffffffffffff, &(0x7f0000000340)='./dev_mnt/ttyUSB0\x00', 0x4000, 0x10, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r5) setreuid(0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) socket$netlink(0x10, 0x3, 0x2) shmctl$IPC_RMID(0x0, 0x0) unshare(0x62040200) 14.01207088s ago: executing program 6 (id=1807): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.455455657s ago: executing program 3 (id=1808): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(r2) sendmsg$nl_generic(r3, 0x0, 0xc840) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000010011ab01ec4fb4788e667e5651d5390e7961c6bdeaf9f998a7ef852e97a8f58a79153cae7c113be28f86199888f1c60d67aed97739de3d0833be8cb2a05e1594"], 0x0) 10.148882533s ago: executing program 2 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 9.065772224s ago: executing program 2 (id=1810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 7.409075806s ago: executing program 7 (id=1812): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x3, 0x3f8, 0x0, 0x32, 0x0, 0x19}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x54, &(0x7f0000000640)={0xa, 0x4e22, 0x75ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x480f0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r5, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() 7.408286536s ago: executing program 2 (id=1813): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) mount$overlay(0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x5c}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir, 0x5c}]}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x238, 0x260, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e8, {0x2}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0x0, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3503, 0x10, 0x0, 0x17, 0x13}, {@ipv4=@empty, [0xffffffff, 0x0, 0xffffff00, 0xff000000], @ipv4=@remote, [0xffffff00, 0xffffff00, 0x0, 0xff], 0x4d5, 0x3505, 0x0, 0x1, 0x18, 0x21}, {@ipv6=@private1, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0xff, 0xffffff00, 0xff], 0x4d4, 0x3507, 0x4, 0x0, 0x2, 0x8}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0xffffffff, 0xff0000ff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff], 0x4d6, 0x3502, 0x3a, 0x1, 0xa, 0xd}], 0x2, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) dup(r4) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b00000000000800280029450000a555020ad34e2c1ee493a831642e3e9f33a583304eba04ea38ab34"], 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB], 0x48) 7.408133267s ago: executing program 3 (id=1815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, 0x0, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 5.865209161s ago: executing program 3 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.716796405s ago: executing program 7 (id=1817): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)='\v', 0x1) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$char_usb(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) close_range(r5, r3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2517e, &(0x7f0000000740)={0x0, 0x9aa, 0x1000, 0x2, 0x1cb}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) read$eventfd(r4, &(0x7f0000000000), 0x8) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000680)=""/161) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.633027198s ago: executing program 6 (id=1818): r0 = fanotify_init(0x10, 0x8000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)="a6cc04e2d83a") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_async', 0x8182, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) write$yama_ptrace_scope(r4, &(0x7f00000003c0)='3\x00', 0x2) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2000c95, &(0x7f0000000680)=ANY=[@ANYBLOB="666d61736b3d30303030303030303030303030303030303030373534302c6572726f72733d72656d6f756e742d726f2c616c6c6f775f7574696d653d30303030303030303030303030303030303130303030312c646d61736b3d30303030303030303030303030303030303030303030335d1f7a83fd68ff5a613092972c757466382c7469b1b1498a0b64567588f0db6d655f6f66667365743d3078303030303030303030303030303030372c666d61736b3d30303030303030303030303030303030303030303031332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030362c6e616d65636173653d312c757466382c00e757e314c1297409daa7f7fa1ffc0570bdca8742ce767196e0918d14f3cfff5b316aeca8b3e213988441655f154e3abd4ecef79a20c2cd"], 0xff, 0x1557, &(0x7f0000004a40)="$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") fstat(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0xfdef) fchown(r6, r7, 0xee01) fanotify_mark(r0, 0x455, 0x8000000, r1, 0x0) 5.215829304s ago: executing program 8 (id=1819): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="2c0000001a0001000100000000000000022000000000000000000000080003000100000008000100e0000001", 0x2c, 0x0, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3066}, @map_val={0x18, 0xc9fb544bafcfcf4f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xedf}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x9, &(0x7f0000000280)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3b77}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xff, 0x45, &(0x7f0000000340)=""/69, 0x41000, 0x10, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x3, 0xef}, 0x10, 0xffffffffffffffff, r8, 0x7, &(0x7f0000000700)=[r1, r1], &(0x7f0000000740)=[{0x3, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x5, 0xa}, {0x3, 0x1, 0xd, 0xe}, {0x4, 0x4, 0xc, 0x5}, {0x0, 0x5, 0x7, 0x5}, {0x1, 0x3, 0x1, 0x6}, {0x5, 0x5, 0xd, 0x9}], 0x10, 0x1ff}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$addseals(r1, 0x409, 0xe) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r10, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.319836306s ago: executing program 7 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="340000003f000100010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090042420000"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmsg$alg(r3, 0x0, 0x24044010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bind$inet(r4, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) 3.698571754s ago: executing program 7 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 3.41151285s ago: executing program 6 (id=1822): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xc}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.95665894s ago: executing program 7 (id=1823): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x112, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) listen(r0, 0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e00)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r6, 0x5521) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x1d, @rand_addr=0x64010100, 0x4e23, 0x3, 'lc\x00', 0x9, 0x6, 0x44}, 0x2c) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x1f, 0x6, 0x4, 0x8, 0x5f, 0x1, &(0x7f0000000180)="6bd53fd93522ea775521dc7e0ff2e6151798606931ef8255cbe5bf7892561e25be90bf413582cad83a624043359f97331ef2f5b7aba8db9121029c2f67d254bbb9aaa33329768dd71c145a3c1a9834e9f197d165018e2189dab8e50de7cf10"}) 1.950208041s ago: executing program 3 (id=1824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 247.942321ms ago: executing program 6 (id=1825): ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b', 0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r3, &(0x7f0000000b00), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d32323035315b3232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d3edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a89fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f561737c7aff9", 0x54c, r4) 236.778723ms ago: executing program 3 (id=1826): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, 0x0, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 39.887804ms ago: executing program 7 (id=1827): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x250, "dbf80da99065d4ef1c1700e3b3527e0bd28f71c360e1cd952f614cffbec517e7", 0x2, 0xffff, 0x7, 0x5, 0x5bdb, 0x2, 0x6, 0x5, [0x6, 0x6, 0x6, 0x1]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r5, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010", @ANYRES16=r3, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ea73d19a7409f9533827c03fb325056e40"]) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000080)=""/29) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"}) 0s ago: executing program 8 (id=1828): syz_read_part_table(0x5f1, &(0x7f0000001540)="$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") kernel console output (not intermixed with test programs): 1.179598][ T7719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 642.075095][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.227717][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.299216][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.504091][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.822315][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.893234][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.987949][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.995139][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.097252][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 644.170278][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.193680][ T26] audit: type=1800 audit(1790718100.731:19): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.727" name="no_out_endpoint" dev="configfs" ino=44464 res=0 errno=0 [ 644.249650][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.286249][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.293495][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.305851][ T26] audit: type=1800 audit(1790718100.761:20): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.727" name="subclass" dev="configfs" ino=44465 res=0 errno=0 [ 644.369864][ T7991] loop3: detected capacity change from 0 to 4096 [ 644.410195][ T7991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 644.446302][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 644.553920][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 644.594626][ T26] audit: type=1800 audit(1790718100.761:21): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.727" name="protocol" dev="configfs" ino=44466 res=0 errno=0 [ 644.691504][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 644.780418][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 644.934382][ T26] audit: type=1800 audit(1790718100.781:22): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.727" name="report_desc" dev="configfs" ino=44467 res=0 errno=0 [ 644.956252][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.311699][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.617273][ T7719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.100845][ T8052] loop4: detected capacity change from 0 to 32768 [ 647.108889][ T8052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.739 (8052) [ 647.123053][ T7719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.163147][ T8052] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.174230][ T8052] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 647.183315][ T8052] BTRFS info (device loop4): setting nodatasum [ 647.189761][ T8052] BTRFS info (device loop4): force zlib compression, level 3 [ 647.197414][ T8052] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 647.207544][ T8052] BTRFS info (device loop4): use lzo compression, level 0 [ 647.214881][ T8052] BTRFS info (device loop4): turning on flush-on-commit [ 647.222004][ T8052] BTRFS info (device loop4): enabling auto defrag [ 647.228739][ T8052] BTRFS info (device loop4): max_inline at 4096 [ 647.235319][ T8052] BTRFS info (device loop4): using free space tree [ 647.465622][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 647.597054][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.745388][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 647.773258][ T8053] loop2: detected capacity change from 0 to 4096 [ 647.803044][ T8053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 647.877890][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.889173][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.898056][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.917344][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.936619][ T8052] BTRFS info (device loop4): enabling ssd optimizations [ 649.405023][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 649.837657][ T4270] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.676284][ T8109] loop3: detected capacity change from 0 to 4096 [ 652.735758][ T8109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 652.784568][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 652.885444][ T8121] loop2: detected capacity change from 0 to 4096 [ 652.901887][ T8113] tipc: Enabled bearer , priority 0 [ 652.936461][ T8121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 652.998495][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 653.001253][ T8113] tipc: Resetting bearer [ 653.585797][ T8135] loop0: detected capacity change from 0 to 1024 [ 653.596455][ T8135] ext4: Bad value for 'min_batch_time' [ 654.578352][ T7959] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 655.266391][ T8113] tipc: Disabling bearer [ 655.689543][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.731096][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.871065][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.299903][ T8184] loop3: detected capacity change from 0 to 4096 [ 657.920777][ T8184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 657.980619][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 659.662843][ T8195] loop4: detected capacity change from 0 to 512 [ 659.844510][ T8195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 660.779004][ T8195] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.329651][ T8209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.920689][ T7348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.940968][ T7348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.950534][ T7348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.969369][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.977652][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 661.988282][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.252003][ T8219] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 662.259672][ T8219] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 664.103596][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 664.188533][ T8229] loop3: detected capacity change from 0 to 4096 [ 664.279120][ T8229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 664.354390][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 664.440253][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 664.470875][ T8241] bridge0: port 3(syz_tun) entered disabled state [ 664.862560][ T8241] device syz_tun left promiscuous mode [ 664.873266][ T8241] bridge0: port 3(syz_tun) entered disabled state [ 665.540176][ T8248] loop4: detected capacity change from 0 to 256 [ 665.607934][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 665.694171][ T8248] exfat: Unknown parameter 'zero_size_dir' [ 666.232740][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 668.272950][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 670.275972][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.285482][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.302816][ T8214] device bridge_slave_0 entered promiscuous mode [ 670.353997][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 670.483112][ T8319] loop0: detected capacity change from 0 to 1024 [ 670.490458][ T8319] EXT4-fs: Invalid want_extra_isize 3 [ 670.713069][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.730445][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.425176][ T8214] device bridge_slave_1 entered promiscuous mode [ 671.446387][ T7818] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.028073][ T8326] loop0: detected capacity change from 0 to 4096 [ 672.046576][ T8326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 672.123877][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 674.159754][ T8370] loop3: detected capacity change from 0 to 8192 [ 674.263215][ T8370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 674.289477][ T8370] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 674.329461][ T8370] REISERFS (device loop3): using journaled data mode [ 674.370955][ T8370] reiserfs: using flush barriers [ 674.392592][ T8370] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 674.409454][ T8370] REISERFS (device loop3): checking transaction log (loop3) [ 674.427127][ T8370] REISERFS (device loop3): Using tea hash to sort names [ 674.447539][ T8370] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 674.461730][ T8370] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 674.932669][ T8383] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 674.950124][ T8383] overlayfs: missing 'lowerdir' [ 675.631127][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.785368][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.191426][ T8214] team0: Port device team_slave_0 added [ 676.296591][ T8214] team0: Port device team_slave_1 added [ 678.170280][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.222461][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.552712][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.566920][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.575338][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.472560][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.447616][ T8455] loop3: detected capacity change from 0 to 4096 [ 681.480247][ T8455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 681.518890][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 681.609158][ T4474] device hsr_slave_0 left promiscuous mode [ 681.686082][ T4474] device hsr_slave_1 left promiscuous mode [ 681.732620][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.881585][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.038215][ T4474] device bridge_slave_1 left promiscuous mode [ 682.181679][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.400775][ T4474] device bridge_slave_0 left promiscuous mode [ 682.487873][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.157432][ T8487] netlink: 104 bytes leftover after parsing attributes in process `syz.4.778'. [ 685.714547][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.720957][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.781624][ T8539] loop3: detected capacity change from 0 to 256 [ 685.812992][ T8539] exfat: Unknown parameter 'zero_size_dir' [ 685.970566][ T8457] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 686.378754][ T8542] loop3: detected capacity change from 0 to 2048 [ 686.393504][ T8542] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 689.253263][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 690.229767][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 690.392240][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.523953][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.217272][ T4474] bond0 (unregistering): Released all slaves [ 694.287310][ T8681] No source specified [ 697.653918][ T8214] device hsr_slave_0 entered promiscuous mode [ 698.325610][ T8214] device hsr_slave_1 entered promiscuous mode [ 698.552542][ T8214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.560199][ T8214] Cannot create hsr debugfs directory [ 700.681904][ T8813] sctp: [Deprecated]: syz.2.808 (pid 8813) Use of int in max_burst socket option. [ 700.681904][ T8813] Use struct sctp_assoc_value instead [ 701.462932][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.540736][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.552978][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.561625][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.569259][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 701.576826][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 702.369647][ T8827] loop3: detected capacity change from 0 to 4096 [ 702.438993][ T8827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 702.599578][ T8214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 703.035045][ T8214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 703.230196][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 703.429162][ T8214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 703.632634][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 703.858211][ T8214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 704.384753][ T8818] chnl_net:caif_netlink_parms(): no params data found [ 704.482658][ T8882] loop3: detected capacity change from 0 to 1024 [ 704.490062][ T8882] ext4: Bad value for 'min_batch_time' [ 704.589614][ T8790] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 705.566923][ T8631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.710834][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 706.253787][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.331202][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.356461][ T8818] device bridge_slave_0 entered promiscuous mode [ 707.482643][ T8631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.582200][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.589398][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.611999][ T8818] device bridge_slave_1 entered promiscuous mode [ 707.790818][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 708.762755][ T8631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.822521][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.904041][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.934426][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.214384][ T8631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.855727][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.870805][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 710.032491][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.054321][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 710.080828][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 710.118869][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.138341][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.145585][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.184428][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 710.204800][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.234060][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.241292][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.418495][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 710.801713][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 711.091182][ T8818] team0: Port device team_slave_0 added [ 711.151613][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 711.199014][ T8818] team0: Port device team_slave_1 added [ 711.266332][ T8959] loop4: detected capacity change from 0 to 4096 [ 711.306119][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.335004][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.344529][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.354273][ T8959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 711.375506][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.408776][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 711.426856][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 711.458933][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.490762][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 711.542857][ T8214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.573945][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.603932][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 711.634893][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 714.186367][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.250432][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.177503][ T8818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.191250][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.198269][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.224970][ T8818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.975944][ T8818] device hsr_slave_0 entered promiscuous mode [ 719.612161][ T8818] device hsr_slave_1 entered promiscuous mode [ 720.060928][ T8818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.068807][ T8818] Cannot create hsr debugfs directory [ 720.209276][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 721.775466][ T8631] tipc: Disabling bearer [ 721.791700][ T8631] tipc: Left network mode [ 722.052077][ T9102] loop3: detected capacity change from 0 to 4096 [ 722.092210][ T9102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 722.140341][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 724.791307][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.803543][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.830122][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.888919][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.910192][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.952243][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.826907][ T8818] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 726.989708][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 729.615349][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 729.795161][ T8818] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 729.920290][ T9274] fuse: Unknown parameter '0xffffffffffffffff' [ 730.477491][ T8818] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 731.629440][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 731.778788][ T8818] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 734.259187][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 734.596786][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.948129][ T9392] loop3: detected capacity change from 0 to 4096 [ 735.110282][ T9392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 735.309952][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 735.495589][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 735.592500][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 735.809123][ T9198] chnl_net:caif_netlink_parms(): no params data found [ 735.887525][ T8818] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.020800][ T9406] loop4: detected capacity change from 0 to 4096 [ 737.119393][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.323849][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.566893][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.574137][ T4815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.399431][ T9416] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 738.399431][ T9416] [ 738.413311][ T9416] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 738.426437][ T9416] CIFS: Attempting to mount \\127.0.0.1\share [ 739.129610][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 739.356042][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 741.062044][ T9416] CIFS: VFS: cifs_mount failed w/return code = -112 [ 741.137541][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.144776][ T4815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.341574][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 741.397686][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.429630][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.498939][ T9198] device bridge_slave_0 entered promiscuous mode [ 741.539834][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 741.578348][ T8631] device hsr_slave_0 left promiscuous mode [ 742.533875][ T9431] Bluetooth: ISO socket layer initialized [ 743.878536][ T8631] device hsr_slave_1 left promiscuous mode [ 744.580178][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.614627][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.157947][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.208628][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.244064][ T9439] loop4: detected capacity change from 0 to 128 [ 745.324337][ T8631] device veth1_macvtap left promiscuous mode [ 745.360168][ T8631] device veth0_macvtap left promiscuous mode [ 745.366441][ T8631] device veth0_vlan left promiscuous mode [ 747.153953][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.165208][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.981646][ T26] audit: type=1800 audit(1790718205.537:23): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.856" name="power" dev="configfs" ino=47446 res=0 errno=0 [ 749.196079][ T9467] loop3: detected capacity change from 0 to 4096 [ 749.370508][ T9467] NILFS (loop3): invalid segment: Checksum error in segment payload [ 749.388818][ T9467] NILFS (loop3): trying rollback from an earlier position [ 749.437120][ T9467] NILFS (loop3): recovery complete [ 749.515414][ T9471] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 751.450400][ T9479] loop4: detected capacity change from 0 to 32768 [ 752.104075][ T9479] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 752.527628][ T4270] ocfs2: Unmounting device (7,4) on (node local) [ 753.111342][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 753.666188][ T9488] loop3: detected capacity change from 0 to 16 [ 753.673753][ T9488] erofs: (device loop3): mounted with root inode @ nid 36. [ 753.683517][ T9488] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 753.692884][ T9488] syz.3.862: attempt to access beyond end of device [ 753.692884][ T9488] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 753.720010][ T9488] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 753.729190][ T9488] syz.3.862: attempt to access beyond end of device [ 753.729190][ T9488] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 753.743399][ T9488] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 753.780457][ T26] audit: type=1800 audit(1790718210.307:24): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.862" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 753.966928][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 754.182027][ T9495] loop4: detected capacity change from 0 to 8 [ 754.819608][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.336532][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.681114][ T9504] ubi0: attaching mtd0 [ 755.695479][ T9504] ubi0: scanning is finished [ 755.700514][ T9504] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 756.307831][ T9504] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 756.583987][ T8631] bond0 (unregistering): Released all slaves [ 756.641098][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.648671][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.656786][ T9198] device bridge_slave_1 entered promiscuous mode [ 756.664594][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 756.674611][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 756.699643][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 756.708947][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 756.718302][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 756.726990][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.738898][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 756.798160][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 756.806757][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 756.874368][ T8818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.892582][ T8818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 756.946617][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.975383][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 757.022034][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 757.121020][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.496429][ T9198] team0: Port device team_slave_0 added [ 757.520982][ T9509] loop3: detected capacity change from 0 to 4096 [ 757.540792][ T9198] team0: Port device team_slave_1 added [ 757.589300][ T9509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 757.614730][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.630972][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.809669][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.919412][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 758.975316][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.005131][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.108104][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.173139][ T9198] device hsr_slave_0 entered promiscuous mode [ 760.203370][ T9198] device hsr_slave_1 entered promiscuous mode [ 760.711574][ T9536] loop4: detected capacity change from 0 to 256 [ 760.730334][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 760.859813][ T9536] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005) [ 760.869136][ T9536] exFAT-fs (loop4): failed to load upcase table [ 760.875463][ T9536] exFAT-fs (loop4): failed to recognize exfat type [ 762.208840][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.220166][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.229362][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.241005][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.248783][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.256088][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 765.390054][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 766.941569][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 768.559881][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 771.083962][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 771.175779][ T9542] chnl_net:caif_netlink_parms(): no params data found [ 773.148723][ T7348] Bluetooth: hci3: command 0x0419 tx timeout [ 773.408709][ T9596] overlayfs: failed to clone upperpath [ 773.516974][ T9597] fuse: Bad value for 'fd' [ 774.400225][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.457807][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.466348][ T9542] device bridge_slave_0 entered promiscuous mode [ 774.699598][ T9610] kAFS: unparsable volume name [ 775.276296][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.390535][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.418223][ T9542] device bridge_slave_1 entered promiscuous mode [ 777.079274][ T9542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.863006][ T9542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.525001][ T9198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.569826][ T8631] device hsr_slave_0 left promiscuous mode [ 779.603541][ T8631] device hsr_slave_1 left promiscuous mode [ 779.631532][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.663635][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.688327][ T8631] device bridge_slave_1 left promiscuous mode [ 779.713054][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.725280][ T8631] device bridge_slave_0 left promiscuous mode [ 779.732297][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.325519][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 780.428899][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 780.499805][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.773771][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.630481][ T9647] loop3: detected capacity change from 0 to 32768 [ 781.721467][ T9647] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 782.170462][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 782.709852][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 782.721500][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 782.730592][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 782.739007][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 782.754717][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 782.767269][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 782.890048][ T8631] bond0 (unregistering): Released all slaves [ 782.896892][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 783.019365][ T9542] team0: Port device team_slave_0 added [ 783.043326][ T9198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 783.092824][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 783.095345][ T9542] team0: Port device team_slave_1 added [ 783.110003][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.155568][ T9542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.204099][ T9542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.509625][ T9542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.858868][ T9542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.865904][ T9542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.063514][ T9542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.175232][ T9670] device syzkaller0 left promiscuous mode [ 784.384812][ T9542] device hsr_slave_0 entered promiscuous mode [ 784.436796][ T9542] device hsr_slave_1 entered promiscuous mode [ 784.504010][ T9542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.534482][ T9542] Cannot create hsr debugfs directory [ 784.898415][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 785.167533][ T14] usbhid 5-1:1.0: can't add hid device: -71 [ 785.173605][ T14] usbhid: probe of 5-1:1.0 failed with error -71 [ 785.257513][ T14] usb 5-1: USB disconnect, device number 3 [ 786.072332][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 786.197061][ T26] audit: type=1326 audit(1790718242.759:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.2.900" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffada79e159 code=0x0 [ 787.777555][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 789.405298][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 789.786496][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 791.183244][ T9764] loop3: detected capacity change from 0 to 4096 [ 791.225421][ T9764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 791.269169][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 791.432754][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.459002][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.490235][ T9659] device bridge_slave_0 entered promiscuous mode [ 792.975896][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 793.060037][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.115282][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.147653][ T9659] device bridge_slave_1 entered promiscuous mode [ 793.442068][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.267655][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.594624][ T9659] team0: Port device team_slave_0 added [ 794.749445][ T9659] team0: Port device team_slave_1 added [ 796.402769][ T9542] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 796.462362][ T9542] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 796.516400][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.524121][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.657960][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.670777][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.677832][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.714437][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.992204][ T9542] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 798.123635][ T9542] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 798.412406][ T9659] device hsr_slave_0 entered promiscuous mode [ 798.452857][ T9659] device hsr_slave_1 entered promiscuous mode [ 798.477380][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.485022][ T9659] Cannot create hsr debugfs directory [ 798.714053][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.732729][ T9807] fuse: Bad value for 'fd' [ 798.788740][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.806715][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.849966][ T9542] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.954038][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.966994][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 799.006177][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.013358][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.026432][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.052955][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.100794][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.164688][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.171888][ T4815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.426451][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 801.603952][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 801.656651][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 801.786724][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.004021][ T9880] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 805.929823][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 805.953238][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 805.996032][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 806.018759][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 806.067045][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.102393][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 806.156250][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.323873][ T9894] FAULT_INJECTION: forcing a failure. [ 806.323873][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 806.336736][ T9894] CPU: 1 PID: 9894 Comm: syz.4.920 Not tainted syzkaller #0 [ 806.344084][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 806.354194][ T9894] Call Trace: [ 806.357521][ T9894] [ 806.360493][ T9894] dump_stack_lvl+0x188/0x24e [ 806.365236][ T9894] ? show_regs_print_info+0x12/0x12 [ 806.370484][ T9894] ? load_image+0x410/0x410 [ 806.375042][ T9894] ? __lock_acquire+0x7c40/0x7c40 [ 806.380121][ T9894] ? lock_chain_count+0x20/0x20 [ 806.385030][ T9894] should_fail_ex+0x390/0x4c0 [ 806.389775][ T9894] should_failslab+0x5/0x20 [ 806.394330][ T9894] slab_pre_alloc_hook+0x59/0x300 [ 806.399450][ T9894] kmem_cache_alloc_lru+0x49/0x2e0 [ 806.404611][ T9894] ? sock_alloc_inode+0x24/0xc0 [ 806.409516][ T9894] sock_alloc_inode+0x24/0xc0 [ 806.414257][ T9894] ? sockfs_init_fs_context+0xa0/0xa0 [ 806.419687][ T9894] new_inode_pseudo+0x5f/0x1c0 [ 806.424507][ T9894] __sock_create+0x129/0x940 [ 806.429162][ T9894] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 806.435222][ T9894] __sys_socket+0xc4/0x190 [ 806.439701][ T9894] __x64_sys_socket+0x76/0x80 [ 806.444448][ T9894] do_syscall_64+0x4c/0xa0 [ 806.448951][ T9894] ? clear_bhb_loop+0x60/0xb0 [ 806.453673][ T9894] ? clear_bhb_loop+0x60/0xb0 [ 806.458407][ T9894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.464359][ T9894] RIP: 0033:0x7f0c8419e159 [ 806.468829][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.488503][ T9894] RSP: 002b:00007f0c8507f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 806.496994][ T9894] RAX: ffffffffffffffda RBX: 00007f0c84426090 RCX: 00007f0c8419e159 [ 806.505014][ T9894] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 806.513040][ T9894] RBP: 00007f0c8423506b R08: 0000000000000000 R09: 0000000000000000 [ 806.521069][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.529096][ T9894] R13: 00007f0c84426128 R14: 00007f0c84426090 R15: 00007fff0bbf6f68 [ 806.537140][ T9894] [ 806.540710][ T9894] socket: no more sockets [ 808.607597][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.614774][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.127902][ T8631] device hsr_slave_0 left promiscuous mode [ 809.195385][ T8631] device hsr_slave_1 left promiscuous mode [ 809.206057][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.225763][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.240345][ T8631] device bridge_slave_1 left promiscuous mode [ 809.254814][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.284060][ T8631] device bridge_slave_0 left promiscuous mode [ 809.291791][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.330777][ T8631] device hsr_slave_0 left promiscuous mode [ 809.339862][ T8631] device hsr_slave_1 left promiscuous mode [ 809.354188][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.370724][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.386947][ T8631] device bridge_slave_1 left promiscuous mode [ 809.401192][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.419844][ T8631] device bridge_slave_0 left promiscuous mode [ 809.428116][ T9915] netlink: 228 bytes leftover after parsing attributes in process `syz.4.921'. [ 809.439342][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.800970][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 811.859632][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 811.901278][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.943471][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.100757][ T8631] bond0 (unregistering): Released all slaves [ 812.591469][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 813.126430][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 813.405961][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.497135][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.999310][ T8631] bond0 (unregistering): Released all slaves [ 815.239981][ T9932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.246990][ T9932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 815.280638][ T9659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 815.341959][ T9932] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 815.381858][ T9659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 815.395283][ T9932] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 815.404328][ T9659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 815.411908][ T9932] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 815.643928][ T9659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 815.657080][ T9932] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 815.986100][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.395101][ T9966] loop3: detected capacity change from 0 to 8192 [ 816.405826][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 816.873778][ T9966] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 817.244641][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 817.394690][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 818.134526][ T4282] Bluetooth: hci5: command 0x0c1a tx timeout [ 818.392950][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.868099][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 818.892402][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 818.906653][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.913865][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.208055][ T7348] Bluetooth: hci3: command 0x0406 tx timeout [ 820.208066][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 820.284896][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 820.366906][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.297391][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.304614][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.378726][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 821.389492][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 821.398765][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 821.410826][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 821.420347][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 821.430118][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 821.439795][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 821.450094][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 821.480343][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.517381][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 821.548456][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.562038][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 821.606355][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 821.636783][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.879497][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 824.894323][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 824.908390][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 824.921033][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 824.930769][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 824.940909][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.289821][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.323768][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 825.340133][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 825.627979][T10015] kAFS: unparsable volume name [ 826.309219][T10020] netlink: 228 bytes leftover after parsing attributes in process `syz.2.944'. [ 826.439244][T10005] chnl_net:caif_netlink_parms(): no params data found [ 826.757881][T10027] loop3: detected capacity change from 0 to 2048 [ 826.852224][T10028] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 826.984535][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 827.788582][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.828816][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.879740][T10005] device bridge_slave_0 entered promiscuous mode [ 827.962859][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.977163][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.014916][T10005] device bridge_slave_1 entered promiscuous mode [ 829.159985][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 831.096072][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.169219][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 831.185526][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 831.233613][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 831.416292][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.561079][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 831.605802][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 831.652817][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 831.683174][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 831.904566][ T9659] device veth0_vlan entered promiscuous mode [ 831.923106][T10005] team0: Port device team_slave_0 added [ 832.840356][T10005] team0: Port device team_slave_1 added [ 833.032493][ T9659] device veth1_vlan entered promiscuous mode [ 833.178547][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.193697][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.273873][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.303865][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 833.320360][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.343040][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.400251][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.816304][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 834.844902][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 834.887362][ T9659] device veth0_macvtap entered promiscuous mode [ 834.965765][ T9659] device veth1_macvtap entered promiscuous mode [ 834.989121][T10005] device hsr_slave_0 entered promiscuous mode [ 834.999108][T10165] netlink: 228 bytes leftover after parsing attributes in process `syz.3.956'. [ 835.014517][T10005] device hsr_slave_1 entered promiscuous mode [ 835.157734][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.179650][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.200230][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.232968][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.263474][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.290153][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.314894][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.335736][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.354582][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.373994][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.425553][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.435278][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.456931][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.483536][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.503546][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.588458][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.687272][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.763719][ T7222] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 835.800322][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.918385][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.031987][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.197219][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.543435][ T7222] usb 4-1: Using ep0 maxpacket: 16 [ 836.577896][ T7222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.614907][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 836.643487][ T7222] usb 4-1: config 0 has no interfaces? [ 836.649061][ T7222] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 836.714110][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 836.903397][ T7222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.949382][ T9659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.068674][ T7222] usb 4-1: config 0 descriptor?? [ 837.119697][ T9659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.209946][ T9659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.284421][ T9659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.541064][T10214] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 837.661474][ T4367] usb 4-1: USB disconnect, device number 6 [ 837.929439][T10208] loop4: detected capacity change from 0 to 32768 [ 837.951651][T10208] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.959 (10208) [ 838.009866][T10208] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 838.048104][T10208] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 838.075316][T10208] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 838.090362][ T8638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.098208][T10208] BTRFS info (device loop4): use zstd compression, level 3 [ 838.098296][T10208] BTRFS info (device loop4): force clearing of disk cache [ 838.098319][T10208] BTRFS info (device loop4): enabling disk space caching [ 838.098337][T10208] BTRFS info (device loop4): disk space caching is enabled [ 838.202592][ T8638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.302447][T10208] BTRFS info (device loop4): enabling ssd optimizations [ 838.330549][T10208] BTRFS info (device loop4): rebuilding free space tree [ 838.347098][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 838.533793][ T4793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.133249][ T4793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.171150][T10208] BTRFS info (device loop4): disabling free space tree [ 840.184792][T10208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 840.206842][T10208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 840.257862][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 840.433762][ T4270] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 840.497642][ T8631] device hsr_slave_0 left promiscuous mode [ 840.581649][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.620'. [ 840.764537][T10259] Cannot find add_set index 0 as target [ 840.931422][ T8631] device hsr_slave_1 left promiscuous mode [ 840.942959][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.962325][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.981545][ T8631] device bridge_slave_1 left promiscuous mode [ 840.991045][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.018247][ T8631] device bridge_slave_0 left promiscuous mode [ 841.040296][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.242723][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 845.725057][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 846.904092][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.829849][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.446277][ T8631] bond0 (unregistering): Released all slaves [ 849.502035][T10299] ceph: No mds server is up or the cluster is laggy [ 849.751758][T10005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 849.825755][T10005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 849.856185][T10005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 849.964952][T10005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 851.815667][T10005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.883579][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.893979][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 853.478699][T10005] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.575478][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 853.624029][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.663151][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.670379][ T8783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.814459][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.843493][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.903630][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.952610][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.959855][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.037476][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 854.100277][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 854.132764][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 854.173088][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 854.197037][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 854.235779][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 855.333812][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 855.353290][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 855.366630][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 855.375658][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 855.384807][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 855.397338][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 857.038661][T10343] input: syz1 as /devices/virtual/input/input10 [ 858.190388][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 858.199535][T10350] loop6: detected capacity change from 0 to 32768 [ 858.243409][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 858.264102][T10350] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.982 (10350) [ 858.285551][T10350] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 858.295843][T10350] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 858.304655][T10350] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 858.314254][T10350] BTRFS info (device loop6): use zstd compression, level 3 [ 858.321510][T10350] BTRFS info (device loop6): force clearing of disk cache [ 858.325183][T10005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.328791][T10350] BTRFS info (device loop6): enabling disk space caching [ 858.342718][T10350] BTRFS info (device loop6): disk space caching is enabled [ 858.602384][ T26] audit: type=1800 audit(1790718315.143:26): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.987" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 858.884027][T10350] BTRFS info (device loop6): enabling ssd optimizations [ 858.894214][T10350] BTRFS info (device loop6): rebuilding free space tree [ 858.950563][T10350] BTRFS info (device loop6): disabling free space tree [ 858.958436][T10350] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 858.968270][T10350] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 860.855529][ T9659] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 861.959274][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.983076][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 862.250517][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 862.276291][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 863.936916][T10005] device veth0_vlan entered promiscuous mode [ 864.014184][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 864.185940][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.459874][T10005] device veth1_vlan entered promiscuous mode [ 865.041703][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 865.053765][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 865.100679][T10005] device veth0_macvtap entered promiscuous mode [ 865.140024][ T26] audit: type=1326 audit(1790718321.693:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 865.149804][T10005] device veth1_macvtap entered promiscuous mode [ 865.206499][ T26] audit: type=1326 audit(1790718321.693:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 866.406213][ T26] audit: type=1326 audit(1790718321.723:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 866.438449][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.867243][ T26] audit: type=1326 audit(1790718321.723:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 866.891861][ T26] audit: type=1326 audit(1790718321.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 866.930169][ T26] audit: type=1326 audit(1790718321.723:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 866.982201][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.017204][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.055950][ T26] audit: type=1326 audit(1790718321.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 867.079933][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.098260][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.112515][ T26] audit: type=1326 audit(1790718321.723:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 867.137084][ T26] audit: type=1326 audit(1790718321.723:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 867.166627][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.235164][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.263131][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.279130][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.291371][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.404823][ T26] audit: type=1326 audit(1790718321.723:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489099e159 code=0x7ffc0000 [ 867.486731][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.594846][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.710817][T10005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.837776][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.204846][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.235585][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.251500][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.272266][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.298422][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.456555][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.484926][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.502489][T10446] comedi comedi1: comedi_bond: 0:2 0:3 attached, 16 channels from 2 devices [ 868.533868][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.575829][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.658220][T10005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.727834][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.763742][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.832087][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 868.919440][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 868.928153][T10438] ALSA: mixer_oss: invalid OSS volume '' [ 868.934196][T10438] ALSA: mixer_oss: invalid OSS volume '9[&¸?ļ©çx;ëBµb’[rSíH€Ùsréü' [ 868.942743][T10438] ALSA: mixer_oss: invalid OSS volume 'ä`èôí~'5{Š&½óá]cÒ}¢ {xã.eÙÍ8' [ 868.951280][T10438] ALSA: mixer_oss: invalid OSS volume 'Ç×j'é|Ù]õ¢Ìüªjp™i?®.¾>ÆÌ¡¶ÑÇ|Ê' [ 868.960171][T10438] ALSA: mixer_oss: invalid OSS volume 'º¶\SO\Å ª¯,4ÃãQx¸' [ 868.968672][T10438] ALSA: mixer_oss: invalid OSS volume '‡£Q‚µÎq«*hÌ0;¤úbZ1#Š<3 ŽP' [ 868.977002][T10438] ALSA: mixer_oss: invalid OSS volume 'Séë Êߌ_ãq“' [ 868.983992][T10438] ALSA: mixer_oss: invalid OSS volume ')Ù:{ b‘“Ÿ€vá¨i¢ûjpÈÜè"g_6´fÝ¢' [ 868.992723][T10438] ALSA: mixer_oss: invalid OSS volume '“áXë­r…ÅÞ]X[*ˆÍÛ‡£Ø8èôtf;v6' [ 869.001252][T10438] ALSA: mixer_oss: invalid OSS volume '8L&Äwr‹‰ËŸ' [ 869.008184][T10438] ALSA: mixer_oss: invalid OSS volume 'zap1oRR|/`²‚' [ 869.015239][T10438] ALSA: mixer_oss: invalid OSS volume 'šÏ_Õêy4"·PI¢]ÖþYÄye3O|K7qa' [ 869.023899][T10438] ALSA: mixer_oss: invalid OSS volume 'º\QÀa2`„ íÊg34ä%£a¶üãäêFÊæaÉÍ v' [ 869.032492][T10438] ALSA: mixer_oss: invalid OSS volume 'Añvb4¢x‡•féØÆ[k'3R¤g' [ 869.040282][T10438] ALSA: mixer_oss: invalid OSS volume 'ÜuÐneßB†œì?È' [ 869.047571][T10438] ALSA: mixer_oss: invalid OSS volume 'Yî*Î)ëi-íÅ?•9jþ(/±1G:á³EêCWw­Ïì' [ 869.090536][T10005] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.133574][T10005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.024923][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.031345][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.127029][T10005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.138453][T10005] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.332274][ T6836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.340248][ T6836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.478986][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 873.516140][ T9196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.524419][ T9196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.534694][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 873.723301][T10484] overlayfs: failed to clone upperpath [ 873.798452][T10484] overlayfs: missing 'lowerdir' [ 874.233175][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 874.233194][ T26] audit: type=1800 audit(1790718330.784:44): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.807" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 874.259291][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.740489][T10511] nvmet_tcp: malformed ip/port passed: 127.0.0.1: [ 878.193548][T10526] sctp: [Deprecated]: syz.3.1015 (pid 10526) Use of int in max_burst socket option deprecated. [ 878.193548][T10526] Use struct sctp_assoc_value instead [ 878.289546][T10528] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1015'. [ 878.342116][T10528] unsupported nlmsg_type 40 [ 878.701237][ T7577] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 878.901349][ T7577] usb 4-1: Using ep0 maxpacket: 32 [ 878.949547][ T7577] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.019720][ T7577] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 879.074589][ T7577] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 879.103126][ T7577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.167744][ T7577] usb 4-1: config 0 descriptor?? [ 882.140030][T10267] usb 4-1: USB disconnect, device number 7 [ 887.971633][ T26] audit: type=1800 audit(1790718344.535:45): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1029" name="memory_backed" dev="configfs" ino=50898 res=0 errno=0 [ 888.024287][ T26] audit: type=1800 audit(1790718344.555:46): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1029" name="zoned" dev="configfs" ino=50899 res=0 errno=0 [ 889.702137][ T26] audit: type=1800 audit(1790718345.425:47): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1021" name="product" dev="configfs" ino=51875 res=0 errno=0 [ 892.666058][T10621] block device autoloading is deprecated and will be removed. [ 893.046418][T10622] random: crng reseeded on system resumption [ 895.547959][ T26] audit: type=1326 audit(1790718351.855:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10637 comm="syz.2.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffada79e159 code=0x0 [ 898.595697][T10664] loop3: detected capacity change from 0 to 64 [ 903.364935][T10698] proc: Unknown parameter 'trans' [ 904.037111][T10698] device wlan0 entered promiscuous mode [ 904.046778][T10698] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 905.989016][ T26] audit: type=1326 audit(1790718361.646:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.6.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12abd9e159 code=0x0 [ 908.019769][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 910.818787][T10752] loop4: detected capacity change from 0 to 2048 [ 910.978550][T10752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 911.026989][T10752] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.210577][T10760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.142797][T10756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 913.219136][ T4282] Bluetooth: hci2: command 0x0405 tx timeout [ 915.277992][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 915.388358][T10771] proc: Unknown parameter 'trans' [ 915.395627][T10771] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 916.532715][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 917.855033][T10782] syz.3.1065 (10782) used greatest stack depth: 16864 bytes left [ 919.456179][T10808] binder: 10807:10808 ioctl 40046205 0 returned -22 [ 921.716059][ T26] audit: type=1326 audit(1790718378.277:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.6.1071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12abd9e159 code=0x0 [ 921.818091][T10811] loop6: detected capacity change from 0 to 512 [ 921.911337][T10811] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 923.045769][T10830] device wlan0 entered promiscuous mode [ 923.058876][T10830] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 923.287606][ T9659] EXT4-fs (loop6): unmounting filesystem. [ 923.309599][T10835] loop4: detected capacity change from 0 to 8 [ 923.381483][T10835] SQUASHFS error: zlib decompression failed, data probably corrupt [ 923.446889][T10835] SQUASHFS error: Failed to read block 0x9b: -5 [ 923.488778][T10835] SQUASHFS error: Unable to read metadata cache entry [99] [ 923.496121][T10835] SQUASHFS error: Unable to read inode 0x127 [ 923.659313][T10835] loop4: detected capacity change from 0 to 4096 [ 924.402673][T10847] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.037777][T10906] overlayfs: missing 'lowerdir' [ 931.471872][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.479029][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.383963][T10946] overlayfs: missing 'lowerdir' [ 933.242502][T10948] device syzkaller0 entered promiscuous mode [ 933.755873][T10966] netlink: 'syz.4.1099': attribute type 4 has an invalid length. [ 937.572479][T11020] overlayfs: missing 'lowerdir' [ 941.831681][T11070] loop4: detected capacity change from 0 to 2048 [ 942.017786][T11070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 942.356287][T11088] loop6: detected capacity change from 0 to 256 [ 942.371194][T11088] FAT-fs (loop6): Unrecognized mount option "hortname=mixed" or missing value [ 942.640905][T11091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 943.212094][T10953] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 943.288715][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 943.956435][T11102] overlayfs: missing 'lowerdir' [ 947.006371][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.994467][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 952.555232][T11187] loop3: detected capacity change from 0 to 1024 [ 952.935367][T11197] loop6: detected capacity change from 0 to 8 [ 953.637823][ T26] audit: type=1800 audit(1790718410.208:51): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1151" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 954.800624][T11209] using random self ethernet address [ 954.898625][T11209] using random host ethernet address [ 955.347914][T11224] loop6: detected capacity change from 0 to 8 [ 955.415169][T11224] SQUASHFS error: zlib decompression failed, data probably corrupt [ 955.446825][T11224] SQUASHFS error: Failed to read block 0x9b: -5 [ 955.463444][T11224] SQUASHFS error: Unable to read metadata cache entry [99] [ 955.483369][T11224] SQUASHFS error: Unable to read inode 0x127 [ 955.803955][T11230] xt_hashlimit: size too large, truncated to 1048576 [ 957.380648][T11199] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 957.585647][T11233] loop6: detected capacity change from 0 to 4096 [ 957.680160][T11237] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 965.500788][T11318] tipc: Enabling of bearer rejected, failed to enable media [ 969.495034][T11347] xt_hashlimit: size too large, truncated to 1048576 [ 969.501880][T11347] xt_hashlimit: max too large, truncated to 1048576 [ 970.769402][T11362] netlink: 'syz.6.1193': attribute type 4 has an invalid length. [ 975.136338][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 975.352744][T11425] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 976.674521][T11435] loop6: detected capacity change from 0 to 4096 [ 976.755245][T11435] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 976.927165][T11445] loop4: detected capacity change from 0 to 2048 [ 978.223040][T11446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 978.783429][ T9659] EXT4-fs (loop6): unmounting filesystem. [ 981.745438][T11459] input: syz0 as /devices/virtual/input/input11 [ 986.581027][T11555] loop3: detected capacity change from 0 to 1024 [ 986.635065][T11555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 987.658205][T11573] loop4: detected capacity change from 0 to 256 [ 988.343348][T11573] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 988.386871][ T26] audit: type=1800 audit(1790718444.940:52): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1205" name="file1" dev="loop4" ino=1048708 res=0 errno=0 [ 988.407942][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.896930][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.903371][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.123239][T11588] syz.3.1207 (11588): drop_caches: 2 [ 995.284495][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 995.467064][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 995.470233][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 995.470271][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 995.470296][ T14] usb 4-1: Product: syz [ 995.470313][ T14] usb 4-1: Manufacturer: syz [ 995.470329][ T14] usb 4-1: SerialNumber: syz [ 995.732555][ T14] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 997.914869][T11725] loop6: detected capacity change from 0 to 4096 [ 997.987768][T11725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 998.032041][ T9659] EXT4-fs (loop6): unmounting filesystem. [ 998.188875][ T14] usb 4-1: USB disconnect, device number 8 [ 998.227263][ T14] usblp1: removed [ 999.517702][T11738] Attempt to restore checkpoint with obsolete wellknown handles [ 1003.296056][T11793] loop6: detected capacity change from 0 to 2048 [ 1003.731009][T11794] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.295764][T11798] device syzkaller0 entered promiscuous mode [ 1005.469889][T11816] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.233761][T11833] loop6: detected capacity change from 0 to 4096 [ 1008.570063][T11834] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1009.344537][T11839] loop4: detected capacity change from 0 to 4096 [ 1009.395617][T11839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.518519][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1011.928507][T11888] tipc: Enabling of bearer rejected, already enabled [ 1018.306706][T11963] loop4: detected capacity change from 0 to 4096 [ 1018.385733][T11963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1018.542955][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1018.993960][T11973] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1019.196636][T11972] MPTCP: kernel_bind error, err=-99 [ 1021.286054][T12002] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 1023.214941][T12011] loop4: detected capacity change from 0 to 4096 [ 1023.270490][T12011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1023.348389][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1025.670472][T12050] loop3: detected capacity change from 0 to 4096 [ 1025.709212][T12050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1025.863811][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1026.197940][T12055] mmap: syz.3.1271 (12055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1031.023746][T12080] loop3: detected capacity change from 0 to 4096 [ 1031.107035][T12080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1031.564395][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1037.225164][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1287'. [ 1037.246856][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 1037.612167][ T4316] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1037.911462][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 1038.094349][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1038.293524][ T4316] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1039.569968][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 1039.588377][ T4316] usb 5-1: Product: syz [ 1039.597242][ T4316] usb 5-1: Manufacturer: syz [ 1039.606582][ T4316] usb 5-1: SerialNumber: syz [ 1039.632814][ T4316] usb 5-1: config 0 descriptor?? [ 1039.754073][ T4316] usb 5-1: can't set config #0, error -71 [ 1039.838639][ T4316] usb 5-1: USB disconnect, device number 4 [ 1039.849581][T12184] loop6: detected capacity change from 0 to 512 [ 1040.836507][T12185] tipc: Enabling of bearer rejected, already enabled [ 1040.859762][T12184] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1285: missing EA_INODE flag [ 1041.017638][T12184] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1285: error while reading EA inode 2 err=-117 [ 1041.162975][T12184] EXT4-fs (loop6): 1 orphan inode deleted [ 1041.181664][T12184] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1042.869822][ T9659] EXT4-fs (loop6): unmounting filesystem. [ 1043.001985][T12215] loop3: detected capacity change from 0 to 4096 [ 1043.077945][T12215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1043.128578][T12210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1043.164256][T12210] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1043.656444][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1047.006492][T12242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 1047.019437][T12242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 1047.126121][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 1050.771848][T12296] tipc: Enabling of bearer rejected, failed to enable media [ 1055.366453][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.376267][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.615030][T12368] tipc: Enabling of bearer rejected, failed to enable media [ 1058.314667][T10267] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1059.353963][T10267] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1059.383315][T10267] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1059.411679][T10267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1059.448056][T10267] usb 7-1: Product: syz [ 1059.460942][T10267] usb 7-1: Manufacturer: syz [ 1059.465621][T10267] usb 7-1: SerialNumber: syz [ 1060.593377][T10267] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1061.082546][T12426] ip_tables: iptables: counters copy to user failed while replacing table [ 1061.855092][ T5219] usb 7-1: USB disconnect, device number 2 [ 1061.856995][ T5219] usblp1: removed [ 1070.640347][ T26] audit: type=1326 audit(1790718527.035:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12506 comm="syz.2.1344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffada79e159 code=0x0 [ 1071.301969][T12516] device syzkaller0 entered promiscuous mode [ 1071.339790][T12516] tipc: Started in network mode [ 1071.356372][T12516] tipc: Node identity 469390642786, cluster identity 4711 [ 1071.383557][T12516] tipc: Enabled bearer , priority 0 [ 1071.470714][T12515] tipc: Resetting bearer [ 1071.614889][T12515] tipc: Disabling bearer [ 1072.958899][T12527] loop6: detected capacity change from 0 to 4096 [ 1072.968704][T12527] ntfs3: Unknown parameter '1' [ 1076.626448][T12558] binder: 12548:12558 ioctl c0306201 0 returned -14 [ 1078.641487][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'. [ 1078.792854][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1356'. [ 1078.932082][T12577] device syzkaller0 entered promiscuous mode [ 1079.044912][T12577] tipc: Enabled bearer , priority 0 [ 1079.077894][T12576] tipc: Resetting bearer [ 1079.194850][T12572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1356'. [ 1079.239296][T12576] tipc: Disabling bearer [ 1079.655450][T12595] ip_tables: iptables: counters copy to user failed while replacing table [ 1079.990025][T10267] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1080.248919][T10267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.430762][T10267] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1080.493861][T10267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.534387][T10267] usb 7-1: Product: syz [ 1080.538638][T10267] usb 7-1: Manufacturer: syz [ 1080.554867][T10267] usb 7-1: SerialNumber: syz [ 1080.786604][T10267] kalmia: probe of 7-1:1.0 failed with error -22 [ 1081.823830][T12616] futex_wake_op: syz.2.1358 tries to shift op by 144; fix this program [ 1082.777530][ T7222] usb 7-1: USB disconnect, device number 3 [ 1084.319110][ T26] audit: type=1800 audit(1790718540.886:54): pid=12618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1367" name="id" dev="configfs" ino=56329 res=0 errno=0 [ 1085.626636][ T26] audit: type=1326 audit(1790718542.196:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.7.1374" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b7c59e159 code=0x0 [ 1087.453378][T12667] device syzkaller0 entered promiscuous mode [ 1087.502948][T12667] tipc: Enabled bearer , priority 0 [ 1091.473911][T12692] ip_tables: iptables: counters copy to user failed while replacing table [ 1097.134448][T12727] tipc: Enabling of bearer rejected, already enabled [ 1100.203870][T12752] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.399230][T10267] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1106.959939][T10267] usb 4-1: device descriptor read/all, error -71 [ 1107.889599][T10267] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1108.988239][T10267] usb 4-1: Using ep0 maxpacket: 8 [ 1109.003131][T10267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1109.034163][T10267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.063511][T10267] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1110.378951][T10267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.593658][T10267] usb 4-1: can't set config #1, error -71 [ 1110.629176][T10267] usb 4-1: USB disconnect, device number 10 [ 1113.417096][T12840] ip_tables: iptables: counters copy to user failed while replacing table [ 1115.771091][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.777466][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.175557][T12848] kAFS: unable to lookup cell 'Þ({^ú@' [ 1116.277172][T12877] tmpfs: Unknown parameter 'usrquota' [ 1116.314784][T12877] netem: change failed [ 1121.099456][T12904] ip_tables: iptables: counters copy to user failed while replacing table [ 1121.631712][T12912] input: syz0 as /devices/virtual/input/input12 [ 1125.071578][T12948] futex_wake_op: syz.2.1439 tries to shift op by 144; fix this program [ 1129.524705][T12977] loop3: detected capacity change from 0 to 4096 [ 1129.721757][T12977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1129.786095][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1136.329921][T13025] tipc: Enabling of bearer rejected, already enabled [ 1139.001927][T13060] overlayfs: failed to clone upperpath [ 1143.036386][ T14] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1143.226211][ T14] usb 5-1: device descriptor read/64, error -71 [ 1143.476711][T13102] tipc: Enabling of bearer rejected, failed to enable media [ 1143.516387][ T14] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1143.696113][ T14] usb 5-1: device descriptor read/64, error -71 [ 1143.826344][ T14] usb usb5-port1: attempt power cycle [ 1144.256891][ T14] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1144.327115][ T14] usb 5-1: device descriptor read/8, error -71 [ 1147.561118][T13140] loop4: detected capacity change from 0 to 1024 [ 1149.662670][T13155] tipc: Enabling of bearer rejected, failed to enable media [ 1150.374110][T13161] tipc: Enabling of bearer rejected, already enabled [ 1151.745804][T13174] SET target dimension over the limit! [ 1152.581582][T13181] loop3: detected capacity change from 0 to 64 [ 1153.899851][ T4278] hfs: node 4:3 still has 1 user(s)! [ 1154.389740][T13210] futex_wake_op: syz.7.1496 tries to shift op by 144; fix this program [ 1154.470932][T13205] loop3: detected capacity change from 0 to 256 [ 1154.758458][T13205] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1155.344840][T13205] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1155.856467][T13216] Cannot find add_set index 0 as target [ 1156.217580][ T26] audit: type=1804 audit(1790718612.790:56): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1494" name="/newroot/351/file0/file0" dev="loop3" ino=1048712 res=1 errno=0 [ 1156.348958][T13223] loop6: detected capacity change from 0 to 1024 [ 1156.387858][T13223] EXT4-fs: Ignoring removed bh option [ 1156.435927][T13228] tipc: Enabling of bearer rejected, failed to enable media [ 1156.551798][T13223] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1156.605820][T13223] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.652121][T13223] tmpfs: Unknown parameter 'ÿÿ' [ 1158.834870][T13260] loop4: detected capacity change from 0 to 512 [ 1158.876048][T13260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1158.910808][ T9659] EXT4-fs (loop6): unmounting filesystem. [ 1158.962865][T13260] ext4: Unknown parameter 'fsname' [ 1160.074080][T13277] kAFS: unable to lookup cell '.' [ 1160.117651][T13275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.238629][T13279] Cannot find add_set index 0 as target [ 1161.661668][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1512'. [ 1163.072882][T13312] loop3: detected capacity change from 0 to 164 [ 1165.524537][T13342] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1165.631714][T13342] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1526'. [ 1166.431013][T13356] loop3: detected capacity change from 0 to 40427 [ 1166.458603][T13356] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1166.467374][T13356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1166.483027][T13356] F2FS-fs (loop3): invalid crc value [ 1166.641650][T13356] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1166.854801][T13356] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1166.862096][T13356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1168.301536][T13385] jffs2: notice: (13385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1172.122217][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 1172.132974][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1172.140586][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1172.150670][ T4282] Workqueue: hci2 hci_rx_work [ 1172.155389][ T4282] Call Trace: [ 1172.158690][ T4282] [ 1172.161641][ T4282] dump_stack_lvl+0x188/0x24e [ 1172.166350][ T4282] ? show_regs_print_info+0x12/0x12 [ 1172.171592][ T4282] ? load_image+0x410/0x410 [ 1172.176158][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 1172.181323][ T4282] ? __lock_acquire+0x7c40/0x7c40 [ 1172.186392][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 1172.191109][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 1172.196337][ T4282] kobject_add_internal+0x617/0xca0 [ 1172.201605][ T4282] kobject_add+0x160/0x230 [ 1172.206081][ T4282] ? kobject_init+0x1c0/0x1c0 [ 1172.210803][ T4282] ? __raw_spin_lock_init+0x41/0x100 [ 1172.216130][ T4282] ? klist_children_get+0x50/0x50 [ 1172.221214][ T4282] ? get_device_parent+0x121/0x3e0 [ 1172.226385][ T4282] device_add+0x470/0x1050 [ 1172.230857][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 1172.235838][ T4282] hci_sync_conn_complete_evt+0x707/0xab0 [ 1172.241606][ T4282] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 1172.247620][ T4282] hci_event_packet+0x806/0x1290 [ 1172.252594][ T4282] ? lock_chain_count+0x20/0x20 [ 1172.257481][ T4282] ? bis_list+0x280/0x280 [ 1172.261838][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1172.267771][ T4282] ? kcov_remote_start+0x50f/0x810 [ 1172.272916][ T4282] ? lockdep_hardirqs_on+0x94/0x140 [ 1172.278151][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 1172.283391][ T4282] hci_rx_work+0x3eb/0xd40 [ 1172.287847][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 1172.292739][ T4282] ? process_one_work+0x7b4/0x1160 [ 1172.297880][ T4282] process_one_work+0x8ab/0x1160 [ 1172.302867][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 1172.308539][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1172.313594][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1172.319172][ T4282] ? wq_worker_running+0x97/0x190 [ 1172.324219][ T4282] worker_thread+0xaf5/0x12a0 [ 1172.328952][ T4282] kthread+0x29d/0x330 [ 1172.333079][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 1172.338136][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 1172.342754][ T4282] ret_from_fork+0x1f/0x30 [ 1172.347217][ T4282] [ 1172.350584][ T4282] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1172.363915][ T4282] Bluetooth: hci2: failed to register connection device [ 1174.164567][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 1175.330620][T13444] loop3: detected capacity change from 0 to 256 [ 1177.925282][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.933212][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.383053][ T26] audit: type=1326 audit(1790718634.951:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.471945][ T26] audit: type=1326 audit(1790718635.001:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.573069][ T26] audit: type=1326 audit(1790718635.001:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.682773][ T26] audit: type=1326 audit(1790718635.001:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.788296][ T26] audit: type=1326 audit(1790718635.001:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.822497][ T26] audit: type=1326 audit(1790718635.001:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1178.863377][ T26] audit: type=1326 audit(1790718635.001:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1179.064379][ T26] audit: type=1326 audit(1790718635.001:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1179.088804][ T26] audit: type=1326 audit(1790718635.001:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1179.364283][ T26] audit: type=1326 audit(1790718635.001:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13460 comm="syz.6.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f12abd9e159 code=0x7ffc0000 [ 1182.488325][T13508] loop6: detected capacity change from 0 to 512 [ 1182.537317][T13508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1182.593921][T13508] ext4: Unknown parameter 'fsname' [ 1183.558259][T13516] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 1190.327573][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 1190.424566][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1190.839935][T13562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1191.127922][T13562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1195.929156][T13610] tmpfs: Unknown parameter 'quota' [ 1195.961219][T13604] block device autoloading is deprecated and will be removed. [ 1195.976763][T13604] syz.4.1579: attempt to access beyond end of device [ 1195.976763][T13604] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1196.690908][T13621] tipc: Enabling of bearer rejected, already enabled [ 1198.290102][T13633] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 1206.382042][T13682] loop3: detected capacity change from 0 to 256 [ 1206.392948][T13682] exfat: Deprecated parameter 'namecase' [ 1206.398865][T13682] exfat: Deprecated parameter 'namecase' [ 1206.598347][T13682] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1209.334276][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1603'. [ 1209.374182][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1603'. [ 1209.397611][T13705] overlayfs: failed to clone upperpath [ 1211.649233][T13736] tipc: Enabling of bearer rejected, failed to enable media [ 1212.046840][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 1214.375411][T13763] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 1217.518966][T13807] tipc: Enabling of bearer rejected, failed to enable media [ 1217.605765][T13810] overlayfs: failed to clone upperpath [ 1220.050830][T13834] netlink: 'syz.6.1626': attribute type 1 has an invalid length. [ 1220.769515][T13850] ip_tables: iptables: counters copy to user failed while replacing table [ 1224.479890][T13901] loop4: detected capacity change from 0 to 256 [ 1224.487289][T13901] exfat: Deprecated parameter 'namecase' [ 1224.493112][T13901] exfat: Deprecated parameter 'utf8' [ 1225.423506][T13901] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1226.361849][T13906] tipc: Enabling of bearer rejected, failed to enable media [ 1238.022898][T13998] loop4: detected capacity change from 0 to 1024 [ 1238.172246][T13998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1238.691947][T14004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1659'. [ 1238.731480][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.737872][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.239664][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1239.371235][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1239.371251][ T26] audit: type=1326 audit(1790718695.954:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.2.1656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffada79e159 code=0x0 [ 1242.938007][T14037] input: syz0 as /devices/virtual/input/input13 [ 1244.703782][ T8110] Process accounting resumed [ 1247.970227][ T7577] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1248.942574][ T7577] usb 5-1: Using ep0 maxpacket: 8 [ 1248.955679][ T7577] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1248.970190][ T7577] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.086171][ T7577] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1249.109304][ T7577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.129390][ T7577] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 1249.170539][ T7577] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1249.443252][T14107] overlayfs: failed to clone lowerpath [ 1250.499622][T14112] overlayfs: failed to resolve './file0': -2 [ 1253.662333][T14125] ceph: No mds server is up or the cluster is laggy [ 1253.796393][T10266] usb 5-1: USB disconnect, device number 9 [ 1254.915830][T10266] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1254.930453][T10266] kobil_sct 5-1:1.0: device disconnected [ 1261.380757][T14159] lo speed is unknown, defaulting to 1000 [ 1261.387822][T14159] lo speed is unknown, defaulting to 1000 [ 1261.395516][T14159] lo speed is unknown, defaulting to 1000 [ 1261.443162][T14159] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1261.500319][T14159] lo speed is unknown, defaulting to 1000 [ 1261.515739][T14159] lo speed is unknown, defaulting to 1000 [ 1261.541565][T14159] lo speed is unknown, defaulting to 1000 [ 1261.554920][T14159] lo speed is unknown, defaulting to 1000 [ 1261.567682][T14159] lo speed is unknown, defaulting to 1000 [ 1261.578208][T14159] lo speed is unknown, defaulting to 1000 [ 1263.497312][T14175] Cannot find add_set index 0 as target [ 1269.472347][T14202] xt_HMARK: spi-set and port-set can't be combined [ 1269.558114][T14202] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1277.428088][T14240] futex_wake_op: syz.3.1708 tries to shift op by 144; fix this program [ 1277.443488][T14240] loop3: detected capacity change from 0 to 256 [ 1277.481914][T14240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1277.505361][ T26] audit: type=1800 audit(1790718734.087:87): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1708" name="file1" dev="loop3" ino=1048743 res=0 errno=0 [ 1277.571488][T14240] lo speed is unknown, defaulting to 1000 [ 1278.352748][T14251] No such timeout policy "syz1" [ 1281.736684][T14281] tipc: Enabling of bearer rejected, failed to enable media [ 1290.731722][T14331] input: syz0 as /devices/virtual/input/input14 [ 1294.493737][T14349] tipc: Enabling of bearer rejected, failed to enable media [ 1295.213610][T14352] Cannot find add_set index 0 as target [ 1297.097768][T14360] input: syz1 as /devices/virtual/input/input15 [ 1297.206902][T14360] loop3: detected capacity change from 0 to 1024 [ 1297.823252][T14360] hfsplus: invalid btree flag [ 1297.830499][T14360] hfsplus: failed to load catalog file [ 1299.252480][T14362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1300.514428][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.522641][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.812749][T14379] lo speed is unknown, defaulting to 1000 [ 1311.945391][T14442] SET target dimension over the limit! [ 1317.768651][T14475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.787740][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.797683][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.859326][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.893393][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1317.903695][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1318.529576][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1318.537746][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1318.545055][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1318.553336][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1318.561032][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1318.569985][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.939267][T14474] lo speed is unknown, defaulting to 1000 [ 1320.344659][T14497] loop3: detected capacity change from 0 to 128 [ 1320.636281][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 1320.889087][T14497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1320.901755][T14497] hpfs: filesystem error: improperly stopped [ 1320.907874][T14497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1320.915605][T14497] hpfs: You really don't want any checks? You are crazy... [ 1320.923586][T14497] hpfs: hpfs_map_sector(): read error [ 1320.929053][T14497] hpfs: code page support is disabled [ 1320.936004][T14497] hpfs: hpfs_map_4sectors(): unaligned read [ 1320.942457][T14497] hpfs: hpfs_map_4sectors(): unaligned read [ 1320.948454][T14497] hpfs: filesystem error: unable to find root dir [ 1321.320324][ T8577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.514778][ T8577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.161761][T14509] input: syz1 as /devices/virtual/input/input16 [ 1323.418270][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 1323.564675][T14509] loop6: detected capacity change from 0 to 1024 [ 1323.590300][T14509] hfsplus: invalid btree flag [ 1323.595597][T14509] hfsplus: failed to load catalog file [ 1324.651150][T14481] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1324.819751][ T8577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.143840][ T8577] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1326.088656][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 1326.141775][ T8577] batman_adv: batadv0: Removing interface: netdevsim0 [ 1326.425082][ T8577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.254986][ T8577] tipc: Disabling bearer [ 1327.261497][ T8577] tipc: Left network mode [ 1328.156345][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 1328.414822][T14474] chnl_net:caif_netlink_parms(): no params data found [ 1329.077833][T14546] ip_tables: iptables: counters copy to user failed while replacing table [ 1329.515092][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.522793][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.531684][T14474] device bridge_slave_0 entered promiscuous mode [ 1329.569508][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.587289][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.601076][T14474] device bridge_slave_1 entered promiscuous mode [ 1329.670383][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.694231][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.775346][T14474] team0: Port device team_slave_0 added [ 1329.787702][T14474] team0: Port device team_slave_1 added [ 1329.854855][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.863150][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.889419][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.939733][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.947627][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.974264][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.050861][T14474] device hsr_slave_0 entered promiscuous mode [ 1330.061626][T14474] device hsr_slave_1 entered promiscuous mode [ 1330.072702][T14474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.084900][T14474] Cannot create hsr debugfs directory [ 1330.546953][ T8577] device hsr_slave_0 left promiscuous mode [ 1330.554824][ T8577] device hsr_slave_1 left promiscuous mode [ 1330.561799][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.569714][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.578349][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.592387][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.653529][ T8577] device veth1_macvtap left promiscuous mode [ 1330.660087][ T8577] device veth0_macvtap left promiscuous mode [ 1330.674341][ T8577] device veth0_vlan left promiscuous mode [ 1331.772735][ T8577] team0 (unregistering): Port device team_slave_1 removed [ 1331.844103][ T8577] team0 (unregistering): Port device team_slave_0 removed [ 1331.920322][ T8577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.001951][ T8577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.010939][T13639] infiniband syz5: ib_query_port failed (-19) [ 1332.622242][ T8577] bond0 (unregistering): Released all slaves [ 1332.719173][ T7577] bond0 speed is unknown, defaulting to 1000 [ 1332.794109][T14474] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1332.809866][T14474] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1332.853193][T14474] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1332.898354][T14474] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1333.024350][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.040194][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1333.058212][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1333.078033][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.131858][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1333.149664][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1333.163307][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.170584][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.210708][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1333.223741][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1333.244840][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1333.262465][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.269846][ T9246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.303607][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1333.352603][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1333.369383][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1333.391067][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1333.420769][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1333.432683][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1333.451195][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1333.469060][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1333.482068][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1333.508956][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1333.523369][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1333.546451][T14474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1333.853386][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1333.861784][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1333.899116][T14474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.451791][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1334.461378][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1334.490853][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1334.509524][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1334.525885][T14474] device veth0_vlan entered promiscuous mode [ 1334.545796][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1334.553859][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1334.566290][T14474] device veth1_vlan entered promiscuous mode [ 1334.601940][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1334.619737][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1334.633494][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1334.646915][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1334.666497][T14474] device veth0_macvtap entered promiscuous mode [ 1334.681879][T14474] device veth1_macvtap entered promiscuous mode [ 1334.709061][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.725136][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.736614][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.748602][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.763027][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.780287][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.791796][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.807469][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.817808][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1334.828659][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.841059][T14474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.850029][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1334.863603][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1334.873422][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1334.890108][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1334.913962][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.929690][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.943418][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.956291][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.969511][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.980286][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.990438][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.001039][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.011206][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.023239][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.034514][T14474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.056877][T14474] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.077507][T14474] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.091283][T14474] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.100898][T14474] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.116715][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1335.126353][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1335.232030][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.244537][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.269897][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1335.305403][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.313297][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.322421][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1335.475780][T14626] loop6: detected capacity change from 0 to 64 [ 1337.834271][T14628] hugetlbfs: syz.2.1793 (14628): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1339.319737][T14628] dns_resolver: Unsupported server list version (0) [ 1339.660736][T14626] hfs: unable to open extent tree [ 1339.716059][T14626] hfs: can't find a HFS filesystem on dev loop6 [ 1340.587854][T14655] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1783'. [ 1340.812478][T14656] No such timeout policy "syz1" [ 1341.472659][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1785'. [ 1348.621084][T14706] loop8: detected capacity change from 0 to 764 [ 1349.115671][T14706] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1349.148502][T14706] binder: 14699:14706 ioctl c0205838 200000000000 returned -22 [ 1349.170232][T14706] fuse: Bad value for 'fd' [ 1349.213909][T14707] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1349.266794][T14707] gadgetfs: bound to dummy_udc driver [ 1357.274470][T14736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1358.878262][ T8110] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:6987e3d0-edba-45a1-8f0f-70f474a5beac. [ 1359.051064][T14756] nvme nvme0: creating 2 I/O queues. [ 1359.234739][T14756] nvme nvme0: new ctrl: "testsubsys" [ 1361.721760][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.728322][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.544554][T14807] loop6: detected capacity change from 0 to 2048 [ 1366.612008][T14807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1366.990153][T14815] Trying to write to read-only block-device nullb0 [ 1367.716594][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1367.751716][T14819] Trying to write to read-only block-device nullb0 [ 1367.883895][T14819] Trying to write to read-only block-device nullb0 [ 1367.891541][T14822] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1367.918052][T14822] CIFS: Attempting to mount \\127.0.0.1\share [ 1367.924475][T14822] CIFS: VFS: No username specified [ 1368.027419][T14819] Trying to write to read-only block-device nullb0 [ 1368.043836][T14819] Trying to write to read-only block-device nullb0 [ 1368.240573][T14819] Trying to write to read-only block-device nullb0 [ 1368.684278][T14819] Trying to write to read-only block-device nullb0 [ 1369.038539][T14819] Trying to write to read-only block-device nullb0 [ 1369.045555][T14819] Trying to write to read-only block-device nullb0 [ 1369.052177][T14819] Trying to write to read-only block-device nullb0 [ 1371.728496][T14851] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 1371.832887][T14855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 1371.840813][T14855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.848736][T14855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1372.050027][T14854] [ 1372.052435][T14854] ====================================================== [ 1372.059491][T14854] WARNING: possible circular locking dependency detected [ 1372.066559][T14854] syzkaller #0 Not tainted [ 1372.071003][T14854] ------------------------------------------------------ [ 1372.078059][T14854] syz.6.1825/14854 is trying to acquire lock: [ 1372.084166][T14854] ffffffff8d7b02b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.095462][T14854] [ 1372.095462][T14854] but task is already holding lock: [ 1372.102869][T14854] ffff888077ea0660 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1372.113382][T14854] [ 1372.113382][T14854] which lock already depends on the new lock. [ 1372.113382][T14854] [ 1372.123820][T14854] [ 1372.123820][T14854] the existing dependency chain (in reverse order) is: [ 1372.132881][T14854] [ 1372.132881][T14854] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 1372.141634][T14854] down_write+0x36/0x60 [ 1372.146368][T14854] configfs_depend_item_unlocked+0x14f/0x430 [ 1372.152923][T14854] usbg_make_tpg+0x1dd/0x550 [ 1372.158085][T14854] target_fabric_make_tpg+0xa0/0x6d0 [ 1372.163940][T14854] configfs_mkdir+0x511/0x9e0 [ 1372.169206][T14854] vfs_mkdir+0x386/0x570 [ 1372.174015][T14854] do_mkdirat+0x1d8/0x440 [ 1372.178908][T14854] __x64_sys_mkdirat+0x85/0x90 [ 1372.184233][T14854] do_syscall_64+0x4c/0xa0 [ 1372.189259][T14854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.195739][T14854] [ 1372.195739][T14854] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 1372.203704][T14854] __mutex_lock+0x12d/0xae0 [ 1372.208821][T14854] tcm_alloc_inst+0x61/0x190 [ 1372.213998][T14854] usb_get_function_instance+0xd9/0x2e0 [ 1372.220114][T14854] function_make+0x118/0x350 [ 1372.225271][T14854] configfs_mkdir+0x511/0x9e0 [ 1372.230525][T14854] vfs_mkdir+0x386/0x570 [ 1372.235338][T14854] do_mkdirat+0x1d8/0x440 [ 1372.240241][T14854] __x64_sys_mkdirat+0x85/0x90 [ 1372.245576][T14854] do_syscall_64+0x4c/0xa0 [ 1372.250563][T14854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.257037][T14854] [ 1372.257037][T14854] -> #1 (func_lock){+.+.}-{3:3}: [ 1372.264210][T14854] __mutex_lock+0x12d/0xae0 [ 1372.269274][T14854] usb_get_function_instance+0x2a/0x2e0 [ 1372.275391][T14854] function_make+0x118/0x350 [ 1372.280554][T14854] configfs_mkdir+0x511/0x9e0 [ 1372.285890][T14854] vfs_mkdir+0x386/0x570 [ 1372.290702][T14854] do_mkdirat+0x1d8/0x440 [ 1372.295588][T14854] __x64_sys_mkdirat+0x85/0x90 [ 1372.300911][T14854] do_syscall_64+0x4c/0xa0 [ 1372.305891][T14854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.312361][T14854] [ 1372.312361][T14854] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1372.320660][T14854] __lock_acquire+0x2d18/0x7c40 [ 1372.326085][T14854] lock_acquire+0x1bb/0x4a0 [ 1372.331168][T14854] __mutex_lock+0x12d/0xae0 [ 1372.336237][T14854] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.342956][T14854] configfs_symlink+0x5a4/0x13c0 [ 1372.348458][T14854] vfs_symlink+0x245/0x3d0 [ 1372.353437][T14854] do_symlinkat+0x1b6/0x400 [ 1372.358588][T14854] __x64_sys_symlinkat+0x95/0xa0 [ 1372.364090][T14854] do_syscall_64+0x4c/0xa0 [ 1372.369081][T14854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.375557][T14854] [ 1372.375557][T14854] other info that might help us debug this: [ 1372.375557][T14854] [ 1372.385858][T14854] Chain exists of: [ 1372.385858][T14854] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 1372.385858][T14854] [ 1372.400877][T14854] Possible unsafe locking scenario: [ 1372.400877][T14854] [ 1372.408379][T14854] CPU0 CPU1 [ 1372.413754][T14854] ---- ---- [ 1372.419154][T14854] lock(&sb->s_type->i_mutex_key#25); [ 1372.424633][T14854] lock(tpg_instances_lock); [ 1372.431838][T14854] lock(&sb->s_type->i_mutex_key#25); [ 1372.439832][T14854] lock(gadget_subsys.su_mutex); [ 1372.444869][T14854] [ 1372.444869][T14854] *** DEADLOCK *** [ 1372.444869][T14854] [ 1372.453016][T14854] 2 locks held by syz.6.1825/14854: [ 1372.458221][T14854] #0: ffff888146eda460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1372.467468][T14854] #1: ffff888077ea0660 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1372.478391][T14854] [ 1372.478391][T14854] stack backtrace: [ 1372.484295][T14854] CPU: 1 PID: 14854 Comm: syz.6.1825 Not tainted syzkaller #0 [ 1372.491763][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1372.501844][T14854] Call Trace: [ 1372.505145][T14854] [ 1372.508087][T14854] dump_stack_lvl+0x188/0x24e [ 1372.512783][T14854] ? load_image+0x410/0x410 [ 1372.517309][T14854] ? show_regs_print_info+0x12/0x12 [ 1372.522527][T14854] ? print_circular_bug+0x12b/0x1a0 [ 1372.527798][T14854] check_noncircular+0x296/0x330 [ 1372.532762][T14854] ? add_chain_block+0x9b0/0x9b0 [ 1372.537731][T14854] ? lockdep_lock+0xf1/0x1f0 [ 1372.542351][T14854] ? _find_first_zero_bit+0xd2/0x100 [ 1372.547661][T14854] __lock_acquire+0x2d18/0x7c40 [ 1372.552696][T14854] ? __kernel_text_address+0x9/0x30 [ 1372.557956][T14854] ? stack_trace_save+0xf0/0xf0 [ 1372.562826][T14854] ? verify_lock_unused+0x140/0x140 [ 1372.568059][T14854] ? mark_lock+0x94/0x320 [ 1372.572430][T14854] ? __lock_acquire+0x1465/0x7c40 [ 1372.577480][T14854] lock_acquire+0x1bb/0x4a0 [ 1372.582011][T14854] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.588357][T14854] ? __might_sleep+0xd0/0xd0 [ 1372.592977][T14854] ? read_lock_is_recursive+0x10/0x10 [ 1372.598378][T14854] ? mark_lock+0x94/0x320 [ 1372.602727][T14854] __mutex_lock+0x12d/0xae0 [ 1372.607259][T14854] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.613607][T14854] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.619952][T14854] ? mutex_lock_nested+0x10/0x10 [ 1372.624909][T14854] ? rwsem_write_trylock+0x135/0x1c0 [ 1372.630218][T14854] ? clear_nonspinnable+0x60/0x60 [ 1372.635274][T14854] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1372.641446][T14854] ? inode_permission+0xef/0x480 [ 1372.646397][T14854] ? bpf_lsm_inode_permission+0x5/0x10 [ 1372.651876][T14854] ? security_inode_permission+0xac/0xf0 [ 1372.657556][T14854] configfs_symlink+0x5a4/0x13c0 [ 1372.662514][T14854] ? end_current_label_crit_section+0x14b/0x170 [ 1372.668773][T14854] ? common_perm+0x15d/0x1b0 [ 1372.673379][T14854] ? from_kgid+0x14f/0x6a0 [ 1372.677812][T14854] ? make_kgid+0x650/0x650 [ 1372.682236][T14854] ? apparmor_path_symlink+0x1ac/0x230 [ 1372.687718][T14854] ? lookup_one_qstr_excl+0x11c/0x240 [ 1372.693123][T14854] ? detach_groups+0x370/0x370 [ 1372.697913][T14854] ? inode_permission+0xef/0x480 [ 1372.702871][T14854] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1372.708087][T14854] ? security_inode_symlink+0xb2/0x100 [ 1372.713576][T14854] vfs_symlink+0x245/0x3d0 [ 1372.718033][T14854] do_symlinkat+0x1b6/0x400 [ 1372.722551][T14854] ? vfs_symlink+0x3d0/0x3d0 [ 1372.727157][T14854] __x64_sys_symlinkat+0x95/0xa0 [ 1372.732107][T14854] do_syscall_64+0x4c/0xa0 [ 1372.736536][T14854] ? clear_bhb_loop+0x60/0xb0 [ 1372.741226][T14854] ? clear_bhb_loop+0x60/0xb0 [ 1372.745939][T14854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.751860][T14854] RIP: 0033:0x7f12abd9e159 [ 1372.756288][T14854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.775908][T14854] RSP: 002b:00007f12acc6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1372.784332][T14854] RAX: ffffffffffffffda RBX: 00007f12ac025fa0 RCX: 00007f12abd9e159 [ 1372.792325][T14854] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1372.800320][T14854] RBP: 00007f12abe3506b R08: 0000000000000000 R09: 0000000000000000 [ 1372.808399][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.816390][T14854] R13: 00007f12ac026038 R14: 00007f12ac025fa0 R15: 00007ffce877fdf8 [ 1372.824427][T14854] [ 1372.875435][T14859] loop8: detected capacity change from 0 to 2048