last executing test programs: 7m19.575074999s ago: executing program 4 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m19.299325296s ago: executing program 4 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000821}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x7c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xf0bd2d, 0x25dfdbff, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x38}}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x60840, 0x8) read$FUSE(r5, &(0x7f0000002680)={0x2020}, 0x2020) 7m18.269872762s ago: executing program 4 (id=848): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000090) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, 0x0, 0x0) 7m17.182920619s ago: executing program 4 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdaff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x3, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c074}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7m17.099631361s ago: executing program 4 (id=854): ioprio_set$uid(0x3, 0x0, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 7m14.313530912s ago: executing program 4 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x80383, 0x0) read$midi(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a000000000000", @ANYRES32=r5, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) 6m58.774341354s ago: executing program 32 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x80383, 0x0) read$midi(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a000000000000", @ANYRES32=r5, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) 2m38.343819016s ago: executing program 3 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2m36.385435586s ago: executing program 3 (id=1887): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) socket$tipc(0x1e, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m35.069843229s ago: executing program 3 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) unlinkat(r4, &(0x7f00000000c0)='./file0\x00', 0x200) openat$nullb(0xffffffffffffff9c, 0x0, 0x420081, 0x0) 2m33.936125878s ago: executing program 3 (id=1897): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2m31.704782624s ago: executing program 3 (id=1907): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000100)=0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f0000000000)='/dev/cpu/#/msr\x00', 0x200000, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x9]}, {0x2, 0x3ff, 0x4, 0x791a}}, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x4}, {[0x6, 0x7, 0x4, 0x9]}, 0xd57, 0x80, &(0x7f0000000400)=""/128}) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) 2m31.515969279s ago: executing program 3 (id=1910): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006380)={0x10, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) ioprio_get$uid(0x3, r3) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x1, 0x8, 0x5, 0x1, 0x3}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) 2m15.923367053s ago: executing program 33 (id=1910): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006380)={0x10, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) ioprio_get$uid(0x3, r3) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x1, 0x8, 0x5, 0x1, 0x3}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) 13.987643837s ago: executing program 6 (id=2281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 13.931468688s ago: executing program 1 (id=2282): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x80000000, 0x10}, 0xc) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 12.926632654s ago: executing program 6 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="8b332abd70000000000005000000", @ANYRES32=0x0, @ANYBLOB="3d68ffabe0f45a3ce7064b6516549c14e106c9d869298b3abc2ebe4aa9b29eea6210eae484935f6f9887ff5b5b44cbd03050183bbff3258f8b4e5e5d0322d0d18f812097e67876a35a0d96c8f4103aa3f858b82346c195ff90df99b5e36d4da73861c318ecc9e0cccfd4f06b049133d3e5a497b5bbb409a1ba845ad5e9796caf35d04f966ae4e9ad72341de84c7bea0e5b4214c0ebec90cd561fc8594ca2464951eb76d1583f1f49418e46872b433491024bf0bcdcb9b0"], 0x1c}}, 0x24000000) r5 = epoll_create(0x8001) fchmod(r5, 0x100) sched_setaffinity(0x0, 0xfffffffffffffccd, &(0x7f00000001c0)=0x2) unshare(0x64000600) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') syz_emit_ethernet(0x36, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='mpol=interlReave:7-N:', @ANYBLOB='N']) 12.227901922s ago: executing program 1 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 11.324122974s ago: executing program 1 (id=2288): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x10100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 11.09396622s ago: executing program 5 (id=2290): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x33, 0x30, 0x30, 0x30, 0x33, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x34, 0x35, 0x30, 0x38, 0x30, 0x0, 0x30, 0x64, 0x64, 0x62, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000800)={'fscrypt:', @desc1}, &(0x7f0000000840)={0x0, "261cbf71c21717ab8a3a90842a484f80952422783c739f3da02addf07c73d0b8c74c2a75f91fae33a19256b0c7abd34dc375ef7f14dcaaa815737b5bcebc3fcc", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 10.32736781s ago: executing program 1 (id=2293): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, 0x0, 0x0) 9.157944509s ago: executing program 5 (id=2295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000000)=[{r5, 0x348}], 0x1, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x3, 0xf6, 0x10cf, 0x5, 0x5, 0x3, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@dellink={0x34, 0x11, 0x82d, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) 9.136340509s ago: executing program 0 (id=2296): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r0, 0x400, 0x1) syz_usbip_server_init(0xa142a294fa483f5d) fcntl$setlease(r5, 0x400, 0x0) close(r5) 7.649781967s ago: executing program 0 (id=2297): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x20004010) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a0000fd400100"/48, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket(0x1, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.51649687s ago: executing program 6 (id=2298): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) write$tun(r4, 0x0, 0xb2) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 7.494374041s ago: executing program 2 (id=2299): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1f90, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) listen(r0, 0x5) 7.364725194s ago: executing program 5 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a331800009c1100fe8000000000000001000000000000aaff0200000000000000000000000000014e1d4e20"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)=' P\xccs|\xe2', 0x0) 6.622175313s ago: executing program 0 (id=2301): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a331800009c1100fe8000000000000001000000000000aaff0200000000000000000000000000014e1d4e20"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) 4.690141812s ago: executing program 2 (id=2302): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setrlimit(0x0, &(0x7f0000000200)={0xb0, 0x2}) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 4.689496172s ago: executing program 5 (id=2303): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)=""/229, 0xe5, 0x40002080, &(0x7f0000000380)=@hci={0x1f, 0x3, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='active', 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) 4.479309747s ago: executing program 0 (id=2304): r0 = socket(0x80000000000000a, 0x2, 0x0) timerfd_create(0x7, 0x80000) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x10}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0xb4, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x77, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x287d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0xc, 0x6, 0x2) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}]}, 0x4, 0x349, &(0x7f0000000980)="$eJzs3U1r1E4cB/DvJNlt9r+l/9hWCp6kWvBU2npQPGiR4sU34EGKtd1CaaygFbQgrZ5FvAmCR2+eRd+CXsQ3oHgoKJ70UjwYmclzmNlNtw/put8PdDebzMNvdmaymZZuQER96/Lc51dnt+WPqAGwAVwALAAu4AA4jjH33tp6x4LsZEsgCG0W0yyutXRZXfngpK89+crBYHYfHQzZT1/Mh79eVE8/Dy8gqoTIzuAMCxiApWaiOu4eemQHY0u2q99keljsYAf3MVRlOEREVL3o89+KPiUGw12wLGAiug7v9c//3PXNTnVxHAnJ578Vvg6EfH/+V4fkem9l3W8tqSGget+KV4m6srRjIrBRjzbVswXYzcwlV6YWPRWL1Vhe8VuTW6qAx7gUySQbVY9LiBsik8IUbRTReNiwstq1vb2makNNtmHGEP9Iuxq1C+B33/FcX938hxIxiffio5gXHl5gKbn+cwIh3xz1/niFqRLGP2UuUbXSC1PlWpmGf0xVciLugbev01Y2TO+rC1vGoiNLEcXrdy+O81ndnAvDyP9aIWzdtLl1KtcI4IhocKW5ZpJEv7W5Rot1NZZrfmty8bZvGvT7S7uiE0/FNTGOH3iDucz1vyVTT8A8M3OzXKiU0cho2x5HpTT0Y46awLfKz8xa6ZT/uivaji74ln/5BDdxHkN3H2ysLvh+6071G/FU6TL7yX2OJxyI0XCUe+RzJg1cuSEH4b5V+icIAu0hByXLkZO06zDCCXXuZdrkjdUFEZ3z9tZAeeYsHJo1JwYwCyDaE58Ruql9M8k1kBZYKvsv2dtqj35AxlEdwgSJq8odsjFQaqY0uqj06sPVBb/rsxH1kLTTMXa96mCoCvK6S4Trv8x6ZUqddeSD12b9E3QqPFPitGEFNKwe/0tWcEqHNVfTvIJrxhsd1lynzgCn6/kaLcQ1PioW60Vx4ij+VXL3f8oQc/iEG7386xwiIiIiIiIiIiIiIiIiIiIiIiIiov602/9G6ObfCfI1bvfhF28QEREREREREREREREREREREREREREREe1Nev/f5Kug67r7/7a7U5Nih3eIccPvDHfSW2dklL3/r13i/r9iq1wDicjobwAAAP//QO1nSQ==") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r4, &(0x7f00000002c0)=""/52, 0x34) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x32600) close_range(r0, 0xffffffffffffffff, 0x0) 4.263286613s ago: executing program 2 (id=2305): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x33, 0x30, 0x30, 0x30, 0x33, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x34, 0x35, 0x30, 0x38, 0x30, 0x0, 0x30, 0x64, 0x64, 0x62, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000800)={'fscrypt:', @desc1}, &(0x7f0000000840)={0x0, "261cbf71c21717ab8a3a90842a484f80952422783c739f3da02addf07c73d0b8c74c2a75f91fae33a19256b0c7abd34dc375ef7f14dcaaa815737b5bcebc3fcc", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 4.123891026s ago: executing program 6 (id=2306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(0x0, &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 4.120837906s ago: executing program 2 (id=2316): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x33, 0x30, 0x30, 0x30, 0x33, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x34, 0x35, 0x30, 0x38, 0x30, 0x0, 0x30, 0x64, 0x64, 0x62, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000800)={'fscrypt:', @desc1}, &(0x7f0000000840)={0x0, "261cbf71c21717ab8a3a90842a484f80952422783c739f3da02addf07c73d0b8c74c2a75f91fae33a19256b0c7abd34dc375ef7f14dcaaa815737b5bcebc3fcc", 0x32}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 4.039901328s ago: executing program 2 (id=2307): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@resuid}]}, 0x3, 0x4dc, &(0x7f0000000c40)="$eJzs3E9sFNUfAPDv7LZQ+MGPFREFUYtobCS2UFA4mBiMJh40MeJBj01bCFKooSURgmZJDB4NiXfj0asHr+iFGE8mXvFoYkiI4QKYGMfM7uyfbndb2m67Nv18kmXfmzcz771982bfvNclgA1rMPsnqYZvRcSOiCi07jBYfbt/98r4g7tXxqOcpif/TCqH3cviufw08b88MlSIKHyeNBKazFy6fHZsamryQh4fmT338cjMpcsvnTk3dnry9OT50ePHjx45fOyV0ZeXXqk2+WX1urf3s+l9e9768Po743217QP5e3M9umUwBtsVpeL5bmfWY9ubwklfDwvCkmTXf9Zc/ZX+vyOKofFgo0jTNN3cObmctro6bwuwbiXR6xIAvVH7os+ef2uvdgOBTasz/Oi5OyeqD0BZve/nr4hnKhtr8yD9Lc+33TQYER+U//o6e8UqzUMAADT74URtJNgy/itVV0b+vnjztez9//kaSikiHomInRHxaETsiojHImJ3RDweEU+0nL8YEekC+Q+2xOv51xehCre7VNW2svHfq/naVmP8N6cApWIe2x5RGzBPHso/k6Ho33zqzNTk4QXy+PGNX7/slNY8/steWf61sWBejtt9LRN0E2OzY8uucIs7VyP29rXWP+mLSOorAUlE7ImIvUs4b6kpfObFb/fVI/1z91u8/hVp23W0LixVpN9EvFBt/3LMaf9GjsnC65MjAzE1eWgkuwoOtc3j51+uvdsp/0Xr//3vrYe8eezGybxnrVzW/lubrv+ord826l9KIpL6eu3M0vO49tsXHZ9plnv9b0rer4Rrz6WfjM3OXjgcsSl5e/720caxtXj2HuVq/YcOtO//O/Njsk/iyYjILuKnIuLpqD4hZmXfHxHPRsSBBer/0+vPfbT8+q+urP4Tbe9/c9q/sV7fKZCUq3u3SSqe3X/rQYebx8O1/9FKaCjf0v7+l8y5RXQqae3bLtvyz0o/PAAAAFgnChGxrWkuaVsUCsPD1TmgXbG1MDU9M3vw1PTF8xNZWkQp+gu1ma4dlSMqz/2V+c9SNT3J0kdb4kfyeeOvilsq8eHx6amJ3lUbyOd6t0VSGK7fC6r9P/NHd6aYgf8yP/mBjWuh/p8N4ndfX8PCAGvq4b//b366qgUB1lxT/y932KW8jL/7AtYBz/9AQ6dhQIN7Bqx/qb4MG9qS+v/BxccGwPrRF+/Vw4WelgRYa8b/sCEt+rv+FQXSG2nbpIGYv3MMLHzCYiyaaTEi5iVtaZNXTwLZyKonuW9ZzlG1/02h4z5RWNoJN8ey2nRe4NQKP43yhZnTu7t+8af538p3uwW/W5N+2i7Qk9sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA1/0bAAD//7sD4XQ=") chdir(&(0x7f0000000400)='./file0\x00') listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) lseek(r0, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2d64, 0x0, &(0x7f0000000400), &(0x7f0000011000), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='2\x00', 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) 3.699291777s ago: executing program 5 (id=2308): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setuid(0xee01) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}}, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1000) socket$nl_route(0x10, 0x3, 0x0) 3.057855993s ago: executing program 0 (id=2309): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) syz_open_dev$dri(&(0x7f00000000c0), 0xfadf, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.998898555s ago: executing program 6 (id=2310): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffff89) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000206030f00000000000000000200000005000100070000000900020073797a30000000001100030068000000000100000061726b000000000900020073797a320000000005000500020000001400078008001240000004000800134000010000"], 0x64}}, 0x24000840) close_range(r5, 0xffffffffffffffff, 0x0) r9 = geteuid() quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r9, 0x0) 2.76332431s ago: executing program 1 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.370761585s ago: executing program 2 (id=2312): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x4, 0xbe}]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') bind$packet(r2, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @empty, 0xed, 0x4}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_register_op={0x0, 0x2b}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 881.669958ms ago: executing program 6 (id=2313): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) semget(0x1, 0x2, 0x210) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvbGLHm0rpJk2agpCwygHUiMQvkQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFu/4VyMGcOnFCQcuDMv+CqRwR334xmdvYlseuu87ab9PORZp/n2eeZZ37z0+yjmbWsDfCNtfp+Zh40k9VL726X7d2d5c7uzvLtfj3JqSSNZC5JUb799yRfJvfS2/KtfsdIeUDx2er19fufXuy15uqtGl8ctd94BrG0erFW5dOab+nx5iservaa80nO1SVM3H7fF4d2P+HnEgCYZkVy4rD3W8np+ma9fA7o3RX37rFfaPcmHQAAAAA8B6/uZS/bOTPpOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFUv/+f1FvjX59PkX/9/9n6/dS119oDyYdAAAAAAAAAAAc9MVxd/juXvaynTP99n5R/c3/zapxvnp9JR9lK+1s5nK2s5ZuutnMYpLWyESz22vd7ubiGHsuHbrn0mOfMwAAAAAAAAC8xE6MO/BPWR3+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKZBkZzoFdV2vl9vpXEyyVyS2XLcveR+v/4iezDpAAAAAOA5eHUve9nOmX57v6ie+V+vnvvn8lHupJuNdNNJOzeq7wJ6T/2N3Z3lzu7O8u1yOzjvz/93rDCqGdP77uHwIy9UIy4M9ljNr/LbXMp83stmNvK7rKWbdubzTlVbS5FW/e1Fqx/n4fH+7KHWe18X6xtVJM3czEYV2+Vcz4fp5EYa1TlUY44+4h/L7BQ/rY2Zoxt1WZ7Rr+tyOrSqjMwMMrJQ577MxtmjM3HM6+TRIy2mMfgO6vwzyPnpuixz/c5U53xp5Op7/ehMJAtL/7273rlza/3m1qXpOaXH9GgmlkcycfHYmdjf3//DwWOcfPan8RTM1tnoraLHWy3frPY9k438Jh/mRtq5loVcy0quZjkr+XFWRvJ6YYzPWuN4n7Xv/aCuzCT5ZV1OhzKvZ0fyOrrStaq+0XeGWTr39Fekk9+uK+XF+vbUrUhnH1mb+5l47ehM/GW/fN3q3Lm1ub52d8zjfb8uywz8YqoyUV4v5warxsNXR9n32qF9i1Xf+UFf40DfhUHf131SZ+t7uIMzLVV9Fw/tW6763hj0vZLmIKnDuxwApt7pt07PNv/T/Hfz8+afm+vNd+fePnXt1HdmM/Ovk/848bfGXxs/Kd7K5/n98PkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4fFsff3JrrdNpb6qoTL4yl2Tcwf2fKJp0zC9pZcILE/DMXenevntl6+NPfrhxe+2D9gftO1cXV5auXl1Y+dG1Kzc3Ou2F3uukwwQAnqLhTf+kIwEAAAAAAAAAAAAAAL7K8/h34kmfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HJbfT8zD1JkceHyQtne3VnulFu/Phw5l6QoK/9M8mVyL70trZHpiq86TvHZ6vX1+59eHM411x9fHLXfeB6KpfFITE8639ITzzc8w/kk5+oSJu7/AQAA//9jygD6") 879.323258ms ago: executing program 0 (id=2324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x270, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'team0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [], [], 'gre0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x20}}}, {{@ipv6={@private1, @private1, [], [], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @private0, @ipv4, @local, @local, @local, @local, @private2, @private2, @private1, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setpriority(0x0, 0x1, 0xa7a8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) 39.42293ms ago: executing program 1 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)='syz1\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'fo\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 5 (id=2315): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) kernel console output (not intermixed with test programs): work. [ 197.748565][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.775925][ T4695] usb 2-1: USB disconnect, device number 2 [ 197.789402][ T4692] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 197.820169][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.869318][ T2426] pvrusb2: Device being rendered inoperable [ 197.895781][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.919541][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 197.966875][ T2426] pvrusb2: Attached sub-driver cx25840 [ 197.983259][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 198.031010][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 198.090431][ T5973] loop0: detected capacity change from 0 to 512 [ 198.179462][ T4692] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 198.187724][ T4692] usb 3-1: config 0 has no interface number 0 [ 198.229309][ T4692] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 198.269265][ T4692] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 198.386007][ T5973] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.625375][ T4692] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 198.662553][ T5973] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.674549][ T4692] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 198.754615][ T4692] usb 3-1: Manufacturer: syz [ 198.819798][ T4692] usb 3-1: SerialNumber: syz [ 198.851276][ T4692] usb 3-1: config 0 descriptor?? [ 199.233031][ T5994] loop4: detected capacity change from 0 to 256 [ 199.260342][ T4692] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 199.272073][ T4692] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 199.324022][ T4692] usb 3-1: USB disconnect, device number 3 [ 199.489370][ T5994] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.549207][ T5994] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 199.900950][ T5994] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 201.245239][ T6025] syz.2.498 uses obsolete (PF_INET,SOCK_PACKET) [ 202.429270][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.680683][ T4260] usb 1-1: Using ep0 maxpacket: 16 [ 202.799414][ T4260] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 202.839306][ T4260] usb 1-1: config 1 has no interface number 0 [ 202.889493][ T4260] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 202.942636][ T4260] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.039936][ T4260] usb 1-1: config 1 interface 105 has no altsetting 0 [ 203.320037][ T4260] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 203.427315][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 203.653531][ T4260] usb 1-1: Product: syz [ 203.657753][ T4260] usb 1-1: Manufacturer: syz [ 203.721187][ T4260] usb 1-1: SerialNumber: syz [ 203.949552][ T6037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.978115][ T6037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.046320][ T6033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.078144][ T6033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.919657][ T4260] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 205.933807][ T4260] aqc111: probe of 1-1:1.105 failed with error -32 [ 206.735506][ T6107] loop1: detected capacity change from 0 to 512 [ 206.875276][ T6107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.909219][ T4692] Bluetooth: hci0: command 0x0406 tx timeout [ 206.934740][ T6107] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.043099][ T4692] usb 1-1: USB disconnect, device number 6 [ 207.386868][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 207.436781][ T6127] loop0: detected capacity change from 0 to 1024 [ 207.494139][ T6127] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 207.518866][ T6125] team0: Port device team_slave_0 removed [ 207.542509][ T6127] EXT4-fs (loop0): inline encryption not supported [ 207.631243][ T6127] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.659857][ T6127] Quota error (device loop0): v2_read_file_info: Free block number too big (131072 >= 6). [ 207.772794][ T6127] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 207.928319][ T6127] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 208.079377][ T6127] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.519: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.441729][ T6127] EXT4-fs (loop0): Remounting filesystem read-only [ 208.594843][ T6127] EXT4-fs (loop0): 1 orphan inode deleted [ 208.681301][ T6127] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt,. Quota mode: writeback. [ 210.259365][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.690569][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.962475][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.009272][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.037693][ T4231] usb 3-1: SerialNumber: syz [ 211.116559][ T6191] batman_adv: batadv0: Adding interface: dummy0 [ 211.123216][ T6191] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.164024][ T6193] loop4: detected capacity change from 0 to 164 [ 211.166354][ T6191] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 211.379636][ T6203] device syzkaller0 entered promiscuous mode [ 211.820545][ T6203] tipc: Enabled bearer , priority 0 [ 212.130349][ T6202] tipc: Resetting bearer [ 212.267485][ T6217] loop4: detected capacity change from 0 to 1024 [ 212.276936][ T6202] tipc: Disabling bearer [ 212.311643][ T6217] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 212.319013][ T6217] EXT4-fs (loop4): inline encryption not supported [ 212.336828][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 212.351311][ T4231] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 212.365019][ T6217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 212.371994][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 212.418216][ T6217] Quota error (device loop4): v2_read_file_info: Free block number too big (131072 >= 6). [ 212.448881][ T6217] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 212.561723][ T6217] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 212.568758][ T6217] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.543: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.602388][ T6217] EXT4-fs (loop4): Remounting filesystem read-only [ 212.625030][ T6217] EXT4-fs (loop4): 1 orphan inode deleted [ 212.653172][ T6217] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt,. Quota mode: writeback. [ 212.757534][ T7] usb 3-1: USB disconnect, device number 4 [ 212.765858][ T7] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 213.992660][ T6245] loop2: detected capacity change from 0 to 2048 [ 214.128274][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 214.348629][ T7] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 215.550963][ T6287] loop2: detected capacity change from 0 to 1024 [ 215.616181][ T6287] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 215.641498][ T6287] EXT4-fs (loop2): inline encryption not supported [ 215.671921][ T6287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 215.693889][ T6287] Quota error (device loop2): v2_read_file_info: Free block number too big (131072 >= 6). [ 215.705433][ T6287] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 215.729359][ T6287] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 215.736342][ T6287] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.562: Freeing blocks not in datazone - block = 0, count = 4096 [ 215.837220][ T6287] EXT4-fs (loop2): Remounting filesystem read-only [ 215.855471][ T6287] EXT4-fs (loop2): 1 orphan inode deleted [ 215.876096][ T6287] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt,. Quota mode: writeback. [ 216.129449][ T4692] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.208017][ T6317] loop2: detected capacity change from 0 to 1024 [ 216.345474][ T6317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.399167][ T4692] usb 5-1: Using ep0 maxpacket: 16 [ 216.526670][ T4692] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 216.552100][ T4692] usb 5-1: config 1 has no interface number 0 [ 216.558254][ T4692] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.635997][ T4692] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.703128][ T6332] netlink: 'syz.3.569': attribute type 21 has an invalid length. [ 216.715170][ T4692] usb 5-1: config 1 interface 105 has no altsetting 0 [ 216.720133][ T6332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.569'. [ 216.750487][ T6328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.785007][ T6328] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 216.801445][ T6334] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 216.817505][ T6334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.894368][ T4692] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 216.913959][ T4692] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 216.941714][ T4692] usb 5-1: Product: syz [ 216.953177][ T4692] usb 5-1: Manufacturer: syz [ 216.959041][ T4692] usb 5-1: SerialNumber: syz [ 216.989569][ T6295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.009704][ T6295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.111525][ T6302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.118640][ T6302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.049699][ T4692] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 219.111685][ T4692] aqc111: probe of 5-1:1.105 failed with error -32 [ 219.254475][ T6356] loop1: detected capacity change from 0 to 164 [ 219.361722][ T6356] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 220.686782][ T1108] usb 5-1: USB disconnect, device number 7 [ 220.716458][ T6364] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready [ 222.710541][ T6391] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 222.959432][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.467677][ T6392] ODEBUG: Out of memory. ODEBUG disabled [ 223.557285][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 224.032765][ T6398] device syzkaller0 entered promiscuous mode [ 224.099344][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 224.108485][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 224.138716][ T6401] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:21504 [ 224.279270][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.365189][ T6402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 224.378825][ T6402] netlink: 17 bytes leftover after parsing attributes in process `syz.2.593'. [ 224.389573][ T7] usb 5-1: config 4 has an invalid interface number: 12 but max is 0 [ 224.402248][ T7] usb 5-1: config 4 has no interface number 0 [ 224.418515][ T7] usb 5-1: config 4 interface 12 altsetting 92 bulk endpoint 0xC has invalid maxpacket 64 [ 224.439378][ T7] usb 5-1: config 4 interface 12 has no altsetting 0 [ 224.440336][ T6402] tipc: Invalid UDP bearer configuration [ 224.446303][ T6402] tipc: Enabling of bearer rejected, failed to enable media [ 224.630548][ T7] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=38.2d [ 224.648144][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.659237][ T7] usb 5-1: Product: syz [ 224.663434][ T7] usb 5-1: Manufacturer: syz [ 224.668909][ T7] usb 5-1: SerialNumber: syz [ 224.934552][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.444232][ T6387] loop4: detected capacity change from 0 to 2048 [ 225.579555][ T6387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.677197][ T6424] loop0: detected capacity change from 0 to 4096 [ 225.765706][ T7] usbserial_generic 5-1:4.12: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 226.468857][ T7] usbserial_generic 5-1:4.12: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 226.509309][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 226.527384][ T7] usbserial_generic 5-1:4.12: generic converter detected [ 226.566085][ T7] usb 5-1: generic converter now attached to ttyUSB0 [ 226.581566][ T7] usb 5-1: USB disconnect, device number 8 [ 226.661389][ T7] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 226.670088][ T7] usbserial_generic 5-1:4.12: device disconnected [ 226.698096][ T6424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.744377][ T6437] loop4: detected capacity change from 0 to 8 [ 226.852058][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 226.986481][ T6437] SQUASHFS error: lzo decompression failed, data probably corrupt [ 227.113207][ T6437] SQUASHFS error: Failed to read block 0x62b: -5 [ 227.197592][ T6437] SQUASHFS error: Unable to read metadata cache entry [629] [ 227.285804][ T6437] SQUASHFS error: Unable to read inode 0x11f [ 227.659273][ T1108] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 227.673364][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.682423][ T6424] fs-verity: sha256 using implementation "sha256-avx2" [ 227.685094][ T1108] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 227.699176][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.766035][ T1108] usb 3-1: config 0 descriptor?? [ 227.789455][ T6422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.879827][ T6424] fs-verity (loop0, inode 16): Error -4 building Merkle tree [ 228.163557][ T6448] loop1: detected capacity change from 0 to 512 [ 228.329649][ T1108] pantherlord 0003:0E8F:0003.0001: ignoring exceeding usage max [ 228.373892][ T1108] pantherlord 0003:0E8F:0003.0001: unknown main item tag 0x3 [ 228.711627][ T1108] pantherlord 0003:0E8F:0003.0001: unknown main item tag 0x1 [ 228.772838][ T1108] pantherlord 0003:0E8F:0003.0001: item fetching failed at offset 26/39 [ 228.846225][ T1108] pantherlord 0003:0E8F:0003.0001: parse failed [ 228.883555][ T1108] pantherlord: probe of 0003:0E8F:0003.0001 failed with error -22 [ 228.934900][ T1108] usb 3-1: USB disconnect, device number 5 [ 228.961139][ T6448] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 229.056954][ T6448] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 229.179333][ T6448] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.606: corrupted xattr block 252 [ 229.194898][ T6448] EXT4-fs (loop1): Remounting filesystem read-only [ 229.201652][ T6448] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 229.210987][ T6448] EXT4-fs (loop1): 1 orphan inode deleted [ 229.216730][ T6448] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000002,mblk_io_submit,noquota,nodiscard,nodiscard,usrjquota=,norecovery,init_itable=0x0000000000000000,. Quota mode: none. [ 232.817876][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 232.957063][ T6492] bridge1: port 1(erspan0) entered blocking state [ 233.003479][ T6492] bridge1: port 1(erspan0) entered disabled state [ 233.086228][ T6492] device erspan0 entered promiscuous mode [ 233.115070][ T6492] bridge1: port 1(erspan0) entered blocking state [ 233.121642][ T6492] bridge1: port 1(erspan0) entered forwarding state [ 233.323158][ T6513] loop9: detected capacity change from 0 to 7 [ 233.391157][ T6476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.614'. [ 233.420875][ T26] audit: type=1326 audit(1785862868.349:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.1.625" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fede77a2019 code=0x0 [ 233.467284][ T6513] Dev loop9: unable to read RDB block 7 [ 233.516340][ T6513] loop9: unable to read partition table [ 233.546020][ T6520] loop_set_status: loop9 (úù) has still dirty pages (nrpages=1) [ 233.558336][ T6513] loop9: partition table beyond EOD, truncated [ 233.594018][ T6513] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 235.274399][ T6548] 8021q: VLANs not supported on ip6tnl0 [ 237.516027][ T6570] loop2: detected capacity change from 0 to 256 [ 239.898590][ T6570] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 240.616473][ T5185] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 242.173189][ T6594] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 242.503685][ T6606] loop2: detected capacity change from 0 to 2048 [ 242.946877][ T6606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.272923][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 243.649232][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 244.697315][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 244.849533][ T7] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 245.343778][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 245.507620][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.539203][ T7] usb 1-1: Product: syz [ 245.547044][ T7] usb 1-1: Manufacturer: syz [ 245.586595][ T7] usb 1-1: SerialNumber: syz [ 245.684734][ T7] usb 1-1: config 0 descriptor?? [ 246.009569][ T7] usb 1-1: can't set config #0, error -71 [ 246.097222][ T7] usb 1-1: USB disconnect, device number 7 [ 246.718594][ T6647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 247.187242][ T6660] binder: 6636:6660 ioctl 4018620d 0 returned -22 [ 247.195614][ T6660] binder: 6636:6660 ioctl c0306201 0 returned -14 [ 250.057997][ T6694] device syzkaller0 entered promiscuous mode [ 251.716409][ T6714] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 251.736254][ T6720] binder_alloc: 6706: binder_alloc_buf, no vma [ 251.773029][ T6714] device bond2 entered promiscuous mode [ 251.785702][ T6714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.887626][ T1108] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.928614][ T6714] bond2: (slave bridge2): making interface the new active one [ 251.971161][ T6714] device bridge2 entered promiscuous mode [ 251.979615][ T6714] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 251.989015][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 252.154039][ T6737] loop0: detected capacity change from 0 to 2048 [ 252.198351][ T6739] tipc: Failed to remove unknown binding: 66,0,0/0:2997598926/2997598927 [ 252.207505][ T6740] tipc: Failed to remove unknown binding: 66,0,0/0:2933305882/2933305884 [ 252.216274][ T6739] tipc: Failed to remove unknown binding: 66,0,0/0:2997598926/2997598927 [ 252.247538][ T6737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.579586][ T6744] loop0: detected capacity change from 0 to 2048 [ 252.836966][ T6754] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.279605][ T6779] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.309704][ T6778] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 253.335256][ T6778] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 253.396057][ T6782] loop0: detected capacity change from 0 to 4096 [ 253.437893][ T6782] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 253.581855][ T6785] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 253.635807][ T6791] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 254.495745][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.705'. [ 254.505177][ T6791] device bond2 entered promiscuous mode [ 254.522728][ T4187] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 254.546390][ T4187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 254.565486][ T6791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.613060][ T4187] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 254.660155][ T6796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.668444][ T6796] bond2: (slave bond3): making interface the new active one [ 254.676283][ T6796] device bond3 entered promiscuous mode [ 254.688734][ T6796] bond2: (slave bond3): Enslaving as an active interface with an up link [ 254.698538][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 254.882052][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.947214][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.659378][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.804870][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811237][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.913380][ T26] audit: type=1326 audit(1785862890.839:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 255.976977][ T6820] binder_alloc: 6811: binder_alloc_buf size 12224 failed, no address space [ 255.983527][ T6818] loop1: detected capacity change from 0 to 1024 [ 255.997952][ T26] audit: type=1326 audit(1785862890.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.011899][ T6820] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 256.086426][ T26] audit: type=1326 audit(1785862890.869:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.111032][ T26] audit: type=1326 audit(1785862890.869:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.135256][ T26] audit: type=1326 audit(1785862890.869:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.169603][ T26] audit: type=1326 audit(1785862890.869:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.208754][ T26] audit: type=1326 audit(1785862890.869:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.254944][ T6816] syz.0.713 (6816): drop_caches: 2 [ 256.287896][ T6818] hfsplus: invalid btree flag [ 256.294243][ T6818] hfsplus: failed to load extents file [ 256.300784][ T26] audit: type=1326 audit(1785862890.869:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.317112][ T6823] overlayfs: failed to resolve './bus': -2 [ 256.327022][ T26] audit: type=1326 audit(1785862890.869:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.503811][ T26] audit: type=1326 audit(1785862890.869:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fede77a2019 code=0x7ffc0000 [ 256.718882][ T6835] device bridge1 entered promiscuous mode [ 258.020240][ T6846] loop2: detected capacity change from 0 to 64 [ 258.395027][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 258.404796][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 258.407601][ T6874] loop2: detected capacity change from 0 to 512 [ 258.415852][ T6864] ceph: No mds server is up or the cluster is laggy [ 258.444061][ T6868] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 258.632381][ T6874] EXT4-fs (loop2): Ignoring removed bh option [ 258.681522][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 258.688354][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 258.749348][ T6874] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 259.864993][ T6874] EXT4-fs (loop2): 1 truncate cleaned up [ 259.877146][ T6874] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 260.267273][ T6914] device macsec1 entered promiscuous mode [ 260.283723][ T6914] device virt_wifi0 entered promiscuous mode [ 260.394868][ T6919] loop2: detected capacity change from 0 to 512 [ 260.458225][ T6919] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 260.504608][ T6919] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.747: corrupted in-inode xattr [ 260.517635][ T6919] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.747: couldn't read orphan inode 15 (err -117) [ 260.532367][ T6919] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,abort,,errors=continue. Quota mode: writeback. [ 260.649184][ T6930] xt_connbytes: Forcing CT accounting to be enabled [ 260.708991][ T6930] xt_CT: No such helper "netbios-ns" [ 261.027289][ T6948] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 261.113009][ T6948] EXT4-fs (loop0): unable to read superblock [ 261.338953][ T6958] xt_ipcomp: unknown flags 1D [ 261.434763][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.487051][ T6961] batman_adv: batadv0: Interface deactivated: dummy0 [ 261.525799][ T6961] batman_adv: batadv0: Removing interface: dummy0 [ 261.575916][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 261.602995][ T6961] device bridge_slave_0 left promiscuous mode [ 261.625772][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.653312][ T6961] device bridge_slave_1 left promiscuous mode [ 261.671795][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.700988][ T6961] bond0: (slave bond_slave_0): Releasing backup interface [ 261.746696][ T6961] bond0: (slave bond_slave_1): Releasing backup interface [ 261.921105][ T6961] team0: Port device team_slave_0 removed [ 261.979549][ T6961] team0: Port device team_slave_1 removed [ 262.028315][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.039598][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.062891][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.077693][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.326859][ T6961] bond1: (slave geneve3): Releasing active interface [ 262.409426][ T6961] bond2: (slave bond3): Releasing backup interface [ 262.439594][ T6961] device bond3 left promiscuous mode [ 262.559793][ T6970] smc: net device dummy0 applied user defined pnetid SYZ0 [ 262.953063][ T6997] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 263.419204][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.548622][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 264.927624][ T7048] device syzkaller0 entered promiscuous mode [ 265.967425][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.789'. [ 266.407238][ T7107] infiniband syz0: set down [ 266.419755][ T7107] infiniband syz0: added ipvlan1 [ 266.605234][ T7107] RDS/IB: syz0: added [ 266.629976][ T7107] smc: adding ib device syz0 with port count 1 [ 266.654218][ T7107] smc: ib device syz0 port 1 has pnetid [ 269.311247][ T7132] 9pnet: Insufficient options for proto=fd [ 269.340088][ T4203] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 269.433185][ T7138] loop0: detected capacity change from 0 to 1024 [ 269.695494][ T7144] tipc: Started in network mode [ 269.731724][ T7144] tipc: Node identity fa8a7de031b7, cluster identity 4711 [ 269.742468][ T7144] tipc: Enabled bearer , priority 0 [ 271.027329][ T4695] tipc: Node number set to 3409804768 [ 274.029172][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 274.029189][ T26] audit: type=1800 audit(1785862908.949:79): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.818" name="bus" dev="ramfs" ino=41724 res=0 errno=0 [ 274.270800][ T7196] device syzkaller0 left promiscuous mode [ 274.580883][ T4695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.589173][ T4695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.119411][ T4695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.127017][ T4695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.259282][ T1108] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 276.363145][ T7213] loop4: detected capacity change from 0 to 40427 [ 276.417506][ T7213] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 276.425885][ T7213] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 276.478862][ T7213] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.555746][ T7213] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 276.563347][ T7213] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 278.024965][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.036213][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.046457][ T1108] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 278.055769][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.356106][ T1108] usb 3-1: config 0 descriptor?? [ 278.546887][ T7235] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 278.546887][ T7235] The task syz.1.831 (7235) triggered the difference, watch for misbehavior. [ 278.569704][ T7237] net_ratelimit: 10 callbacks suppressed [ 278.569721][ T7237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 278.779219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.912502][ T1108] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 278.921407][ T1108] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 278.939828][ T1108] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 279.432634][ T1108] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 279.494426][ T1108] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 279.878889][ T1108] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 280.018633][ T1108] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 280.032302][ T1108] usb 3-1: USB disconnect, device number 6 [ 281.228977][ T7254] fido_id[7254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 281.546683][ T7268] xt_policy: output policy not valid in PREROUTING and INPUT [ 282.160241][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 282.307235][ T7284] loop0: detected capacity change from 0 to 512 [ 283.055284][ T7286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.844'. [ 283.097409][ T7286] loop4: detected capacity change from 0 to 16 [ 283.130030][ T7284] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 283.171581][ T7286] erofs: (device loop4): mounted with root inode @ nid 36. [ 283.198599][ T7289] ISOFS: Unable to identify CD-ROM format. [ 283.225369][ T4264] kernel write not supported for file /548/net/ip6_tables_matches (pid: 4264 comm: kworker/0:10) [ 283.253497][ T26] audit: type=1800 audit(1785862918.179:80): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.844" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 283.310974][ T7284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 283.329714][ T7284] System zones: 1-12 [ 283.364417][ T7284] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 283.386046][ T7284] EXT4-fs (loop0): 1 truncate cleaned up [ 283.429589][ T7299] No such timeout policy "syz1" [ 283.445634][ T7284] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 283.688203][ T7305] xt_CONNSECMARK: invalid mode: 0 [ 284.467470][ T7312] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 284.484177][ T7312] device syzkaller0 entered promiscuous mode [ 285.556021][ T7320] loop4: detected capacity change from 0 to 128 [ 285.617361][ T7320] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 285.685621][ T7320] ext4 filesystem being mounted at /181/file1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.244204][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 290.033568][ T7383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.305262][ T7387] binder_alloc: 7386: pid 7386 spamming oneway? 2 buffers allocated for a total size of 5120 [ 290.474672][ T7391] binder_alloc: 7386: pid 7386 spamming oneway? 3 buffers allocated for a total size of 5128 [ 291.626801][ T7407] netlink: 14 bytes leftover after parsing attributes in process `syz.0.878'. [ 291.728282][ T7407] bond2: (slave macvlan2): Releasing backup interface [ 291.790505][ T7407] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 291.848684][ T7407] bond0 (unregistering): Released all slaves [ 292.155586][ T7415] loop0: detected capacity change from 0 to 512 [ 292.210443][ T7415] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.403144][ T7413] loop2: detected capacity change from 0 to 4096 [ 292.490350][ T7413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 292.599546][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 292.619838][ T7413] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 293.003167][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 293.019183][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.044657][ T7] usb 1-1: config 0 descriptor?? [ 293.286549][ T7411] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 293.396243][ T7411] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 293.811381][ T7] ath6kl: Failed to submit usb control message: -71 [ 293.818175][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 293.830438][ T7] ath6kl: Unable to send get target info: -71 [ 293.849762][ T7] ath6kl: Failed to init ath6kl core: -71 [ 293.941701][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 293.968116][ T7] usb 1-1: USB disconnect, device number 8 [ 296.473155][ T7474] loop0: detected capacity change from 0 to 164 [ 299.174949][ T7499] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.023031][ T7507] MPTCP: kernel_bind error, err=-99 [ 302.120725][ T7524] binder: 7521:7524 ioctl c0306201 200000002580 returned -14 [ 303.194723][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 304.993424][ T7549] loop0: detected capacity change from 0 to 8 [ 305.065306][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 305.076366][ T7549] squashfs: Unknown parameter '/dev/cuse' [ 307.022001][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 308.059178][ T7563] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.069868][ T7563] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.078608][ T7563] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.087460][ T7563] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.223326][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready [ 308.801362][ T7576] loop0: detected capacity change from 0 to 131072 [ 308.850282][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 308.955020][ T7576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.006923][ T7576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.099373][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 309.225279][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.267678][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.332878][ T7540] device bridge_slave_0 entered promiscuous mode [ 309.342343][ T7591] loop2: detected capacity change from 0 to 4096 [ 310.440186][ T7591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 310.495303][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.545089][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.640355][ T7540] device bridge_slave_1 entered promiscuous mode [ 310.773281][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.782504][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.851092][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.527029][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 311.850102][ T7540] team0: Port device team_slave_0 added [ 311.891400][ T7540] team0: Port device team_slave_1 added [ 311.898540][ T7613] netlink: 'syz.1.939': attribute type 11 has an invalid length. [ 311.953337][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.995112][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.149474][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.293886][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.304652][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.551831][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.179125][ T7624] team0: Port device xfrm0 added [ 313.417302][ T7630] tipc: Started in network mode [ 313.424114][ T7630] tipc: Node identity 92573b25d936, cluster identity 4711 [ 313.439670][ T7630] tipc: Enabled bearer , priority 0 [ 313.543969][ T7540] device hsr_slave_0 entered promiscuous mode [ 313.646259][ T7540] device hsr_slave_1 entered promiscuous mode [ 313.753084][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.063459][ T7540] Cannot create hsr debugfs directory [ 314.307954][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 314.470954][ T4695] tipc: Node number set to 1264663333 [ 314.885429][ T7652] device syzkaller0 entered promiscuous mode [ 316.550279][ T7540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.571337][ T7540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.619527][ T7540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.667995][ T7540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.884976][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.936569][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.973956][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.016651][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.062853][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.113657][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.114067][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.114181][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.114686][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.125120][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.125768][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.126213][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.126237][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.143721][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.181881][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.181935][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.209436][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.233023][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.235615][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.236053][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.236464][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.237265][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.237623][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.238134][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.243699][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.244275][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.248434][ T7540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.715989][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.716140][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.733808][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.762053][ T4695] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.971091][ T7720] device vlan3 entered promiscuous mode [ 319.038499][ T7720] device syz_tun entered promiscuous mode [ 319.632241][ T4695] usb 3-1: Using ep0 maxpacket: 16 [ 320.059675][ T4695] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 320.071846][ T4695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 320.083454][ T4695] usb 3-1: config 0 has no interface number 0 [ 320.089871][ T4695] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.161196][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.177984][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.206926][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.216008][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.248047][ T7540] device veth0_vlan entered promiscuous mode [ 320.262663][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.271461][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.307320][ T7540] device veth1_vlan entered promiscuous mode [ 320.314270][ T4695] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 320.329119][ T4695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.352543][ T4695] usb 3-1: Product: syz [ 320.356754][ T4695] usb 3-1: Manufacturer: syz [ 320.381766][ T4695] usb 3-1: SerialNumber: syz [ 320.384522][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.392119][ T4695] usb 3-1: config 0 descriptor?? [ 320.424104][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.452888][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.477737][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.498616][ T7540] device veth0_macvtap entered promiscuous mode [ 320.524072][ T7540] device veth1_macvtap entered promiscuous mode [ 320.568273][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.576002][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.585085][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.593704][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.603209][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.625032][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.644308][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.670511][ T4695] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 320.678944][ T4695] nokiaca42v2 ttyUSB0: required endpoint is missing [ 320.686887][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.698237][ T7540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.717492][ T4695] usb 3-1: USB disconnect, device number 7 [ 320.726842][ T7540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.740527][ T4695] cypress_m8 3-1:0.35: device disconnected [ 320.752095][ T7540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.795263][ T7540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.925812][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 320.951822][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 320.984885][ T5185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.009742][ T5185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.042428][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.158151][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.169908][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.259932][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.453144][ T7759] team0: Device xfrm0 is of different type [ 323.989488][ T7764] tipc: Started in network mode [ 323.994448][ T7764] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 324.106125][ T7764] tipc: Enabled bearer , priority 0 [ 325.459156][ T4687] tipc: Node number set to 11578026 [ 327.536386][ T7797] No source specified [ 329.381760][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 329.426525][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 331.259589][ T7832] device ip6_vti0 entered promiscuous mode [ 331.282503][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 332.734668][ T7850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.743927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.368384][ T7861] loop5: detected capacity change from 0 to 128 [ 333.447130][ T7861] EXT4-fs (loop5): Test dummy encryption mode enabled [ 333.601765][ T7861] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 333.617969][ T7861] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.797785][ T7893] loop5: detected capacity change from 0 to 1024 [ 334.813651][ T7892] device ip6_vti0 entered promiscuous mode [ 334.837125][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 334.869847][ T7893] EXT4-fs (loop5): Test dummy encryption mode enabled [ 334.928706][ T7893] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 335.067420][ T7910] ipt_REJECT: TCP_RESET invalid for non-tcp [ 335.214622][ T7915] loop2: detected capacity change from 0 to 2048 [ 335.271547][ T7918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.950701][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.976324][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.455822][ T7945] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 337.597902][ T7949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.607495][ T7949] bond0: (slave bond3): making interface the new active one [ 337.615332][ T7949] bond0: (slave bond3): Enslaving as an active interface with an up link [ 337.628681][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 337.646213][ T7945] device bond0 entered promiscuous mode [ 338.090643][ T7945] device bond3 entered promiscuous mode [ 338.310599][ T7956] loop2: detected capacity change from 0 to 1024 [ 338.382266][ T7956] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 338.396517][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.417466][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.444126][ T7956] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 338.453471][ T7956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.460337][ T7956] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1046: Freeing blocks not in datazone - block = 0, count = 4096 [ 338.500368][ T7956] EXT4-fs (loop2): Remounting filesystem read-only [ 338.514910][ T7956] EXT4-fs (loop2): 1 orphan inode deleted [ 338.522107][ T7956] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 338.725440][ T7956] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 16: comm syz.2.1046: lblock 0 mapped to illegal pblock 16 (length 1) [ 339.455137][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.645858][ T7988] device macsec1 entered promiscuous mode [ 339.671657][ T7988] device virt_wifi0 entered promiscuous mode [ 340.020702][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.425845][ T8001] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1060'. [ 340.490327][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.604770][ T8009] binder_alloc: 8002: binder_alloc_buf size 12224 failed, no address space [ 340.679811][ T8009] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 341.667347][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.701552][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.968565][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.169459][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.178314][ T8028] ipt_REJECT: TCP_RESET invalid for non-tcp [ 343.247636][ T8003] syz.5.1048 (8003): drop_caches: 2 [ 343.604698][ T4687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.725498][ T8033] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1069'. [ 343.874069][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 343.974886][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 344.104714][ T8033] netlink: 'syz.3.1069': attribute type 11 has an invalid length. [ 344.117468][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.332752][ T8045] device syzkaller0 entered promiscuous mode [ 344.379631][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1061'. [ 346.827955][ T4687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.953681][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.959005][ T8073] device ipip0 entered promiscuous mode [ 347.742128][ T8074] orangefs_mount: mount request failed with -4 [ 347.917049][ T4687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.796997][ T8093] loop2: detected capacity change from 0 to 256 [ 349.011116][ T4687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.014259][ T8093] FAT-fs (loop2): Directory bread(block 64) failed [ 349.068137][ T8104] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 349.089196][ T8093] FAT-fs (loop2): Directory bread(block 65) failed [ 349.095832][ T8093] FAT-fs (loop2): Directory bread(block 66) failed [ 349.124267][ T8093] FAT-fs (loop2): Directory bread(block 67) failed [ 349.149416][ T8093] FAT-fs (loop2): Directory bread(block 68) failed [ 349.169699][ T8093] FAT-fs (loop2): Directory bread(block 69) failed [ 349.170447][ T8104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.176328][ T8093] FAT-fs (loop2): Directory bread(block 70) failed [ 349.190568][ T8093] FAT-fs (loop2): Directory bread(block 71) failed [ 349.197161][ T8093] FAT-fs (loop2): Directory bread(block 72) failed [ 349.203765][ T8093] FAT-fs (loop2): Directory bread(block 73) failed [ 349.311784][ T8110] bond2: (slave gretap1): making interface the new active one [ 349.356233][ T8110] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 349.416168][ T8113] loop5: detected capacity change from 0 to 512 [ 349.442675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 349.567395][ T8113] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 349.710335][ T8113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 349.747815][ T8113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 349.935263][ T8113] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1082: bad orphan inode 267 [ 350.059855][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.212562][ T8113] EXT4-fs (loop5): Remounting filesystem read-only [ 350.417406][ T8113] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 350.528884][ T4260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.617581][ T8113] ip6t_srh: unknown srh invflags 4000 [ 350.787552][ T8146] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1082: dx entry: limit 0 != root limit 125 [ 351.876001][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.924962][ T8146] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1082: Corrupt directory, running e2fsck is recommended [ 351.988414][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.176277][ T8162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.185294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.225813][ T8162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.265853][ T8162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.274415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.505110][ T8182] device syzkaller0 entered promiscuous mode [ 353.694614][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1108'. [ 353.742176][ T8193] loop2: detected capacity change from 0 to 1024 [ 353.789342][ T8193] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 353.941643][ T8193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 353.957154][ T8193] System zones: 0-1, 3-12 [ 354.226848][ T8193] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 354.670383][ T8202] device syzkaller0 entered promiscuous mode [ 354.709151][ T4265] net_ratelimit: 8 callbacks suppressed [ 354.709169][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.811329][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.479228][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.573754][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.681851][ T8244] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 357.860540][ T8248] rdma_rxe: rxe_register_device failed with error -23 [ 357.868736][ T8248] rdma_rxe: failed to add ipvlan1 [ 357.929279][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 358.873423][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.929556][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.951578][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.062519][ T8264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1129'. [ 359.071789][ T7] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 359.082703][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.101818][ T7] usb 6-1: config 0 descriptor?? [ 359.108371][ T8264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.150194][ T8264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.174038][ T8264] 9pnet: Insufficient options for proto=fd [ 359.327830][ T8274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.347080][ T8274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.364058][ T8274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.056258][ T8284] net_ratelimit: 2 callbacks suppressed [ 360.056277][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.169742][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.222829][ T8274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.241920][ T7] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 360.252050][ T7] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 360.261029][ T7] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 360.268970][ T7] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 360.278298][ T7] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 360.278364][ T8298] No such timeout policy "syz1" [ 360.286135][ T7] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 360.326334][ T7] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 361.346213][ T7] usb 6-1: USB disconnect, device number 2 [ 361.418936][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.428014][ T4260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.436152][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.545504][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.579752][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.616030][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.616390][ T8305] fido_id[8305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 361.668211][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.871404][ T8331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 364.559437][ T8354] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 364.566747][ T8354] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 364.574229][ T8354] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 364.587502][ T8354] Error parsing options; rc = [-22] [ 364.799197][ T8366] cgroup: Invalid name [ 365.802554][ T8376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.833273][ T8376] net_ratelimit: 6 callbacks suppressed [ 365.833291][ T8376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.024446][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.188902][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.941594][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.669223][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.578867][ T8402] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 369.660013][ T8402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1177'. [ 369.758147][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.894541][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 370.014517][ T8412] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 370.377944][ T8427] loop0: detected capacity change from 0 to 16 [ 370.436862][ T8427] erofs: (device loop0): mounted with root inode @ nid 36. [ 370.931736][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.227684][ T8427] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 371.238341][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.247834][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.330014][ T8427] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 371.359321][ T8427] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 371.396390][ T8427] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 371.416815][ T8433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 371.428732][ T8433] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 371.778119][ T8445] loop0: detected capacity change from 0 to 1024 [ 372.716925][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.962557][ T8455] futex_wake_op: syz.2.1178 tries to shift op by 144; fix this program [ 375.999660][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 376.568992][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 376.581467][ T8491] trusted_key: encrypted_key: key user:syz not found [ 376.690408][ T8498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.706010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.719345][ T4687] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 376.735695][ T8498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.746396][ T8500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.755358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.772722][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.801836][ T8498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.969964][ T8501] tipc: Failed to remove unknown binding: 66,0,0/1264663333:2949054074/2949054076 [ 376.979467][ T8501] tipc: Failed to remove unknown binding: 66,0,0/1264663333:2949054074/2949054075 [ 376.990594][ T8501] tipc: Failed to remove unknown binding: 66,0,0/1264663333:2949054074/2949054076 [ 377.008463][ T4687] usb 1-1: Using ep0 maxpacket: 32 [ 377.013787][ T8501] tipc: Failed to remove unknown binding: 66,0,0/1264663333:2949054074/2949054075 [ 377.077031][ T8512] device syzkaller0 entered promiscuous mode [ 377.089128][ T4687] usb 1-1: device descriptor read/all, error -71 [ 377.349863][ T8526] tipc: Enabled bearer , priority 10 [ 377.394165][ T8530] siw: device registration error -23 [ 377.564923][ T8536] 9pnet_virtio: no channels available for device syz [ 377.759801][ T8506] ceph: No mds server is up or the cluster is laggy [ 377.780145][ T7] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 377.839853][ T8546] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 378.631471][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.803202][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 378.814456][ T8546] device bond4 entered promiscuous mode [ 378.821061][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.836190][ T8546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.918650][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.938637][ T8546] device bridge2 entered promiscuous mode [ 378.969782][ T8546] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 378.980635][ T5178] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 379.035348][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 379.096320][ T8550] device bridge3 entered promiscuous mode [ 379.120294][ T8550] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 379.134597][ T5185] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 381.028408][ T8575] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1214'. [ 381.227494][ T8583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.280184][ T8575] bond0 (unregistering): Released all slaves [ 381.289742][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 381.592527][ T8586] netlink: 'syz.5.1218': attribute type 1 has an invalid length. [ 381.626328][ T8586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.634294][ T8586] IPv6: NLM_F_CREATE should be set when creating new route [ 382.216778][ T8595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.389728][ T8595] device hsr0 entered promiscuous mode [ 382.486447][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 385.131815][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.140899][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.149513][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.158280][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.166764][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.183213][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.299972][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.326325][ T8633] netlink: 'syz.3.1230': attribute type 11 has an invalid length. [ 385.359447][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.503458][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.515226][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.567639][ T8650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 386.430812][ T8648] device ip6_vti0 left promiscuous mode [ 386.545825][ T8657] VFS: Mount too revealing [ 388.047417][ T8688] tipc: Failed to remove unknown binding: 66,1,1/0:4011935558/4011935560 [ 388.875980][ T8687] tipc: Failed to remove unknown binding: 66,1,1/0:4011935558/4011935560 [ 388.899521][ T8687] tipc: Failed to remove unknown binding: 66,1,1/0:4011935558/4011935560 [ 388.939298][ T8701] device syzkaller0 entered promiscuous mode [ 389.131257][ T8703] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 389.371606][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.533588][ T8708] bond0: (slave gretap1): making interface the new active one [ 389.559766][ T8708] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 389.584803][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 389.785310][ T8719] VFS: Mount too revealing [ 390.071268][ T8723] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1253'. [ 390.788776][ T4265] net_ratelimit: 22 callbacks suppressed [ 390.788797][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.905952][ T8739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.914458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.005527][ T8723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.044754][ T8723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.068528][ T8723] bond0 (unregistering): Released all slaves [ 391.086008][ T8733] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 391.166654][ T8733] device bond4 entered promiscuous mode [ 391.206555][ T8733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.269673][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.288574][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.333154][ T8734] bond4: (slave erspan1): making interface the new active one [ 391.359298][ T8734] device erspan1 entered promiscuous mode [ 391.374159][ T8734] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 391.405942][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.429176][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 392.460284][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.471747][ T4218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.531466][ T4218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.637272][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.052404][ T8784] device syzkaller0 entered promiscuous mode [ 394.252879][ T26] audit: type=1326 audit(1785863029.019:81): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.1272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3b2105019 code=0x0 [ 396.359976][ T4360] net_ratelimit: 3 callbacks suppressed [ 396.359997][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.481926][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.969733][ T8800] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 397.180906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.648991][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 397.692776][ T8811] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 397.744851][ T8810] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1275'. [ 397.879746][ T8810] bond0 (unregistering): Released all slaves [ 397.906763][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1286'. [ 398.678316][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.987824][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.192646][ T26] audit: type=1326 audit(1785863034.119:82): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.1.1288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fede77a2019 code=0x0 [ 399.869136][ T4265] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 400.358642][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.367052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.399615][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.759269][ T4265] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.139085][ T4265] usb 6-1: config 0 has no interfaces? [ 401.146171][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.154524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.375967][ T4266] net_ratelimit: 5 callbacks suppressed [ 401.375985][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.409346][ T4265] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 401.435915][ T4265] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 401.448285][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.475821][ T4265] usb 6-1: Product: syz [ 401.483288][ T4265] usb 6-1: SerialNumber: syz [ 401.508902][ T4265] usb 6-1: config 0 descriptor?? [ 401.840463][ T4265] usb 6-1: USB disconnect, device number 3 [ 402.723201][ T4424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.808287][ T4424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.684106][ T8886] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 404.409443][ T5191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.419430][ T5191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.517870][ T8897] device bond5 entered promiscuous mode [ 404.529511][ T8897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.536963][ T8901] netlink: 'syz.1.1306': attribute type 12 has an invalid length. [ 404.652484][ T8888] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 404.851825][ T8903] device bridge2 entered promiscuous mode [ 404.870983][ T4424] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 404.972802][ T8903] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 405.049220][ T5178] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 405.102959][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 405.194167][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 405.547188][ T8919] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 405.741192][ T8919] bond5: (slave veth3): Enslaving as an active interface with a down link [ 405.759810][ T8930] xt_hashlimit: max too large, truncated to 1048576 [ 405.852470][ T8931] bond5: (slave macvlan1): Enslaving as an active interface with a down link [ 406.019264][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.092802][ T8919] bond5 (unregistering): (slave veth3): Releasing active interface [ 406.289890][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 406.418368][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.462216][ T8919] bond5 (unregistering): (slave macvlan1): Releasing active interface [ 406.546293][ T8919] bond5 (unregistering): Released all slaves [ 406.580066][ T4231] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 406.649439][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 406.693431][ T8937] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1314'. [ 406.707418][ T4231] usb 1-1: Product: syz [ 406.732501][ T4231] usb 1-1: Manufacturer: syz [ 406.783551][ T4231] usb 1-1: config 0 descriptor?? [ 406.820671][ T8943] tipc: Enabling of bearer rejected, failed to enable media [ 406.851417][ T4231] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 408.801791][ T4231] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 408.808806][ T4231] gspca_pac7302: probe of 1-1:0.0 failed with error -110 [ 408.937415][ T4231] usb 1-1: USB disconnect, device number 11 [ 409.663280][ T8970] autofs4:pid:8970:autofs_fill_super: called with bogus options [ 411.220136][ T8986] device syzkaller0 entered promiscuous mode [ 413.698617][ T9020] device syzkaller0 entered promiscuous mode [ 413.760356][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 413.824728][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 414.948534][ T9047] device syzkaller1 entered promiscuous mode [ 414.981598][ T9052] nftables ruleset with unbound chain [ 416.251352][ T9084] sctp: [Deprecated]: syz.1.1361 (pid 9084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.251352][ T9084] Use struct sctp_sack_info instead [ 416.363856][ T9086] sctp: [Deprecated]: syz.1.1361 (pid 9086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.363856][ T9086] Use struct sctp_sack_info instead [ 417.008363][ T9092] batadv_slave_0: Caught tx_queue_len zero misconfig [ 417.038450][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1363'. [ 418.920267][ T9136] tipc: Started in network mode [ 418.949746][ T9136] tipc: Node identity 7aa75605bd4c, cluster identity 4711 [ 418.959639][ T9136] tipc: Enabled bearer , priority 0 [ 418.969768][ T9134] tipc: Started in network mode [ 418.974662][ T9134] tipc: Node identity 84e, cluster identity 4711 [ 418.993792][ T9134] tipc: Node number set to 2126 [ 419.085604][ T9144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.116011][ T9144] bond1: (slave macvlan2): making interface the new active one [ 419.130914][ T9144] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 419.185700][ T9150] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 420.079201][ T4231] tipc: Node number set to 3354088965 [ 420.197442][ T9168] syzkaller0: create flow: hash 1265292251 index 2 [ 420.263369][ T4231] syzkaller0: tun_net_xmit 76 [ 420.268985][ T4231] syzkaller0: tun_net_xmit 48 [ 420.289328][ T4260] syzkaller0: tun_net_xmit 76 [ 420.381424][ T9168] syzkaller0: delete flow: hash 1265292251 index 2 [ 420.413188][ T4260] syzkaller0: tun_net_xmit 76 [ 420.473406][ T4260] syzkaller0: tun_net_xmit 76 [ 420.484232][ T4260] syzkaller0: tun_net_xmit 76 [ 421.585235][ T9195] overlayfs: failed to clone upperpath [ 421.633722][ T9199] device syzkaller0 entered promiscuous mode [ 421.712789][ T9203] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1395'. [ 421.915187][ T9209] device syzkaller0 entered promiscuous mode [ 423.829182][ T4231] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 424.099768][ T9237] SET target dimension over the limit! [ 424.442008][ T4233] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 424.739330][ T4233] usb 6-1: no configurations [ 424.746910][ T4233] usb 6-1: can't read configurations, error -22 [ 424.753674][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.770172][ T4231] usb 1-1: config 0 has no interfaces? [ 424.822140][ T9253] IPVS: stopping master sync thread 9254 ... [ 424.827750][ T9254] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 424.899278][ T4231] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 424.913103][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 424.923881][ T4233] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 424.931892][ T4231] usb 1-1: Product: syz [ 424.936528][ T4231] usb 1-1: SerialNumber: syz [ 424.951355][ T4231] usb 1-1: config 0 descriptor?? [ 425.130157][ T9265] tipc: Enabling of bearer rejected, failed to enable media [ 425.211719][ T4233] usb 6-1: no configurations [ 425.252231][ T4233] usb 6-1: can't read configurations, error -22 [ 425.424090][ T4233] usb usb6-port1: attempt power cycle [ 425.789973][ T4231] usb 1-1: USB disconnect, device number 12 [ 425.969245][ T4233] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 426.022934][ T9275] device gretap1 entered promiscuous mode [ 426.040967][ T9275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 426.054854][ T9275] bond5: (slave macvlan3): making interface the new active one [ 426.064133][ T9275] bond5: (slave macvlan3): Enslaving as an active interface with an up link [ 426.087657][ T9275] syz.1.1416 (9275) used greatest stack depth: 18784 bytes left [ 427.034992][ T4233] usb 6-1: no configurations [ 427.042979][ T4233] usb 6-1: can't read configurations, error -22 [ 427.177397][ T9289] tipc: Enabled bearer , priority 0 [ 427.200883][ T9289] device syzkaller0 entered promiscuous mode [ 427.352365][ T9289] tipc: Resetting bearer [ 427.391854][ T9286] tipc: Resetting bearer [ 428.064231][ T9286] tipc: Disabling bearer [ 429.331748][ T9323] netlink: 'syz.5.1429': attribute type 10 has an invalid length. [ 430.657090][ T9346] tipc: Enabled bearer , priority 0 [ 430.854630][ T9346] device syzkaller0 entered promiscuous mode [ 431.055885][ T9346] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1436'. [ 431.070383][ T9355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.103016][ T9354] device syzkaller0 entered promiscuous mode [ 431.154185][ T9356] tipc: Resetting bearer [ 431.190602][ T9344] tipc: Resetting bearer [ 431.207449][ T9344] tipc: Disabling bearer [ 431.225858][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 431.237126][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.309699][ T9364] UBIFS error (pid: 9364): cannot open "./file0", error -22 [ 431.331938][ T9364] loop5: detected capacity change from 0 to 256 [ 431.369550][ T9366] loop0: detected capacity change from 0 to 64 [ 432.059325][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 433.021371][ T9391] loop0: detected capacity change from 0 to 16 [ 433.894097][ T9391] erofs: (device loop0): mounted with root inode @ nid 36. [ 434.082291][ T9391] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 434.150890][ T9391] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 434.213837][ T9408] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 434.279515][ T9408] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 434.349239][ T9411] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 434.358811][ T9411] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 434.660316][ T9426] tipc: Enabling of bearer rejected, failed to enable media [ 434.984570][ T9445] binder: 9442:9445 ioctl c0306201 200000002580 returned -14 [ 435.227613][ T9451] xt_SECMARK: invalid mode: 2 [ 435.828171][ T9456] tipc: Enabling of bearer rejected, failed to enable media [ 435.976012][ T9464] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1465'. [ 436.256800][ T9475] tipc: Enabled bearer , priority 0 [ 436.282284][ T9475] device syzkaller0 entered promiscuous mode [ 436.529938][ T9475] tipc: Resetting bearer [ 436.543932][ T9468] tipc: Resetting bearer [ 437.979917][ T9468] tipc: Disabling bearer [ 440.200633][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.207000][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.297436][ T9529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.304742][ T9529] IPv6: NLM_F_CREATE should be set when creating new route [ 440.549859][ T9535] device syzkaller0 entered promiscuous mode [ 440.557477][ T9535] 0: reclassify loop, rule prio 0, protocol 700 [ 440.562133][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 440.662546][ T26] audit: type=1107 audit(1785863075.569:83): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 440.837891][ T9538] device macvtap1 entered promiscuous mode [ 440.918771][ T9538] device dummy0 entered promiscuous mode [ 441.011661][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 442.549279][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 447.390302][ T9628] tipc: Enabling of bearer rejected, already enabled [ 447.538653][ T9626] syz.0.1517 sent an empty control message without MSG_MORE. [ 452.003972][ T9672] netlink: 'syz.0.1527': attribute type 10 has an invalid length. [ 452.012174][ T9672] device veth1_vlan left promiscuous mode [ 452.020691][ T9672] team0: Device veth1_vlan failed to register rx_handler [ 453.757424][ T9704] tipc: Enabled bearer , priority 4 [ 455.132403][ T9718] xt_HMARK: spi-set and port-set can't be combined [ 456.890150][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 457.083486][ T9751] overlayfs: failed to clone upperpath [ 458.987432][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1552'. [ 467.474432][ T9856] device syzkaller0 entered promiscuous mode [ 467.702678][ T9858] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 468.217452][ T9870] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 468.227039][ T9870] qfq: no options [ 472.616722][ T9931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.659302][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.949255][ T9943] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 474.019633][ T9943] qfq: no options [ 479.000803][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 479.011391][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 479.021053][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 479.030650][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 479.040134][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 479.049191][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 482.706757][T10010] device syzkaller0 entered promiscuous mode [ 482.839918][T10021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.909185][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.634876][T10043] rt1711h 0-004e: check vid/pid fail [ 486.640597][T10043] rt1711h: probe of 0-004e failed with error -5 [ 486.647381][T10043] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 489.208746][T10068] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.437212][T10089] loop0: detected capacity change from 0 to 256 [ 490.619615][T10093] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1649'. [ 490.878919][T10097] netlink: 'syz.0.1647': attribute type 2 has an invalid length. [ 491.700831][T10107] loop0: detected capacity change from 0 to 256 [ 491.792677][T10115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.585319][T10107] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 492.656410][T10107] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.064403][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.083525][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.093659][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.104377][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.114596][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.124071][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 496.065492][T10147] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 496.072581][T10147] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 496.086817][T10147] vhci_hcd vhci_hcd.0: Device attached [ 496.131618][T10147] netlink: 'syz.0.1661': attribute type 12 has an invalid length. [ 496.409422][ T4231] usb 34-1: SetAddress Request (2) to port 0 [ 496.424230][ T4231] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 496.473109][T10149] vhci_hcd: connection closed [ 496.478486][ T5185] vhci_hcd: stop threads [ 496.548079][ T5185] vhci_hcd: release socket [ 496.621810][ T5185] vhci_hcd: disconnect device [ 499.671282][T10186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.726094][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.734521][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.742873][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.751240][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.759570][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.767917][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.776263][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.784600][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.792925][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.801298][T10187] tc action pedit unable to extract header offset for header type (0x4) [ 499.809641][T10187] 0: reclassify loop, rule prio 0, protocol 800 [ 500.722045][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.453788][T10204] loop5: detected capacity change from 0 to 256 [ 501.523003][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.529392][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.579581][ T4231] usb 34-1: device descriptor read/8, error -110 [ 502.547053][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'. [ 502.581212][ T4231] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 502.589370][ T4231] usb usb34-port1: attempt power cycle [ 502.999704][T10225] loop0: detected capacity change from 0 to 2048 [ 503.085512][T10225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.138617][T10226] kvm [10224]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000ce00 [ 503.309980][T10226] kvm [10224]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 503.315503][ T4231] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 503.353240][T10226] kvm [10224]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x10000ce00 [ 504.009075][ T4231] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 504.019396][ T4231] usb usb34-port1: unable to enumerate USB device [ 505.116792][T10255] loop0: detected capacity change from 0 to 512 [ 505.195157][T10255] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 505.255407][T10262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.323221][T10255] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 505.357512][T10255] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.619127][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.643892][T10288] fuse: Bad value for 'fd' [ 508.117563][T10304] tipc: Enabling of bearer rejected, failed to enable media [ 509.050535][T10313] smc: removing ib device syz0 [ 509.222100][T10318] tipc: Enabling of bearer rejected, failed to enable media [ 510.932667][T10343] device bridge0 entered promiscuous mode [ 510.960121][T10343] team0: Device bridge0 is of different type [ 513.757706][T10371] tipc: Enabling of bearer rejected, already enabled [ 513.833133][T10371] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 522.191614][T10454] loop5: detected capacity change from 0 to 64 [ 522.497876][T10466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.340515][T10487] xt_cgroup: path and classid specified [ 523.998560][T10499] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 524.009833][T10499] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 524.671305][T10510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.956126][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.545598][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 530.633697][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.590944][T10633] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.665286][T10634] loop5: detected capacity change from 0 to 1024 [ 534.797822][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 535.652477][T10634] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 535.808002][T10634] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.955002][T10644] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 540.614654][T10699] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 547.161041][T10768] netlink: 'syz.5.1828': attribute type 11 has an invalid length. [ 547.330353][T10758] tipc: Enabling of bearer rejected, failed to enable media [ 547.692596][T10773] syz.3.1831 (10773) used greatest stack depth: 16464 bytes left [ 551.752109][T10818] loop5: detected capacity change from 0 to 512 [ 551.795909][T10818] EXT4-fs (loop5): Ignoring removed oldalloc option [ 551.864200][T10818] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue. Quota mode: writeback. [ 551.887684][T10818] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.912580][T10818] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1845: corrupted inode contents [ 551.944115][T10818] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.1845: mark_inode_dirty error [ 551.956662][T10818] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1845: corrupted inode contents [ 551.977941][T10818] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1845: mark_inode_dirty error [ 554.213304][T10853] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 554.224429][T10853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 554.341305][T10863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.822657][T10945] o2cb: This node has not been configured. [ 560.829000][T10945] o2cb: Cluster check failed. Fix errors before retrying. [ 560.836278][T10945] (syz.5.1874,10945,1):user_dlm_register:675 ERROR: status = -22 [ 560.844135][T10945] (syz.5.1874,10945,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 562.969700][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.976072][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.052187][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 569.191003][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'. [ 569.550354][T11050] device bond0 left promiscuous mode [ 569.733387][T11050] device bond3 left promiscuous mode [ 569.870987][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.931126][T11050] bond2: (slave bond0): making interface the new active one [ 569.938884][T11050] bond2: (slave bond0): Enslaving as an active interface with an up link [ 569.940467][T11060] syz.5.1906 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 569.999258][T11052] netlink: 'syz.0.1903': attribute type 4 has an invalid length. [ 570.007030][T11052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1903'. [ 570.027757][T11060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.048252][T11059] tipc: Enabling of bearer rejected, already enabled [ 571.478379][T11093] loop5: detected capacity change from 0 to 64 [ 576.372793][T11141] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1931'. [ 579.466328][T11175] overlayfs: failed to clone upperpath [ 580.309826][ T26] audit: type=1326 audit(1785863214.909:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11168 comm="syz.5.1940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088b0bd019 code=0x0 [ 584.945878][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1957'. [ 585.189145][ T26] audit: type=1326 audit(1785863219.899:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.1.1958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fede77a2019 code=0x0 [ 588.439878][T11272] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11272] [ 588.468869][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.128886][ T26] audit: type=1326 audit(1785863226.049:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.2.1973" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x0 [ 591.753549][T11275] chnl_net:caif_netlink_parms(): no params data found [ 592.600469][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 592.609280][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.616363][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.632892][T11275] device bridge_slave_0 entered promiscuous mode [ 592.656808][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.664575][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.676384][T11275] device bridge_slave_1 entered promiscuous mode [ 594.171679][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.206384][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.964152][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 596.793254][T11275] team0: Port device team_slave_0 added [ 596.934516][T11275] team0: Port device team_slave_1 added [ 596.965493][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.360034][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.474715][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.602693][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.619918][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.645837][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.694989][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.059407][ T4265] Bluetooth: hci5: command 0x040f tx timeout [ 598.496522][T11275] device hsr_slave_0 entered promiscuous mode [ 598.525042][T11275] device hsr_slave_1 entered promiscuous mode [ 598.534844][T11275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.370873][T11275] Cannot create hsr debugfs directory [ 600.383792][T11397] loop5: detected capacity change from 0 to 256 [ 600.391715][ T1108] Bluetooth: hci5: command 0x0419 tx timeout [ 600.542025][T11395] tipc: Enabled bearer , priority 10 [ 601.369409][T11275] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.512324][T11275] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 601.536101][T11275] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.682898][T11275] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 601.774479][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.792862][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.830830][T11275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.841431][T11275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.899684][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.910566][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.962973][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.106926][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.299941][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.307115][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.719702][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.728550][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.759358][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.766487][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.815924][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.902711][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.911947][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.931560][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 603.020536][T11425] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 603.046454][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 603.421113][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 603.535262][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 603.560918][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 603.587507][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 603.624978][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 603.720222][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.738601][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 603.759623][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.045174][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.056112][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.289730][T11453] tipc: Enabling of bearer rejected, already enabled [ 605.300818][T11453] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 605.322408][T11454] loop5: detected capacity change from 0 to 1024 [ 605.323635][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.693911][T11454] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 608.021594][T11486] hugetlbfs: syz.0.2023 (11486): Using mlock ulimits for SHM_HUGETLB is deprecated [ 608.521639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.538848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.294992][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 609.383000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 609.490546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.601758][T11275] device veth0_vlan entered promiscuous mode [ 609.650285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.669423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.698373][T11275] device veth1_vlan entered promiscuous mode [ 609.732564][T11502] xt_CONNSECMARK: invalid mode: 254 [ 609.757290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.789686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.820864][T11275] device veth0_macvtap entered promiscuous mode [ 609.871374][T11275] device veth1_macvtap entered promiscuous mode [ 609.920474][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.949423][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.970703][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.991019][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.019108][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.050186][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.079568][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.665040][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.812954][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.831088][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.841053][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.850075][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.878502][T11275] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.893843][T11275] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.984479][T11275] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.005498][T11275] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.989400][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.963244][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.970952][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.852192][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.897224][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.904934][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.413081][T11570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.492127][T11570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.518027][T11570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.272254][T11570] device bridge_slave_0 left promiscuous mode [ 618.333358][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.430315][T11570] device bridge_slave_1 left promiscuous mode [ 618.448106][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.539496][T11570] bond0: (slave bond_slave_0): Releasing backup interface [ 618.590182][T11570] bond0: (slave bond_slave_1): Releasing backup interface [ 618.664675][T11570] team0: Port device team_slave_0 removed [ 618.687680][T11570] team0: Port device team_slave_1 removed [ 618.713539][T11570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.729355][T11570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.748314][T11570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.767237][T11570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.785562][T11576] device vlan0 entered promiscuous mode [ 618.962396][T11584] fuse: Unknown parameter '0x0000000000000004' [ 619.027501][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2049'. [ 619.499816][ T4194] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 623.515929][T11643] futex_wake_op: syz.0.2064 tries to shift op by -1; fix this program [ 624.698556][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.705054][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.917741][T11662] ip6t_srh: unknown srh match flags FF3F [ 625.487645][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2070'. [ 626.865720][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2072'. [ 627.549096][T11684] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2077'. [ 627.654253][T11687] loop6: detected capacity change from 0 to 64 [ 628.735176][T11705] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 629.525260][T11712] ksmbd: Unknown IPC event: 3, ignore. [ 629.825545][T11708] relay: one or more items not logged [item size (56) > sub-buffer size (14)] [ 632.336413][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 632.365433][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 634.461420][T11753] capability: warning: `syz.0.2094' uses 32-bit capabilities (legacy support in use) [ 635.946314][T11760] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 636.696601][T11779] loop6: detected capacity change from 0 to 512 [ 636.947007][T11779] EXT4-fs (loop6): Ignoring removed nobh option [ 637.072555][T11779] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 637.960088][T11779] EXT4-fs (loop6): 1 truncate cleaned up [ 637.969496][T11779] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 640.795683][T11813] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2107'. [ 645.046997][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 646.705478][T11874] overlayfs: failed to clone upperpath [ 648.359842][T11889] futex_wake_op: syz.0.2130 tries to shift op by 144; fix this program [ 648.884954][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2131'. [ 652.157486][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 652.279790][T11915] fuse: Bad value for 'fd' [ 655.506403][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 657.057614][T11958] No such timeout policy "syz1" [ 657.539437][T11961] loop6: detected capacity change from 0 to 256 [ 657.550258][T11960] device syzkaller0 entered promiscuous mode [ 657.744427][T11961] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 664.176826][ T4260] Process accounting resumed [ 664.266778][T12027] Process accounting resumed [ 665.584123][T12043] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 671.387934][T12090] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 672.907021][T12095] [U]  [ 674.902102][T12119] device wlan0 entered promiscuous mode [ 675.166398][T12126] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 675.926777][ T26] audit: type=1326 audit(1785863310.069:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 675.977515][T12119] batman_adv: batadv0: Adding interface: wlan0 [ 675.984057][T12119] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.026488][T12119] batman_adv: batadv0: Interface activated: wlan0 [ 676.045760][ T26] audit: type=1326 audit(1785863310.079:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.165073][ T26] audit: type=1326 audit(1785863310.079:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.318976][ T26] audit: type=1326 audit(1785863310.079:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.357743][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 676.650031][T12150] tmpfs: Bad value for 'mpol' [ 676.659309][ T26] audit: type=1326 audit(1785863310.079:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.753198][ T26] audit: type=1326 audit(1785863310.079:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.799190][ T26] audit: type=1326 audit(1785863310.079:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.825915][ T26] audit: type=1326 audit(1785863310.079:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 676.917338][ T26] audit: type=1326 audit(1785863310.079:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b2105019 code=0x7ffc0000 [ 677.200162][T12155] overlayfs: missing 'lowerdir' [ 677.267203][T12155] loop6: detected capacity change from 0 to 1024 [ 677.327692][ T26] audit: type=1326 audit(1785863310.079:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.2.2193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3b20c584e code=0x7ffc0000 [ 677.415507][T12155] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 677.427333][T12155] EXT4-fs (loop6): invalid journal inode [ 677.433152][T12155] EXT4-fs (loop6): can't get journal size [ 677.522078][T12155] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.2204: blocks 48-48 from inode overlap system zone [ 678.272675][T12155] EXT4-fs (loop6): failed to initialize system zone (-117) [ 678.280198][T12155] EXT4-fs (loop6): mount failed [ 681.494173][ T5185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.971437][ T5185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.194298][ T5185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.282561][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 684.648340][ T5185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.155500][T12250] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2230'. [ 685.231233][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2228'. [ 685.460523][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2231'. [ 685.473151][T12251] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.481977][T12251] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.490722][T12251] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.499501][T12251] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.137057][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2231'. [ 686.146976][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2231'. [ 686.184615][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.193159][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.298811][T12261] loop6: detected capacity change from 0 to 1024 [ 686.850336][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 686.865010][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2235'. [ 690.343309][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.350645][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.060766][T12310] overlayfs: failed to clone upperpath [ 693.116065][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.751339][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.147245][T12267] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.156268][T12267] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.165869][T12267] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.174784][T12267] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.489498][ T5185] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.539719][ T5185] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.580981][ T5185] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.704557][ T5185] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.110243][T12364] loop6: detected capacity change from 0 to 8 [ 697.650669][T12368] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 697.667077][T12368] ±ÿ: renamed from team_slave_1 [ 698.079724][T12362] SQUASHFS error: Unable to read directory block [631:26] [ 699.344939][ T5185] tipc: Disabling bearer [ 699.459956][ T5185] tipc: Left network mode [ 699.510029][T12395] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2262'. [ 699.613895][T12399] loop5: detected capacity change from 0 to 64 [ 701.114285][T12416] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 704.961198][T12448] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2276'. [ 705.054166][T12451] loop6: detected capacity change from 0 to 64 [ 707.660337][ T5185] bond2: (slave gretap1): Releasing active interface [ 708.261830][T12490] loop5: detected capacity change from 0 to 32768 [ 708.757041][ T5185] device hsr_slave_0 left promiscuous mode [ 708.805782][ T5185] device hsr_slave_1 left promiscuous mode [ 708.816022][ T5185] batman_adv: batadv0: Removing interface: dummy0 [ 708.826230][T12490] XFS (loop5): Mounting V5 Filesystem [ 708.840386][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.859266][ T5185] device bridge_slave_1 left promiscuous mode [ 708.866483][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.984905][ T5185] device bridge_slave_0 left promiscuous mode [ 709.243600][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.273083][T12490] XFS (loop5): Ending clean mount [ 709.288362][ T5185] device dummy0 left promiscuous mode [ 709.291432][T12490] XFS (loop5): Quotacheck needed: Please wait. [ 709.420038][T12490] XFS (loop5): Quotacheck: Done. [ 710.194747][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 710.194764][ T26] audit: type=1800 audit(1785863345.119:105): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2284" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 710.459334][ T5185] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 710.529983][ T7540] XFS (loop5): Unmounting Filesystem [ 711.123879][ T5185] bond2 (unregistering): Released all slaves [ 711.279825][T12523] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2292'. [ 711.292757][T12520] fuse: Unknown parameter '0x0000000000000004' [ 711.373078][ T5185] bond1 (unregistering): Released all slaves [ 713.297960][ T5185] team0 (unregistering): Port device team_slave_1 removed [ 713.397556][ T5185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.417240][ T5185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.500940][ T4264] Bluetooth: hci5: command 0x0406 tx timeout [ 713.636019][ T5185] bond0 (unregistering): Released all slaves [ 713.959056][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2285'. [ 717.160910][T12572] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2304'. [ 718.532013][T12598] loop5: detected capacity change from 0 to 512 [ 720.195568][T12615] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 720.235614][T12598] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2308: iget: bad i_size value: 38620345925642 [ 720.455542][T12598] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2308: couldn't read orphan inode 15 (err -117) [ 720.475123][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 720.489499][T12598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 720.509381][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 721.320285][T12614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 721.729385][T12617] team0: Port device xfrm0 removed [ 722.397331][T12634] loop6: detected capacity change from 0 to 1024 [ 722.428104][ T7540] [ 722.430482][ T7540] ====================================================== [ 722.437503][ T7540] WARNING: possible circular locking dependency detected [ 722.444527][ T7540] syzkaller #0 Not tainted [ 722.448959][ T7540] ------------------------------------------------------ [ 722.455995][ T7540] syz-executor/7540 is trying to acquire lock: [ 722.462159][ T7540] ffff8880230b0138 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 722.472012][ T7540] [ 722.472012][ T7540] but task is already holding lock: [ 722.479425][ T7540] ffff888020a3f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 722.488342][ T7540] [ 722.488342][ T7540] which lock already depends on the new lock. [ 722.488342][ T7540] [ 722.498761][ T7540] [ 722.498761][ T7540] the existing dependency chain (in reverse order) is: [ 722.507798][ T7540] [ 722.507798][ T7540] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 722.515295][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.521129][ T7540] mutex_lock_killable_nested+0x17/0x20 [ 722.527220][ T7540] lo_open+0x6a/0x100 [ 722.531743][ T7540] blkdev_get_whole+0x90/0x390 [ 722.535027][T12617] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready [ 722.537126][ T7540] blkdev_get_by_dev+0x2da/0xa50 [ 722.537153][ T7540] blkdev_open+0x128/0x2c0 [ 722.554831][ T7540] do_dentry_open+0x7f7/0xf90 [ 722.560133][ T7540] path_openat+0x2718/0x2fb0 [ 722.565282][ T7540] do_filp_open+0x1df/0x400 [ 722.570332][ T7540] do_sys_openat2+0x14b/0x500 [ 722.575545][ T7540] __x64_sys_openat+0x135/0x160 [ 722.580932][ T7540] do_syscall_64+0x4c/0xa0 [ 722.585906][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.592339][ T7540] [ 722.592339][ T7540] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 722.600183][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.605924][ T7540] mutex_lock_nested+0x17/0x20 [ 722.611228][ T7540] bd_register_pending_holders+0x33/0x310 [ 722.617535][ T7540] device_add_disk+0x572/0xd00 [ 722.622875][ T7540] md_alloc+0x80e/0xc10 [ 722.627584][ T7540] add_named_array+0x1bd/0x290 [ 722.632890][ T7540] param_attr_store+0x20a/0x300 [ 722.638340][ T7540] module_attr_store+0x5b/0x80 [ 722.643637][ T7540] kernfs_fop_write_iter+0x3a8/0x500 [ 722.649524][ T7540] vfs_write+0x748/0xd70 [ 722.654305][ T7540] ksys_write+0x153/0x260 [ 722.659172][ T7540] do_syscall_64+0x4c/0xa0 [ 722.664121][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.670550][ T7540] [ 722.670550][ T7540] -> #5 (disks_mutex){+.+.}-{3:3}: [ 722.677871][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.683612][ T7540] mutex_lock_nested+0x17/0x20 [ 722.688921][ T7540] md_alloc+0x48/0xc10 [ 722.693530][ T7540] add_named_array+0x1bd/0x290 [ 722.698828][ T7540] param_attr_store+0x20a/0x300 [ 722.704216][ T7540] module_attr_store+0x5b/0x80 [ 722.709515][ T7540] kernfs_fop_write_iter+0x3a8/0x500 [ 722.715336][ T7540] vfs_write+0x748/0xd70 [ 722.720108][ T7540] ksys_write+0x153/0x260 [ 722.724969][ T7540] do_syscall_64+0x4c/0xa0 [ 722.729919][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.736353][ T7540] [ 722.736353][ T7540] -> #4 (param_lock){+.+.}-{3:3}: [ 722.743587][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.749324][ T7540] mutex_lock_nested+0x17/0x20 [ 722.754619][ T7540] param_attr_show+0xc6/0x170 [ 722.759825][ T7540] module_attr_show+0x52/0x70 [ 722.765034][ T7540] sysfs_kf_seq_show+0x316/0x4c0 [ 722.770502][ T7540] seq_read_iter+0x460/0xc50 [ 722.775695][ T7540] vfs_read+0x75e/0xd50 [ 722.780379][ T7540] ksys_read+0x153/0x260 [ 722.785157][ T7540] do_syscall_64+0x4c/0xa0 [ 722.790104][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.796524][ T7540] [ 722.796524][ T7540] -> #3 (&of->mutex){+.+.}-{3:3}: [ 722.803717][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.809427][ T7540] mutex_lock_nested+0x17/0x20 [ 722.814718][ T7540] kernfs_seq_start+0x55/0x3c0 [ 722.819990][ T7540] seq_read_iter+0x387/0xc50 [ 722.825092][ T7540] vfs_read+0x75e/0xd50 [ 722.829760][ T7540] ksys_read+0x153/0x260 [ 722.834525][ T7540] do_syscall_64+0x4c/0xa0 [ 722.839452][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.845851][ T7540] [ 722.845851][ T7540] -> #2 (&p->lock){+.+.}-{3:3}: [ 722.852870][ T7540] __mutex_lock_common+0x1e5/0x2400 [ 722.858575][ T7540] mutex_lock_nested+0x17/0x20 [ 722.863847][ T7540] seq_read_iter+0x9d/0xc50 [ 722.868862][ T7540] do_iter_readv_writev+0x47d/0x5f0 [ 722.874613][ T7540] do_iter_read+0x201/0x7c0 [ 722.879643][ T7540] loop_process_work+0x16fd/0x24c0 [ 722.885298][ T7540] process_one_work+0x867/0xff0 [ 722.890664][ T7540] worker_thread+0xad7/0x12a0 [ 722.895862][ T7540] kthread+0x42e/0x520 [ 722.900450][ T7540] ret_from_fork+0x1f/0x30 [ 722.905407][ T7540] [ 722.905407][ T7540] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 722.914513][ T7540] process_one_work+0x7ba/0xff0 [ 722.919876][ T7540] worker_thread+0xad7/0x12a0 [ 722.925062][ T7540] kthread+0x42e/0x520 [ 722.929649][ T7540] ret_from_fork+0x1f/0x30 [ 722.934593][ T7540] [ 722.934593][ T7540] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 722.942658][ T7540] __lock_acquire+0x2c66/0x7b50 [ 722.948082][ T7540] lock_acquire+0x19e/0x400 [ 722.953097][ T7540] flush_workqueue+0x16a/0x1390 [ 722.958458][ T7540] drain_workqueue+0xca/0x370 [ 722.963642][ T7540] destroy_workqueue+0x7b/0xb20 [ 722.968999][ T7540] __loop_clr_fd+0x22f/0xb50 [ 722.974115][ T7540] blkdev_put+0x52b/0x780 [ 722.978962][ T7540] deactivate_locked_super+0x93/0xf0 [ 722.984782][ T7540] cleanup_mnt+0x426/0x4d0 [ 722.989714][ T7540] task_work_run+0x125/0x1a0 [ 722.994812][ T7540] exit_to_user_mode_loop+0x10f/0x130 [ 723.000730][ T7540] exit_to_user_mode_prepare+0xee/0x180 [ 723.006781][ T7540] syscall_exit_to_user_mode+0x16/0x40 [ 723.012747][ T7540] do_syscall_64+0x58/0xa0 [ 723.017685][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.024087][ T7540] [ 723.024087][ T7540] other info that might help us debug this: [ 723.024087][ T7540] [ 723.034299][ T7540] Chain exists of: [ 723.034299][ T7540] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 723.034299][ T7540] [ 723.047750][ T7540] Possible unsafe locking scenario: [ 723.047750][ T7540] [ 723.055183][ T7540] CPU0 CPU1 [ 723.060531][ T7540] ---- ---- [ 723.065879][ T7540] lock(&lo->lo_mutex); [ 723.070112][ T7540] lock(&disk->open_mutex); [ 723.077205][ T7540] lock(&lo->lo_mutex); [ 723.083954][ T7540] lock((wq_completion)loop5); [ 723.088791][ T7540] [ 723.088791][ T7540] *** DEADLOCK *** [ 723.088791][ T7540] [ 723.096918][ T7540] 2 locks held by syz-executor/7540: [ 723.102185][ T7540] #0: ffff888020874d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 723.111478][ T7540] #1: ffff888020a3f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 723.120696][ T7540] [ 723.120696][ T7540] stack backtrace: [ 723.126566][ T7540] CPU: 1 PID: 7540 Comm: syz-executor Not tainted syzkaller #0 [ 723.134094][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.144139][ T7540] Call Trace: [ 723.147410][ T7540] [ 723.150329][ T7540] dump_stack_lvl+0x188/0x250 [ 723.155020][ T7540] ? load_image+0x410/0x410 [ 723.159546][ T7540] ? show_regs_print_info+0x20/0x20 [ 723.164747][ T7540] ? print_circular_bug+0x12b/0x1a0 [ 723.169933][ T7540] check_noncircular+0x296/0x330 [ 723.174857][ T7540] ? add_chain_block+0x9b0/0x9b0 [ 723.179792][ T7540] ? lockdep_lock+0xf1/0x1f0 [ 723.184408][ T7540] ? mark_lock+0x94/0x320 [ 723.188723][ T7540] ? _find_first_zero_bit+0xd1/0xf0 [ 723.193952][ T7540] __lock_acquire+0x2c66/0x7b50 [ 723.198793][ T7540] ? __lock_acquire+0x7b50/0x7b50 [ 723.203822][ T7540] ? mark_lock+0x94/0x320 [ 723.208156][ T7540] ? verify_lock_unused+0x140/0x140 [ 723.213346][ T7540] ? verify_lock_unused+0x140/0x140 [ 723.218532][ T7540] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 723.224499][ T7540] ? __lock_acquire+0x7b50/0x7b50 [ 723.229517][ T7540] ? lock_chain_count+0x20/0x20 [ 723.234379][ T7540] ? __perf_event_task_sched_out+0xec0/0xec0 [ 723.240400][ T7540] ? finish_lock_switch+0x12d/0x290 [ 723.245627][ T7540] ? memset+0x1e/0x40 [ 723.249617][ T7540] lock_acquire+0x19e/0x400 [ 723.254110][ T7540] ? flush_workqueue+0x14e/0x1390 [ 723.259122][ T7540] ? __mutex_trylock_common+0x15c/0x260 [ 723.264654][ T7540] ? read_lock_is_recursive+0x10/0x10 [ 723.270036][ T7540] ? __init_swait_queue_head+0xa4/0x140 [ 723.275580][ T7540] flush_workqueue+0x16a/0x1390 [ 723.280425][ T7540] ? flush_workqueue+0x14e/0x1390 [ 723.285479][ T7540] ? lock_chain_count+0x20/0x20 [ 723.290319][ T7540] ? release_firmware_map_entry+0x190/0x190 [ 723.296215][ T7540] ? lockdep_hardirqs_off+0x70/0x100 [ 723.301491][ T7540] ? drain_workqueue+0x2f/0x370 [ 723.306329][ T7540] ? rcu_work_rcufn+0x120/0x120 [ 723.311167][ T7540] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 723.316788][ T7540] ? lock_chain_count+0x20/0x20 [ 723.321630][ T7540] drain_workqueue+0xca/0x370 [ 723.326299][ T7540] destroy_workqueue+0x7b/0xb20 [ 723.331141][ T7540] __loop_clr_fd+0x22f/0xb50 [ 723.335722][ T7540] ? bdev_evict_inode+0x30/0x30 [ 723.340566][ T7540] ? lo_release+0x15e/0x1f0 [ 723.345059][ T7540] ? lo_open+0x100/0x100 [ 723.349291][ T7540] blkdev_put+0x52b/0x780 [ 723.353610][ T7540] deactivate_locked_super+0x93/0xf0 [ 723.358893][ T7540] cleanup_mnt+0x426/0x4d0 [ 723.363301][ T7540] task_work_run+0x125/0x1a0 [ 723.367896][ T7540] exit_to_user_mode_loop+0x10f/0x130 [ 723.373254][ T7540] exit_to_user_mode_prepare+0xee/0x180 [ 723.378785][ T7540] syscall_exit_to_user_mode+0x16/0x40 [ 723.384235][ T7540] do_syscall_64+0x58/0xa0 [ 723.388643][ T7540] ? clear_bhb_loop+0x30/0x80 [ 723.393308][ T7540] ? clear_bhb_loop+0x30/0x80 [ 723.397988][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.403871][ T7540] RIP: 0033:0x7f088b0be257 [ 723.408275][ T7540] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 723.427878][ T7540] RSP: 002b:00007ffe7273ff48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 723.436306][ T7540] RAX: 0000000000000000 RBX: 00007f088b15345c RCX: 00007f088b0be257 [ 723.444271][ T7540] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72740000 [ 723.452233][ T7540] RBP: 00007ffe72740000 R08: 00007ffe72741000 R09: 00000000ffffffff [ 723.460196][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72741090 [ 723.468173][ T7540] R13: 00007f088b15345c R14: 00000000000af63e R15: 00007ffe727410d0 [ 723.476154][ T7540] [ 723.509129][T12617] bond4: (slave bridge2): Removing an active aggregator [ 723.539367][T12617] bond4: (slave bridge2): Releasing backup interface [ 723.550614][T12634] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 723.586361][T12617] bond4: (slave bridge2): the permanent HWaddr of slave - 62:d4:10:f8:72:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 723.607737][T12617] device bridge2 left promiscuous mode [ 723.625403][T12617] bond4: (slave bridge3): Releasing backup interface [ 723.635837][T12617] device bridge3 left promiscuous mode