last executing test programs: 2.746083279s ago: executing program 3 (id=374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 2.221483982s ago: executing program 2 (id=380): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file4\x00', 0x0, 0x0) 2.056589589s ago: executing program 3 (id=381): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.013324453s ago: executing program 2 (id=383): r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0xb, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 1.869510428s ago: executing program 2 (id=385): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/87, 0x57}], 0x1, &(0x7f00000009c0)=""/14, 0xe}, 0x2}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x10001, 0x4) 1.638905212s ago: executing program 1 (id=388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) unshare(0x22020600) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.381265468s ago: executing program 1 (id=390): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x17, "4d61501d0100ebffffff00001000000000008007000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="200f3c00000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x20, 0x12, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 997.301478ms ago: executing program 0 (id=393): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x318, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file4\x00', 0x0, 0x0) 865.872901ms ago: executing program 0 (id=394): r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0xb, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 763.435732ms ago: executing program 1 (id=395): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 665.090011ms ago: executing program 0 (id=396): socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, 0x0, 0xf4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./dev/mtdblock0\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./proc/fs/nfsd\x00') getdents(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x855be72723c259fb, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$comedi(0xffffff9c, &(0x7f0000000580)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000005c0)={'comedi_bond\x00', [0x4, 0x4, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0x9, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x4e, 0x14000003, 0x1e41a175, 0x9, 0xff, 0xffffffff, 0x2, 0x5, 0x18, 0x2, 0x2000006, 0x77fd]}) 611.929297ms ago: executing program 1 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./config\x00', &(0x7f0000000c40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='usbip-vudc.0', 0xc) 552.930643ms ago: executing program 3 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) syz_open_dev$loop(0x0, 0x0, 0x2) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000680)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 485.06961ms ago: executing program 2 (id=399): socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000400)='./file2\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xfd, 0x1501, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file2\x00', 0xa0440, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0xc6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10000, 0xfffffffe, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5a9, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 484.65875ms ago: executing program 0 (id=400): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) getsockopt$SO_NETNS_COOKIE(r3, 0x1, 0x47, 0x0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xfe) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file2\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file2\x00', 0x20402, 0xb6) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 465.793212ms ago: executing program 1 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000006c0)={0x400, 0x33, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7}, [@nested={0x3e9, 0x160, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0xf5, 0x0, 0x0, @uid}, @nested={0x4, 0x147}, @typed={0xc, 0x4a, 0x0, 0x0, @u64=0x9}, @generic="722dfd395c7dda70c8322bb36e4a84030bca9937f4ae5bff79533a05", @generic="9a7c3fee7e0977a1bca8f53f52125e90fa0313897469d3d792f83c2e437d69a3f4d2b6468cf970fd8403c671e287ad52effc4226e46c34dafc738c339544e5369565854a7e8fd786687e37fd7f23dbe06e1a1b471c1e4a3efd33e34a67cc1210e23ed82b5706f9f0c7eaa1380cac044e153ee4fcde8a04500001d2d156dde746a7717b182badcb12cf63647fcb844ecf49bf6226cec14ce310c06cea49dd5d1c68ea6623e8e6de664434f2197d207c433f4bd2cbae787905037bfb2bf91634b1b54b83824c7c530a7e78a103bc855660595fc845db18084e8dc92337fcc3f9fe5d02ea1ce143af70587cdc86b2d553139ecb400917575cc59c51d5f5be81dcfe763c1140e3cd4116891c23f35ec604f6cd9c4ec9b9ae8efc9ae08ab0680aaa36b81acf293350d33c1d97a572c11994284cddb6d32c045e90b7fa2799945c2184c7c9ab4dc4ef95ef28229b07953c1952a44efed5ee7649baf2a7d23981491f28efdcba2e4557def196cf9aa9e0ec85dff237670dcd2753bd9c16e56087b252189735deff2e5fb200bbe3364b65d6362080d91f442bedbf429c9dc943bea74843a5f85a4b2c8dc6be585cfcfd253dd3f7722b6cdf27e2c858f02fba0a58409325fcd879750b896b12830b7b02238824a5895c1dd3d922025fc3e35e927ed43fb82829cffd18af317cc0bbc65d937a9e6ac7902d9e8b2bc8b37c2216147a6031538df205459cda17b48390d0650b1d0cf69a6144349cfcc75671e97c01340a56484f9d46ebe0ad941de58f6c715ec44694dd57425669088ab49322afee456152f1917dc70e8f27ea550d87d6ca4806de5edaab47f210240c8f8e0d3a3449526db4cee43d7ddf65170562e7e6254ce0d91a2c03662f98182e71ead3fedd27498f7ab2a87ef3063e25d8c06288c8e734054214da5bc36c6239af744717cb8f4a0ccc8505239ed4037328c0d49b49669a87b75ec13f776a76cbc3f13ba763ca384db5354a57c3e520d28f429168c6b65c8ea963e0d458000fda6b1455dcd1e00bcfcb1705744980a434d1c228622916cda388788a509dbf6493423c2ca6103af09607542db316856a920de76e3c9435f7a3719e5fbeb3bd16e01b2f7ebcca7b3fcec2411ee490b0f00746ce12ed39878b6bb0a718e32203e9fb22e709c6683458c2a496c873249a1878e23170a861c39975f0bcd187de65ebec86a7e27d944c2405559bebec2abf523b95abb10198fa4d493a501caef62b6e62b2e6ec984f2ff7169134fb2c997f6b544c088f45c0f6bb72db57697cabf865ceddd2e7fc1d2508b9cc0bbf281fb2015261d10f4eac07"]}]}, 0x400}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 375.779441ms ago: executing program 3 (id=402): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 277.204701ms ago: executing program 1 (id=403): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x17, "4d61501d0100ebffffff00001000000000008007000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="200f3c00000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x20, 0x12, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 276.980821ms ago: executing program 0 (id=404): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x318, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file4\x00', 0x0, 0x0) 207.580828ms ago: executing program 3 (id=405): r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0xb, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 127.819536ms ago: executing program 2 (id=406): setns(0xc9, 0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2, 0x4e61, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000880}, 0x40) 77.180592ms ago: executing program 3 (id=407): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 63.587643ms ago: executing program 0 (id=408): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/87, 0x57}], 0x1, &(0x7f00000009c0)=""/14, 0xe}, 0x2}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x10001, 0x4) 0s ago: executing program 2 (id=409): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000640)="ef68", 0x2}], 0x1, 0x7fff, 0xf) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 67.434301][ T5769] cgroup: Unknown subsys name 'net' [ 67.594217][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.978705][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.521545][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.530152][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.546631][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.564862][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.572797][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.573218][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.587384][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.589246][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.602052][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.603864][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.616991][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.618689][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.624470][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.639107][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.647227][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.647389][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.654550][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.663482][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.668895][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.675751][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.689416][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.690172][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.704692][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.713667][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.781054][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 70.787591][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 70.794426][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.795380][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.813074][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 70.827144][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.837605][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 70.843344][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.851824][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.870162][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.088808][ T5781] infiniband rxe0: set active [ 71.095729][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.102485][ T5781] infiniband rxe0: added rxe_eth0 [ 71.159527][ T5781] RDS/IB: rxe0: added [ 71.164129][ T5781] smc: adding ib device rxe0 with port count 1 [ 71.172535][ T5781] smc: ib device rxe0 port 1 has pnetid [ 71.237191][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.244858][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.413483][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 71.427050][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.490716][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 71.501763][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.511187][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556157][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 71.782753][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.802863][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.810637][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.818173][ T5782] bridge_slave_0: entered allmulticast mode [ 71.825022][ T5782] bridge_slave_0: entered promiscuous mode [ 71.833052][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.877715][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.884922][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.893560][ T5782] bridge_slave_1: entered allmulticast mode [ 71.901263][ T5782] bridge_slave_1: entered promiscuous mode [ 71.950028][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.958633][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.965834][ T5780] bridge_slave_0: entered allmulticast mode [ 71.973907][ T5780] bridge_slave_0: entered promiscuous mode [ 71.984761][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.995856][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.007196][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.022250][ T5783] bridge_slave_0: entered allmulticast mode [ 72.029998][ T5783] bridge_slave_0: entered promiscuous mode [ 72.037532][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.044651][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.052486][ T5780] bridge_slave_1: entered allmulticast mode [ 72.059412][ T5780] bridge_slave_1: entered promiscuous mode [ 72.071015][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.090983][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.098207][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.105315][ T5783] bridge_slave_1: entered allmulticast mode [ 72.113864][ T5783] bridge_slave_1: entered promiscuous mode [ 72.182990][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.196047][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.219740][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.249465][ T5782] team0: Port device team_slave_0 added [ 72.261857][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.292773][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.332980][ T5782] team0: Port device team_slave_1 added [ 72.359146][ T5780] team0: Port device team_slave_0 added [ 72.398514][ T5780] team0: Port device team_slave_1 added [ 72.444222][ T5783] team0: Port device team_slave_0 added [ 72.468946][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.475932][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.506595][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.527692][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.534676][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.564649][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.582670][ T5783] team0: Port device team_slave_1 added [ 72.603455][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.610726][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.641062][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.670842][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.677963][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.718356][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.744519][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.752629][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.778821][ T5786] Bluetooth: hci0: command tx timeout [ 72.784463][ T5786] Bluetooth: hci3: command tx timeout [ 72.790805][ T5098] Bluetooth: hci1: command tx timeout [ 72.790869][ T5796] Bluetooth: hci2: command tx timeout [ 72.797434][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.848431][ T5782] hsr_slave_0: entered promiscuous mode [ 72.854706][ T5782] hsr_slave_1: entered promiscuous mode [ 72.864188][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.871379][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.897388][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.941400][ T5780] hsr_slave_0: entered promiscuous mode [ 72.948116][ T5780] hsr_slave_1: entered promiscuous mode [ 72.954292][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.962284][ T5780] Cannot create hsr debugfs directory [ 72.999298][ T5447] infiniband rxe0: set active [ 73.056873][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.070535][ T5783] hsr_slave_0: entered promiscuous mode [ 73.076946][ T5783] hsr_slave_1: entered promiscuous mode [ 73.082955][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.091412][ T5783] Cannot create hsr debugfs directory [ 73.358341][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 73.501089][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.514524][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.525326][ T5781] bridge_slave_0: entered allmulticast mode [ 73.532280][ T5781] bridge_slave_0: entered promiscuous mode [ 73.540807][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.554881][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.567058][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.574265][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.582010][ T5781] bridge_slave_1: entered allmulticast mode [ 73.589013][ T5781] bridge_slave_1: entered promiscuous mode [ 73.609699][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.620772][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.679728][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.708548][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.720959][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.760609][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.776154][ T5781] team0: Port device team_slave_0 added [ 73.783797][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.795166][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.813564][ T5781] team0: Port device team_slave_1 added [ 73.861546][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.869122][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.895240][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.931710][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.939994][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.966563][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.983588][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.993012][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.006880][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.027204][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.079947][ T5781] hsr_slave_0: entered promiscuous mode [ 74.087201][ T5781] hsr_slave_1: entered promiscuous mode [ 74.093781][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.101967][ T5781] Cannot create hsr debugfs directory [ 74.321846][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.335553][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.353642][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.363173][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.387090][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.432882][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.453827][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.468008][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.485760][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.493189][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.531877][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.542836][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.550048][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.571514][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.597114][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.604216][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.617370][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.624486][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.642083][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.649258][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.688421][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.695525][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.803777][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.856096][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.863752][ T5796] Bluetooth: hci2: command tx timeout [ 74.869363][ T5793] Bluetooth: hci3: command tx timeout [ 74.874783][ T5793] Bluetooth: hci1: command tx timeout [ 74.880315][ T5786] Bluetooth: hci0: command tx timeout [ 74.898489][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.974583][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.013611][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.020824][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.069922][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.077113][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.222648][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.308300][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.333153][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.422480][ T5780] veth0_vlan: entered promiscuous mode [ 75.471273][ T5782] veth0_vlan: entered promiscuous mode [ 75.487696][ T5780] veth1_vlan: entered promiscuous mode [ 75.510245][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.541040][ T5782] veth1_vlan: entered promiscuous mode [ 75.562775][ T5783] veth0_vlan: entered promiscuous mode [ 75.597080][ T5783] veth1_vlan: entered promiscuous mode [ 75.631430][ T5780] veth0_macvtap: entered promiscuous mode [ 75.643770][ T5781] veth0_vlan: entered promiscuous mode [ 75.659880][ T5782] veth0_macvtap: entered promiscuous mode [ 75.671684][ T5782] veth1_macvtap: entered promiscuous mode [ 75.679836][ T5780] veth1_macvtap: entered promiscuous mode [ 75.691705][ T5781] veth1_vlan: entered promiscuous mode [ 75.720264][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.733141][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.762361][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.771841][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781424][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.790275][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.815762][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.831470][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.845855][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.855337][ T5783] veth0_macvtap: entered promiscuous mode [ 75.872417][ T5783] veth1_macvtap: entered promiscuous mode [ 75.884985][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.895570][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.912315][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.931385][ T5781] veth0_macvtap: entered promiscuous mode [ 75.954424][ T5781] veth1_macvtap: entered promiscuous mode [ 75.973163][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.984322][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.993179][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001993][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.027606][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.039964][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.050301][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.061740][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.073489][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.093711][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.105431][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.117152][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.127882][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.142198][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.181179][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.193848][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.209464][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.221721][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.231705][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.242406][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.252314][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.262861][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.273821][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.282031][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294259][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303546][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.312554][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.354195][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.363838][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.367449][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.384315][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.394317][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.405208][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.415191][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.425696][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.437702][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.480725][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.494939][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.505577][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.514581][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.582717][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.612909][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.632479][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.667992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.676390][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.685423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.708682][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.803031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.828827][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.879804][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.904197][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.948891][ T5796] Bluetooth: hci2: command tx timeout [ 76.948919][ T5878] syz.0.1[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.954310][ T5796] Bluetooth: hci1: command tx timeout [ 76.966525][ T5793] Bluetooth: hci0: command tx timeout [ 76.969246][ T5098] Bluetooth: hci3: command tx timeout [ 77.009358][ T5878] loop0: detected capacity change from 0 to 256 [ 77.030845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.047929][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.061751][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.195256][ T5882] loop3: detected capacity change from 0 to 1024 [ 77.220578][ T5878] overlayfs: missing 'lowerdir' [ 77.237934][ T5882] ======================================================= [ 77.237934][ T5882] WARNING: The mand mount option has been deprecated and [ 77.237934][ T5882] and is ignored by this kernel. Remove the mand [ 77.237934][ T5882] option from the mount to silence this warning. [ 77.237934][ T5882] ======================================================= [ 77.293043][ T5882] EXT4-fs: inline encryption not supported [ 77.293102][ T5854] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 77.304721][ T5882] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 77.304721][ T5882] [ 77.325244][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.366147][ T5885] block device autoloading is deprecated and will be removed. [ 77.602515][ T5889] loop3: detected capacity change from 0 to 128 [ 77.630482][ T5889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.650290][ T5889] hpfs: filesystem error: improperly stopped [ 77.665928][ T5889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.676059][ T5889] hpfs: You really don't want any checks? You are crazy... [ 77.685437][ T5889] hpfs: Code page index out of array [ 77.691352][ T5889] hpfs: code page support is disabled [ 77.703242][ T5889] hpfs: hpfs_map_4sectors(): unaligned read [ 77.710093][ T5889] hpfs: hpfs_map_4sectors(): unaligned read [ 77.717806][ T5889] hpfs: filesystem error: unable to find root dir [ 77.751087][ T5889] hpfs: hpfs_map_4sectors(): unaligned read [ 77.876302][ T5785] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.202130][ T5785] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 78.475925][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 78.542898][ T5785] usb 2-1: Product: syz [ 78.565790][ T5785] usb 2-1: SerialNumber: syz [ 78.661889][ T5785] usb 2-1: config 0 descriptor?? [ 79.046907][ T5796] Bluetooth: hci1: command tx timeout [ 79.052574][ T5796] Bluetooth: hci0: command tx timeout [ 79.058693][ T5796] Bluetooth: hci3: command tx timeout [ 79.064203][ T5796] Bluetooth: hci2: command tx timeout [ 79.097605][ T5911] capability: warning: `syz.3.12' uses 32-bit capabilities (legacy support in use) [ 79.122896][ T5785] usb 2-1: USB disconnect, device number 2 [ 79.846194][ C0] sched: RT throttling activated [ 79.847270][ T5854] usb 3-1: Firmware version (0.0) predates our first public release. [ 79.870433][ T5854] usb 3-1: Please update to version 0.2 or newer [ 79.946038][ T5919] process 'syz.2.11' launched './file2' with NULL argv: empty string added [ 80.474730][ T28] audit: type=1326 audit(1793175607.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.0.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22f339f559 code=0x0 [ 80.480611][ T5854] usb 3-1: USB disconnect, device number 2 [ 81.552372][ T5949] overlayfs: failed to clone upperpath [ 81.586722][ T5784] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.611286][ T5952] loop2: detected capacity change from 0 to 256 [ 81.755409][ T5952] overlayfs: missing 'lowerdir' [ 81.803919][ T5784] usb 4-1: config 0 has no interfaces? [ 81.822277][ T5784] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 81.855228][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.898104][ T5784] usb 4-1: config 0 descriptor?? [ 82.109581][ T5963] block device autoloading is deprecated and will be removed. [ 82.139041][ T5963] md: md2 stopped. [ 82.146791][ T5963] md: md2 stopped. [ 82.512046][ T28] audit: type=1326 audit(1793175609.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.1.30" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20a259f559 code=0x0 [ 83.187266][ T5985] overlayfs: failed to clone upperpath [ 83.360675][ T2198] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.675521][ T5784] usb 4-1: USB disconnect, device number 2 [ 83.687193][ T5993] loop1: detected capacity change from 0 to 1024 [ 83.697674][ T5993] EXT4-fs: inline encryption not supported [ 83.746398][ T5993] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 83.746398][ T5993] [ 84.102519][ T6011] block device autoloading is deprecated and will be removed. [ 84.166165][ T6011] md: md3 stopped. [ 84.174938][ T6011] md: md3 stopped. [ 84.188449][ T6016] overlayfs: failed to clone upperpath [ 84.275184][ T2198] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.459936][ T6022] loop3: detected capacity change from 0 to 4096 [ 84.491052][ T2198] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 84.518973][ T6022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.528444][ T2198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.730874][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.616647][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.834052][ T2198] usb 2-1: Firmware version (0.0) predates our first public release. [ 85.864716][ T2198] usb 2-1: Please update to version 0.2 or newer [ 85.969153][ T2198] usb 2-1: USB disconnect, device number 3 [ 86.088373][ T6063] overlayfs: failed to clone upperpath [ 86.918665][ T27] cfg80211: failed to load regulatory.db [ 87.409114][ T6085] loop3: detected capacity change from 0 to 1024 [ 87.422971][ T6085] EXT4-fs: inline encryption not supported [ 87.446462][ T6085] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 87.446462][ T6085] [ 87.800694][ T6096] overlayfs: missing 'lowerdir' [ 88.292517][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.581193][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 88.680317][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.837257][ T6112] loop1: detected capacity change from 0 to 1024 [ 88.863322][ T6112] EXT4-fs: inline encryption not supported [ 88.896075][ T6112] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 88.896075][ T6112] [ 89.138856][ T6118] loop1: detected capacity change from 0 to 4096 [ 89.161013][ T6118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.183873][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.253078][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.415608][ T6125] overlayfs: missing 'lowerdir' [ 89.507572][ T6130] loop1: detected capacity change from 0 to 8 [ 89.539776][ T6130] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 89.555145][ T6130] unable to read xattr id index table [ 89.583894][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 89.606233][ T9] usb 4-1: Please update to version 0.2 or newer [ 89.984765][ T9] usb 4-1: USB disconnect, device number 3 [ 90.468890][ T6142] autofs4:pid:6142:autofs_fill_super: called with bogus options [ 90.819318][ T6153] overlayfs: missing 'lowerdir' [ 91.097882][ T6164] loop3: detected capacity change from 0 to 1024 [ 91.111704][ T6164] EXT4-fs: inline encryption not supported [ 91.147069][ T6164] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 91.147069][ T6164] [ 92.112690][ T6177] overlayfs: failed to clone upperpath [ 92.281219][ T6185] loop3: detected capacity change from 0 to 256 [ 92.361894][ T6185] overlayfs: missing 'lowerdir' [ 92.369939][ T6191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.107'. [ 94.027042][ T6207] overlayfs: failed to clone upperpath [ 94.279047][ T6218] loop1: detected capacity change from 0 to 256 [ 94.488383][ T6218] overlayfs: missing 'lowerdir' [ 95.650310][ T6238] overlayfs: failed to clone upperpath [ 100.581429][ T6285] IPVS: ip_vs_add_dest(): server weight less than zero [ 100.876310][ T2198] IPVS: starting estimator thread 0... [ 101.136715][ T6286] IPVS: using max 19 ests per chain, 45600 per kthread [ 101.158429][ T6298] overlayfs: failed to clone upperpath [ 101.238052][ T6302] Zero length message leads to an empty skb [ 101.861757][ T6317] fuse: Bad value for 'fd' [ 101.928729][ T6324] overlayfs: failed to clone upperpath [ 102.912388][ T6349] overlayfs: failed to clone upperpath [ 105.003597][ T6378] overlayfs: failed to clone upperpath [ 106.562113][ T6412] overlayfs: failed to clone upperpath [ 108.745689][ T6453] overlayfs: failed to clone upperpath [ 109.783949][ T6468] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 111.526905][ T6511] capability: warning: `syz.1.226' uses deprecated v2 capabilities in a way that may be insecure [ 112.284507][ T6519] 9pnet_fd: Insufficient options for proto=fd [ 113.667411][ T6545] overlayfs: failed to clone upperpath [ 113.698389][ T6549] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 113.996826][ T6560] 9pnet_fd: Insufficient options for proto=fd [ 114.391958][ T6576] overlayfs: failed to clone upperpath [ 116.357187][ T6601] 9pnet_fd: Insufficient options for proto=fd [ 116.411710][ T6606] overlayfs: failed to clone upperpath [ 117.623912][ T6628] fuse: Bad value for 'fd' [ 117.778690][ T6637] overlayfs: failed to clone upperpath [ 117.924316][ T6639] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 117.948481][ T6639] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 117.972137][ T6639] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 119.514048][ T6669] overlayfs: failed to clone upperpath [ 120.224815][ T6681] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.288'. [ 121.682967][ T6702] overlayfs: failed to clone upperpath [ 121.727854][ T6703] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 121.998092][ T6710] overlayfs: failed to clone upperpath [ 122.050592][ T6710] overlayfs: failed to clone upperpath [ 122.066516][ T6712] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.298'. [ 123.335059][ T6734] overlayfs: failed to clone upperpath [ 123.679429][ T6742] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.309'. [ 125.654862][ T6767] overlayfs: failed to clone upperpath [ 125.681930][ T6771] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.320'. [ 126.191262][ T28] audit: type=1326 audit(1793175653.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.246361][ T28] audit: type=1326 audit(1793175653.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.321173][ T28] audit: type=1326 audit(1793175653.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.391323][ T28] audit: type=1326 audit(1793175653.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.454772][ T28] audit: type=1326 audit(1793175653.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.506289][ T28] audit: type=1326 audit(1793175653.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.566160][ T28] audit: type=1326 audit(1793175653.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.612071][ T28] audit: type=1326 audit(1793175653.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.653820][ T28] audit: type=1326 audit(1793175653.310:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.3.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff01cb9f559 code=0x7ffc0000 [ 126.821544][ T6794] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.330'. [ 126.981115][ T6798] overlayfs: failed to clone upperpath [ 126.987711][ T6800] block device autoloading is deprecated and will be removed. [ 127.013563][ T28] audit: type=1326 audit(1793175654.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff01cb9f559 code=0x0 [ 127.088334][ T6806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.334'. [ 127.106142][ T6804] md: md3 stopped. [ 127.111489][ T6804] md: md3 stopped. [ 127.119170][ T6806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.334'. [ 127.663554][ T6824] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.341'. [ 127.982511][ T6833] overlayfs: failed to clone upperpath [ 128.701310][ T6850] netlink: 'syz.3.351': attribute type 12 has an invalid length. [ 128.726275][ T6850] netlink: 'syz.3.351': attribute type 29 has an invalid length. [ 128.734057][ T6850] netlink: 148 bytes leftover after parsing attributes in process `syz.3.351'. [ 128.877037][ T6856] overlayfs: failed to clone upperpath [ 129.809465][ T6885] overlayfs: failed to clone upperpath [ 130.681058][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 130.704069][ T6911] overlayfs: failed to clone upperpath [ 130.721294][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 131.567690][ T6935] overlayfs: failed to clone upperpath [ 132.750293][ T6963] overlayfs: failed to clone upperpath [ 132.869594][ T6973] autofs4:pid:6973:autofs_fill_super: called with bogus options [ 132.941527][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951239][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.195452][ T8] [ 133.197827][ T8] ====================================================== [ 133.204847][ T8] WARNING: possible circular locking dependency detected [ 133.211878][ T8] syzkaller #0 Not tainted [ 133.216306][ T8] ------------------------------------------------------ [ 133.223327][ T8] kworker/0:0/8 is trying to acquire lock: [ 133.229136][ T8] ffffffff8f61e6d0 (rds_trans_sem){++++}-{3:3}, at: rds_trans_get_preferred+0x133/0x3b0 [ 133.239010][ T8] [ 133.239010][ T8] but task is already holding lock: [ 133.246359][ T8] ffff88807dad4420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 133.256885][ T8] [ 133.256885][ T8] which lock already depends on the new lock. [ 133.256885][ T8] [ 133.267272][ T8] [ 133.267272][ T8] the existing dependency chain (in reverse order) is: [ 133.276282][ T8] [ 133.276282][ T8] -> #2 (&id_priv->handler_mutex/1){+.+.}-{3:3}: [ 133.284790][ T8] __mutex_lock+0x135/0xc80 [ 133.289811][ T8] cma_ib_req_handler+0x2dd4/0x50b0 [ 133.295523][ T8] cm_process_work+0x4b/0x410 [ 133.300711][ T8] cm_work_handler+0x9bbe/0xea50 [ 133.306159][ T8] process_scheduled_works+0xa60/0x1600 [ 133.312219][ T8] worker_thread+0xa5e/0xfe0 [ 133.317322][ T8] kthread+0x2fa/0x390 [ 133.321897][ T8] ret_from_fork+0x48/0x80 [ 133.326820][ T8] ret_from_fork_asm+0x11/0x20 [ 133.332098][ T8] [ 133.332098][ T8] -> #1 (&id_priv->handler_mutex){+.+.}-{3:3}: [ 133.340424][ T8] __mutex_lock+0x135/0xc80 [ 133.345438][ T8] rdma_destroy_id+0x1b/0x30 [ 133.350536][ T8] rds_ib_laddr_check+0x3e1/0x6b0 [ 133.356075][ T8] rds_trans_get_preferred+0x173/0x3b0 [ 133.362046][ T8] rds_bind+0x690/0x870 [ 133.366708][ T8] __sys_bind+0x2f0/0x3f0 [ 133.371548][ T8] __x64_sys_bind+0x7a/0x90 [ 133.376559][ T8] do_syscall_64+0x55/0xb0 [ 133.381483][ T8] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.387887][ T8] [ 133.387887][ T8] -> #0 (rds_trans_sem){++++}-{3:3}: [ 133.395344][ T8] __lock_acquire+0x3a07/0x7eb0 [ 133.400704][ T8] lock_acquire+0x19e/0x420 [ 133.405712][ T8] down_read+0x46/0x2e0 [ 133.410376][ T8] rds_trans_get_preferred+0x133/0x3b0 [ 133.416346][ T8] __rds_conn_create+0xa1e/0x1fe0 [ 133.421878][ T8] rds_conn_create+0x43/0x60 [ 133.426978][ T8] rds_ib_cm_handle_connect+0x478/0x10d0 [ 133.433121][ T8] rds_rdma_cm_event_handler_cmn+0x648/0x9a0 [ 133.439615][ T8] cma_cm_event_handler+0xa6/0x290 [ 133.445238][ T8] cma_ib_req_handler+0x3435/0x50b0 [ 133.450957][ T8] cm_process_work+0x4b/0x410 [ 133.456144][ T8] cm_work_handler+0x9bbe/0xea50 [ 133.461593][ T8] process_scheduled_works+0xa60/0x1600 [ 133.467650][ T8] worker_thread+0xa5e/0xfe0 [ 133.472749][ T8] kthread+0x2fa/0x390 [ 133.477328][ T8] ret_from_fork+0x48/0x80 [ 133.482253][ T8] ret_from_fork_asm+0x11/0x20 [ 133.487530][ T8] [ 133.487530][ T8] other info that might help us debug this: [ 133.487530][ T8] [ 133.497742][ T8] Chain exists of: [ 133.497742][ T8] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 133.497742][ T8] [ 133.512186][ T8] Possible unsafe locking scenario: [ 133.512186][ T8] [ 133.519623][ T8] CPU0 CPU1 [ 133.524974][ T8] ---- ---- [ 133.530329][ T8] lock(&id_priv->handler_mutex/1); [ 133.535701][ T8] lock(&id_priv->handler_mutex); [ 133.543409][ T8] lock(&id_priv->handler_mutex/1); [ 133.551211][ T8] rlock(rds_trans_sem); [ 133.555530][ T8] [ 133.555530][ T8] *** DEADLOCK *** [ 133.555530][ T8] [ 133.563655][ T8] 4 locks held by kworker/0:0/8: [ 133.568571][ T8] #0: ffff88814a3b5538 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 133.579443][ T8] #1: ffffc900000d7d00 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 133.591964][ T8] #2: ffff888030a4c420 (&id_priv->handler_mutex){+.+.}-{3:3}, at: cma_ib_req_handler+0x2186/0x50b0 [ 133.602747][ T8] #3: ffff88807dad4420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 133.613704][ T8] [ 133.613704][ T8] stack backtrace: [ 133.619587][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 133.626771][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.636815][ T8] Workqueue: ib_cm cm_work_handler [ 133.641935][ T8] Call Trace: [ 133.645203][ T8] [ 133.648126][ T8] dump_stack_lvl+0x18c/0x250 [ 133.652794][ T8] ? load_image+0x420/0x420 [ 133.657285][ T8] ? show_regs_print_info+0x20/0x20 [ 133.662478][ T8] ? print_circular_bug+0x12b/0x1a0 [ 133.667670][ T8] check_noncircular+0x2fc/0x400 [ 133.672601][ T8] ? print_deadlock_bug+0x5d0/0x5d0 [ 133.677790][ T8] ? lockdep_lock+0xf5/0x230 [ 133.682379][ T8] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 133.688273][ T8] ? _find_first_zero_bit+0xd6/0x100 [ 133.693551][ T8] __lock_acquire+0x3a07/0x7eb0 [ 133.698393][ T8] ? kasan_set_track+0x4e/0x70 [ 133.703145][ T8] ? rds_cong_from_addr+0x34e/0x360 [ 133.708330][ T8] ? rds_conn_create+0x43/0x60 [ 133.713082][ T8] ? cm_work_handler+0x9bbe/0xea50 [ 133.718183][ T8] ? process_scheduled_works+0xa60/0x1600 [ 133.723888][ T8] ? worker_thread+0xa5e/0xfe0 [ 133.728638][ T8] ? ret_from_fork+0x48/0x80 [ 133.733218][ T8] ? ret_from_fork_asm+0x11/0x20 [ 133.738151][ T8] ? verify_lock_unused+0x140/0x140 [ 133.743340][ T8] ? mark_lock+0x94/0x320 [ 133.747658][ T8] lock_acquire+0x19e/0x420 [ 133.752153][ T8] ? rds_trans_get_preferred+0x133/0x3b0 [ 133.757776][ T8] ? kasan_quarantine_put+0xd8/0x220 [ 133.763056][ T8] ? __might_sleep+0xe0/0xe0 [ 133.767634][ T8] ? read_lock_is_recursive+0x20/0x20 [ 133.772992][ T8] ? slab_free_freelist_hook+0x154/0x240 [ 133.778617][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 133.783817][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 133.788829][ T8] down_read+0x46/0x2e0 [ 133.792972][ T8] ? rds_trans_get_preferred+0x133/0x3b0 [ 133.798598][ T8] rds_trans_get_preferred+0x133/0x3b0 [ 133.804051][ T8] __rds_conn_create+0xa1e/0x1fe0 [ 133.809067][ T8] ? __rds_conn_create+0x2f3/0x1fe0 [ 133.814261][ T8] ? rds_conn_create+0x60/0x60 [ 133.819014][ T8] ? __lock_acquire+0x36dd/0x7eb0 [ 133.824032][ T8] rds_conn_create+0x43/0x60 [ 133.828612][ T8] rds_ib_cm_handle_connect+0x478/0x10d0 [ 133.834240][ T8] ? rds_ib_cm_connect_complete+0x8c0/0x8c0 [ 133.840126][ T8] ? xas_store+0xcb1/0x19e0 [ 133.844712][ T8] rds_rdma_cm_event_handler_cmn+0x648/0x9a0 [ 133.850687][ T8] ? rdma_restrack_add+0x36b/0x8b0 [ 133.855790][ T8] ? rds_rdma_cm_event_handler+0x20/0x20 [ 133.861414][ T8] ? trace_cm_event_handler+0x7f/0x1c0 [ 133.866862][ T8] ? rds_cmsg_atomic+0xc30/0xc30 [ 133.871797][ T8] ? cma_listen_handler+0xfb/0x150 [ 133.876901][ T8] cma_cm_event_handler+0xa6/0x290 [ 133.882008][ T8] cma_ib_req_handler+0x3435/0x50b0 [ 133.887203][ T8] ? __lock_acquire+0x36dd/0x7eb0 [ 133.892221][ T8] ? cma_addr_cmp+0x240/0x240 [ 133.896914][ T8] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 133.902884][ T8] ? cm_queue_work_unlock+0x54/0x1c0 [ 133.908159][ T8] ? lock_chain_count+0x20/0x20 [ 133.912997][ T8] cm_process_work+0x4b/0x410 [ 133.917666][ T8] ? _raw_spin_unlock_irq+0x2e/0x50 [ 133.922853][ T8] cm_work_handler+0x9bbe/0xea50 [ 133.927791][ T8] ? refcount_inc+0x70/0x70 [ 133.932292][ T8] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 133.938260][ T8] ? __lock_acquire+0x7eb0/0x7eb0 [ 133.943272][ T8] ? read_lock_is_recursive+0x20/0x20 [ 133.948634][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.953820][ T8] ? process_scheduled_works+0x975/0x1600 [ 133.959529][ T8] ? process_scheduled_works+0x975/0x1600 [ 133.965245][ T8] process_scheduled_works+0xa60/0x1600 [ 133.970789][ T8] ? worker_attach_to_pool+0x370/0x370 [ 133.976243][ T8] ? assign_work+0x3cc/0x5d0 [ 133.980823][ T8] worker_thread+0xa5e/0xfe0 [ 133.985416][ T8] kthread+0x2fa/0x390 [ 133.989495][ T8] ? pr_cont_work+0x550/0x550 [ 133.994161][ T8] ? kthread_blkcg+0xd0/0xd0 [ 133.998745][ T8] ret_from_fork+0x48/0x80 [ 134.003150][ T8] ? kthread_blkcg+0xd0/0xd0 [ 134.007728][ T8] ret_from_fork_asm+0x11/0x20 [ 134.012503][ T8] [ 134.090552][ T8] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 134.090869][ T5784] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1