last executing test programs: 17m34.353502179s ago: executing program 3 (id=30): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 17m30.900224818s ago: executing program 3 (id=38): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = fanotify_init(0x8, 0x40000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 17m26.488449302s ago: executing program 3 (id=52): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 17m23.193597399s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17m21.512343754s ago: executing program 3 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 17m19.202912489s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffefff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x1b0) 17m3.053113827s ago: executing program 32 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffefff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x1b0) 16m38.211901701s ago: executing program 4 (id=146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 16m33.806146431s ago: executing program 4 (id=152): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 16m32.618800204s ago: executing program 4 (id=156): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000005c0)="943e047401") connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f0000000280)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) 16m31.16957571s ago: executing program 4 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) 16m29.381093055s ago: executing program 4 (id=159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 16m27.594471516s ago: executing program 4 (id=161): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x101500c, &(0x7f0000000080)={[{@nodiscard}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000240)="$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") r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(r2, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 16m10.533006873s ago: executing program 33 (id=161): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x101500c, &(0x7f0000000080)={[{@nodiscard}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000240)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setns(r2, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 15m3.429335596s ago: executing program 1 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) sched_setaffinity(0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_win95}, {@numtail}, {@rodir}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@numtail}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 15m1.688202108s ago: executing program 1 (id=286): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) 14m59.519116881s ago: executing program 1 (id=289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, 0x0) 14m58.875640272s ago: executing program 1 (id=291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000026c0)=0x3, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200001b04ffffffffff86dd6000000000180000fc020000000000000000000000000000000000000000000000000000000000000002010500002000fe8000000000000000000000000000bb"], 0x0) write(r3, &(0x7f0000002480)="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", 0x1db) r4 = semget(0x1, 0x4, 0x69c) semop(r4, &(0x7f0000002440)=[{0x1}, {0x1, 0xa4c3, 0x1800}], 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002f80)={0xa0, 0x0, r7, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r8, r9, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000002040)={{0x3, r5, 0x0, r8, 0xee00, 0x188, 0x7}, 0xd9, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x3}) 14m58.650313878s ago: executing program 1 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 14m58.306697263s ago: executing program 1 (id=294): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0xd) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 14m42.869451323s ago: executing program 34 (id=294): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0xd) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 7m50.084068022s ago: executing program 0 (id=841): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m48.077603935s ago: executing program 0 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) 7m46.39139413s ago: executing program 0 (id=847): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x91c}], 0x1, 0x0, 0x0) 7m46.261074657s ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 7m44.785400154s ago: executing program 0 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) setns(0xffffffffffffffff, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m42.282041209s ago: executing program 0 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x49, 0x2, 0x457f1c9146f8f874, "4649f6441214bdf0c12f00007f9d0000310fa145d5fbffffff00", 0xb5315241}) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 7m25.259712556s ago: executing program 35 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x49, 0x2, 0x457f1c9146f8f874, "4649f6441214bdf0c12f00007f9d0000310fa145d5fbffffff00", 0xb5315241}) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 5m34.031331465s ago: executing program 7 (id=978): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) lseek(r4, 0x249f0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[], 0x28}, 0x1, 0x7}, 0x0) 5m28.718229047s ago: executing program 7 (id=983): openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) 5m27.763592095s ago: executing program 7 (id=986): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10700, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 5m26.948260462s ago: executing program 5 (id=987): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RGETLOCK(r1, &(0x7f0000000300)={0x27, 0x37, 0x2, {0x0, 0x7ba, 0x18, 0x0, 0x9, '/dev/sg#\x00'}}, 0x27) 5m25.195319779s ago: executing program 5 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 5m24.852165769s ago: executing program 7 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) setns(0xffffffffffffffff, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m24.090710829s ago: executing program 9 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) setns(0xffffffffffffffff, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m20.524320714s ago: executing program 9 (id=996): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) lseek(r4, 0x249f0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[], 0x28}, 0x1, 0x7}, 0x0) 5m19.901631996s ago: executing program 5 (id=997): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) 5m18.132980615s ago: executing program 7 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 5m15.635855063s ago: executing program 7 (id=1001): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) connect$inet6(r3, 0x0, 0x0) 5m9.094515754s ago: executing program 5 (id=1008): socket$inet_sctp(0x2, 0x5, 0x84) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 5m8.405123048s ago: executing program 9 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@fat=@tz_utc}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) 5m0.712661507s ago: executing program 9 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 5m0.659824384s ago: executing program 5 (id=1016): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@echo=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='bf', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) 5m0.080076306s ago: executing program 36 (id=1001): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) connect$inet6(r3, 0x0, 0x0) 4m59.842326134s ago: executing program 9 (id=1019): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 4m58.237511571s ago: executing program 5 (id=1021): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10700, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 4m57.650255732s ago: executing program 9 (id=1023): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4001, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x4a0}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 4m50.817343179s ago: executing program 8 (id=1026): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m47.06005254s ago: executing program 8 (id=1029): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) 4m43.175387122s ago: executing program 8 (id=1032): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@echo=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='bf', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) 4m42.752831023s ago: executing program 37 (id=1021): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10700, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 4m41.44458488s ago: executing program 38 (id=1023): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4001, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x4a0}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 4m38.543504077s ago: executing program 8 (id=1037): socket$inet_sctp(0x2, 0x5, 0x84) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 4m35.933044542s ago: executing program 8 (id=1038): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7fc}], 0x1c) 4m33.078506961s ago: executing program 8 (id=1040): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) lseek(r4, 0x249f0, 0x0) socket$key(0xf, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) 4m17.111320522s ago: executing program 39 (id=1040): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) lseek(r4, 0x249f0, 0x0) socket$key(0xf, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) 11.256439372s ago: executing program 6 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='6', 0x1) 10.95258959s ago: executing program 6 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 10.093182148s ago: executing program 2 (id=1271): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000002500)=[@request_death], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r3, r4, 0x0, 0x201f00) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.09288526s ago: executing program 6 (id=1272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) 9.670786683s ago: executing program 2 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) wait4(r1, 0x0, 0x4, 0x0) 7.488132118s ago: executing program 2 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5.090509023s ago: executing program 2 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = getpid() syz_pidfd_open(r4, 0x0) setns(0xffffffffffffffff, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.838578614s ago: executing program 6 (id=1276): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xf30f, 0x2002) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.682840428s ago: executing program 2 (id=1277): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c33", 0x41}], 0x1, 0x3, 0x9) 577.222549ms ago: executing program 6 (id=1278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="c2", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 112.547427ms ago: executing program 6 (id=1279): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) 0s ago: executing program 2 (id=1280): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0xa, 0x4, 0x4, "04faff43988070726799ee0963f16444682397eefa4d7e888b952206c2bfc848eded6fe7d7cdd4ded4b95467b72de233256be82914dbed99d6a8ae21fb6979b2", "18eaae41e3686d89cb2f9e3e283522565d05a55e164195387d5be4e16121c07b5731cbd7b7323739a91012a92b03fe986f56ab5aa3f908e5e07c1f4461d0eea8", "c5bc3fc60633e97e9985d57ffb9811d6297f37cc866a71b5da7ece7fdd4e9ca7", [0xd38, 0x1]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): named from eth2 [ 791.715814][T10697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.734899][T10697] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 791.764862][T10697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.409717][T10697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.524381][T10697] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.569276][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.576505][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.617976][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.625228][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.707450][T10686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 792.725960][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.747240][T10686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 792.795252][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 792.804747][T10686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 792.835403][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.848254][T10686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 792.864575][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.891454][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 792.941128][T10512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.960668][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.380444][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.467909][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.530136][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.537361][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.576278][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.583495][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.008360][T10499] veth0_vlan: entered promiscuous mode [ 794.075268][T10499] veth1_vlan: entered promiscuous mode [ 794.218713][T10512] veth0_vlan: entered promiscuous mode [ 794.301266][T10512] veth1_vlan: entered promiscuous mode [ 794.347198][T10499] veth0_macvtap: entered promiscuous mode [ 794.390839][T10499] veth1_macvtap: entered promiscuous mode [ 794.512078][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.564267][T10512] veth0_macvtap: entered promiscuous mode [ 794.590999][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.629596][T10512] veth1_macvtap: entered promiscuous mode [ 794.693820][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.717183][T10697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.746982][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 794.773028][T10512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.823858][ T3288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.841431][T10512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.967109][ T1112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.113073][ T3288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.151772][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.179312][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.324533][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.348305][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.378292][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.410631][ T6068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.436280][ T6068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.520175][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.528228][ T3288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.529113][ T3288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.555447][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.704404][ T3288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.726910][ T3288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.881891][T10697] veth0_vlan: entered promiscuous mode [ 795.915656][T10933] loop6: detected capacity change from 0 to 16 [ 795.973494][T10697] veth1_vlan: entered promiscuous mode [ 796.067914][T10933] erofs (device loop6): invalid ishare xattr prefix id 0 [ 796.252565][T10697] veth0_macvtap: entered promiscuous mode [ 796.349534][T10697] veth1_macvtap: entered promiscuous mode [ 797.229111][T10697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.875384][T10697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.122148][T10971] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[10971] [ 801.494253][ T1075] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.002246][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.013784][ T5908] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.058774][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.377589][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 802.633517][ T5908] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.674894][T10686] veth0_vlan: entered promiscuous mode [ 802.709613][ T6068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.717776][ T5908] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.738144][ T6068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.903407][T10686] veth1_vlan: entered promiscuous mode [ 805.703187][T10686] veth0_macvtap: entered promiscuous mode [ 805.852644][T10686] veth1_macvtap: entered promiscuous mode [ 807.067241][T10686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.081127][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.125551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.132581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.421339][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.542492][T11033] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[11033] [ 810.116371][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.235834][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.294495][ T1075] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.669879][T11003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.680205][T11003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.743427][T11061] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[11061] [ 814.792525][T11061] 9p: Bad value for 'wfdno' [ 815.632608][T10948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.689356][T10948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.991151][T11076] affs: No valid root block on device nullb0 [ 817.528725][T11088] loop8: detected capacity change from 0 to 512 [ 817.670750][T11088] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.304: iget: bad i_size value: 38620345925642 [ 818.240483][T11088] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 818.474257][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 818.490035][ C0] EXT4-fs (loop8): initial error at time 1786137247: ext4_orphan_get:1399: inode 15 [ 818.499488][ C0] EXT4-fs (loop8): last error at time 1786137247: ext4_orphan_get:1399: inode 15 [ 818.508934][T11088] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.304: couldn't read orphan inode 15 (err -117) [ 818.549237][T11088] loop8: lost filesystem error report for type 5 error -117 [ 818.562894][T11088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.843683][T11092] EXT4-fs error (device loop8): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 818.910805][ T1075] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 818.948624][ T1075] EXT4-fs (loop8): This should not happen!! Data will be lost [ 818.948624][ T1075] [ 818.962699][ T1075] EXT4-fs (loop8): Total free blocks count 0 [ 818.971346][ T1075] EXT4-fs (loop8): Free/Dirty block details [ 818.979908][ T1075] EXT4-fs (loop8): free_blocks=0 [ 818.995149][ T1075] EXT4-fs (loop8): dirty_blocks=2692 [ 819.005887][ T1075] EXT4-fs (loop8): Block reservation details [ 819.012385][ T1075] EXT4-fs (loop8): i_reserved_data_blocks=2692 [ 820.689603][ T737] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 636 with error 28 [ 820.710752][T11113] loop7: detected capacity change from 0 to 512 [ 820.855485][T11115] loop2: detected capacity change from 0 to 512 [ 820.912260][T11113] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.959: iget: bad i_size value: 38620345925642 [ 820.940960][T10686] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 821.277710][T11113] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.282971][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 821.298630][ C0] EXT4-fs (loop7): initial error at time 1786137250: ext4_orphan_get:1399: inode 15 [ 821.308091][ C0] EXT4-fs (loop7): last error at time 1786137250: ext4_orphan_get:1399: inode 15 [ 821.354193][T11113] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.959: couldn't read orphan inode 15 (err -117) [ 822.441850][T11113] loop7: lost filesystem error report for type 5 error -117 [ 822.621740][T11113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.712496][T11115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.841950][T11115] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.525060][T11115] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.960: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 823.718680][T11128] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.960: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 824.112577][ T137] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 825.203531][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.299400][ T137] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 825.311868][ T137] EXT4-fs (loop7): This should not happen!! Data will be lost [ 825.311868][ T137] [ 825.321830][ T137] EXT4-fs (loop7): Total free blocks count 0 [ 825.327922][ T137] EXT4-fs (loop7): Free/Dirty block details [ 825.334010][ T137] EXT4-fs (loop7): free_blocks=0 [ 825.339695][ T137] EXT4-fs (loop7): dirty_blocks=4 [ 825.344807][ T137] EXT4-fs (loop7): Block reservation details [ 825.354133][ T137] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 825.371089][T10512] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 826.211595][T10512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.639453][T11149] loop9: detected capacity change from 0 to 2048 [ 827.531961][T11161] loop8: detected capacity change from 0 to 512 [ 827.862370][T11161] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.970: iget: bad i_size value: 38620345925642 [ 827.897647][T11161] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 827.902972][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 827.905395][T11167] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 827.929094][ C1] EXT4-fs (loop8): initial error at time 1786137256: ext4_orphan_get:1399: inode 15 [ 827.938540][ C1] EXT4-fs (loop8): last error at time 1786137256: ext4_orphan_get:1399: inode 15 [ 827.990565][T11161] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.970: couldn't read orphan inode 15 (err -117) [ 828.041270][T11161] loop8: lost filesystem error report for type 5 error -117 [ 828.099726][T11161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.259614][T11149] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12 [ 828.510637][ T12] EXT4-fs error (device loop8): ext4_validate_block_bitmap:431: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 828.523079][ T5600] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 828.537912][T11149] Remounting filesystem read-only [ 828.617794][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 828.657951][ T12] EXT4-fs (loop8): This should not happen!! Data will be lost [ 828.657951][ T12] [ 828.679729][ T5600] usb 3-1: not running at top speed; connect to a high speed hub [ 828.691263][ T12] EXT4-fs (loop8): Total free blocks count 0 [ 828.717418][ T5600] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.729597][ T12] EXT4-fs (loop8): Free/Dirty block details [ 828.753165][ T5600] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 828.760753][ T12] EXT4-fs (loop8): free_blocks=0 [ 828.778911][ T12] EXT4-fs (loop8): dirty_blocks=3300 [ 828.798529][ T5600] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 828.800418][ T12] EXT4-fs (loop8): Block reservation details [ 828.840323][ T5600] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 828.866056][ T12] EXT4-fs (loop8): i_reserved_data_blocks=3300 [ 828.898253][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.998642][ T5600] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 829.262379][ T5600] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 829.427839][ T5600] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 829.546165][ T5600] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 830.290261][ T5600] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 830.312187][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1248 with error 28 [ 830.620090][ T5600] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 831.648445][ T5600] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 832.682603][ T5600] usb 3-1: USB disconnect, device number 3 [ 834.037536][T10686] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 834.117240][ T5600] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 834.205089][ T5600] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 834.216068][ T5600] keyspan 3-1:1.0: device disconnected [ 834.557248][T10686] EXT4-fs: 7 callbacks suppressed [ 834.557275][T10686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.931302][T11219] affs: No valid root block on device nullb0 [ 837.496087][T11230] loop8: detected capacity change from 0 to 512 [ 837.640560][T11230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 838.197522][T11230] ext4: Unknown parameter 'fscontext' [ 838.967209][T11238] loop8: detected capacity change from 0 to 2048 [ 839.057595][T11242] loop7: detected capacity change from 0 to 512 [ 839.306348][T11242] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.986: iget: bad i_size value: 38620345925642 [ 839.348632][T11242] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 839.352971][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 839.368631][ C0] EXT4-fs (loop7): initial error at time 1786137268: ext4_orphan_get:1399: inode 15 [ 839.378134][ C0] EXT4-fs (loop7): last error at time 1786137268: ext4_orphan_get:1399: inode 15 [ 839.454872][T11253] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10697] was attempted by ""[11253] [ 839.488126][T11253] 9p: Bad value for 'wfdno' [ 840.027060][T11242] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.986: couldn't read orphan inode 15 (err -117) [ 840.152842][T11242] loop7: lost filesystem error report for type 5 error -117 [ 840.247739][T11242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.579271][T11250] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 841.101516][ T49] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 841.134817][ T49] EXT4-fs (loop7): This should not happen!! Data will be lost [ 841.134817][ T49] [ 841.186802][ T49] EXT4-fs (loop7): Total free blocks count 0 [ 841.223311][ T49] EXT4-fs (loop7): Free/Dirty block details [ 841.251370][T11265] loop5: detected capacity change from 0 to 128 [ 841.333328][ T49] EXT4-fs (loop7): free_blocks=0 [ 841.380604][ T49] EXT4-fs (loop7): dirty_blocks=2396 [ 841.437885][ T49] EXT4-fs (loop7): Block reservation details [ 841.521022][ T49] EXT4-fs (loop7): i_reserved_data_blocks=2396 [ 841.601319][T11265] vfat: Bad value for 'fmask' [ 844.093343][ T49] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 340 with error 28 [ 845.543707][T10512] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 845.674657][T10512] EXT4-fs: 7 callbacks suppressed [ 845.674683][T10512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.052346][T11302] loop6: detected capacity change from 0 to 512 [ 850.170998][T11302] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1002: iget: bad i_size value: 38620345925642 [ 850.272216][T11302] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 850.272988][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 850.288712][ C0] EXT4-fs (loop6): initial error at time 1786137279: ext4_orphan_get:1399: inode 15 [ 850.298210][ C0] EXT4-fs (loop6): last error at time 1786137279: ext4_orphan_get:1399: inode 15 [ 850.320106][T11302] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1002: couldn't read orphan inode 15 (err -117) [ 850.418573][T11302] loop6: lost filesystem error report for type 5 error -117 [ 850.448311][T11302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.563802][T11310] 9p: Bad value for 'wfdno' [ 851.164192][T11308] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 851.554689][ T6067] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 851.613121][ T6067] EXT4-fs (loop6): This should not happen!! Data will be lost [ 851.613121][ T6067] [ 851.655093][ T6067] EXT4-fs (loop6): Total free blocks count 0 [ 851.682138][ T6067] EXT4-fs (loop6): Free/Dirty block details [ 851.708157][ T6067] EXT4-fs (loop6): free_blocks=0 [ 851.731068][ T6067] EXT4-fs (loop6): dirty_blocks=4 [ 851.757745][ T6067] EXT4-fs (loop6): Block reservation details [ 851.778699][ T6067] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 851.816838][T10499] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 851.871990][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.888229][T11323] loop2: detected capacity change from 0 to 512 [ 851.947399][T11323] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1006: iget: bad i_size value: 38620345925642 [ 852.063226][T11323] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 852.064010][T11323] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1006: couldn't read orphan inode 15 (err -117) [ 852.073717][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 852.073751][ C0] EXT4-fs (loop2): initial error at time 1786137281: ext4_orphan_get:1399: inode 15 [ 852.073807][ C0] EXT4-fs (loop2): last error at time 1786137281: ext4_orphan_get:1399: inode 15 [ 852.180486][T11323] loop2: lost filesystem error report for type 5 error -117 [ 853.401367][T11323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.757698][T11335] loop6: detected capacity change from 0 to 128 [ 856.888597][T11335] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 856.979879][T11335] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 857.003179][T11325] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 858.255243][T11344] affs: No valid root block on device nullb0 [ 858.292393][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.574243][T10499] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.446138][T11357] loop2: detected capacity change from 0 to 128 [ 860.458496][T11357] vfat: Bad value for 'fmask' [ 862.586103][T11360] loop9: detected capacity change from 0 to 256 [ 866.203573][T11388] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[11388] [ 866.628350][T11386] loop9: detected capacity change from 0 to 1024 [ 867.032654][T11386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.050752][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 867.071159][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 867.079255][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 867.092298][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 867.100638][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 867.439531][T11403] loop5: detected capacity change from 0 to 512 [ 867.502865][T11403] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1021: iget: bad i_size value: 38620345925642 [ 867.540106][T10961] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.562741][T11403] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 867.562989][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 867.578606][ C1] EXT4-fs (loop5): initial error at time 1786137296: ext4_orphan_get:1399: inode 15 [ 867.588053][ C1] EXT4-fs (loop5): last error at time 1786137296: ext4_orphan_get:1399: inode 15 [ 867.621251][T11403] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1021: couldn't read orphan inode 15 (err -117) [ 867.667730][T11403] loop5: lost filesystem error report for type 5 error -117 [ 867.684291][T11403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.864806][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.260682][T11392] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 868.576879][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.637802][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.697623][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.746868][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.760388][T10961] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.804687][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.846712][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.887210][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.938077][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 868.974837][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 869.172838][ T5619] Bluetooth: hci1: command tx timeout [ 869.174050][T10961] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.392674][T10961] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.575061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.594755][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.922868][ T5619] Bluetooth: hci1: command tx timeout [ 873.549695][T10697] EXT4-fs error: 51 callbacks suppressed [ 873.549723][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 874.023912][ T5619] Bluetooth: hci1: command tx timeout [ 874.468764][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 874.544032][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 874.619782][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 874.697468][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 874.792237][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 875.117372][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 875.816724][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 876.043166][ T5619] Bluetooth: hci1: command tx timeout [ 876.746662][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 876.844390][T11446] loop6: detected capacity change from 0 to 256 [ 876.872525][T11446] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 876.920045][T10697] EXT4-fs error (device loop9): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 876.937501][T11446] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 877.025909][T10961] bridge_slave_1: left allmulticast mode [ 877.103222][T10961] bridge_slave_1: left promiscuous mode [ 877.183215][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.218086][T11453] loop2: detected capacity change from 0 to 128 [ 877.227356][T11453] vfat: Bad value for 'fmask' [ 877.343148][T11455] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 878.207921][ T31] audit: type=1800 audit(1786137307.173:50): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1027" name="file1" dev="loop6" ino=1048687 res=0 errno=0 [ 880.369427][T10961] bridge_slave_0: left allmulticast mode [ 880.440112][T10961] bridge_slave_0: left promiscuous mode [ 880.500990][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.054933][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 882.915010][T11475] loop6: detected capacity change from 0 to 512 [ 882.939694][T11475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 883.010517][T11475] ext4: Unknown parameter 'fscontext' [ 883.206114][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.440769][T11480] loop6: detected capacity change from 0 to 2048 [ 883.456169][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 883.641087][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.703674][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.717436][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.726892][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.738242][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.760759][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 883.769246][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.913554][T10961] bond0 (unregistering): Released all slaves [ 884.229596][T11486] MTRR 1 not used [ 886.624654][T10697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.771105][ T5625] Bluetooth: hci4: command tx timeout [ 888.447312][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 888.465481][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 888.474652][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 888.528129][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 888.568267][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 888.843024][ T5625] Bluetooth: hci4: command tx timeout [ 889.140689][T11507] affs: No valid root block on device nullb0 [ 892.284129][ T5625] Bluetooth: hci6: command tx timeout [ 892.284156][ T5619] Bluetooth: hci4: command tx timeout [ 892.363299][T10961] hsr_slave_0: left promiscuous mode [ 892.404924][T10961] hsr_slave_1: left promiscuous mode [ 892.412292][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.436451][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.392381][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.507970][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.056292][ T5625] Bluetooth: hci6: command tx timeout [ 895.064141][ T5625] Bluetooth: hci4: command tx timeout [ 895.897971][T11531] loop2: detected capacity change from 0 to 1024 [ 895.942801][T11531] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 895.993455][T11531] hfsplus: hfsplus: invalid btree header node [ 896.005877][T11531] hfsplus: (loop2): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 896.021023][T11531] hfsplus: Run fsck.hfsplus to repair. [ 896.040859][T10961] veth1_macvtap: left promiscuous mode [ 896.047393][T10961] veth0_macvtap: left promiscuous mode [ 896.076399][T10961] veth1_vlan: left promiscuous mode [ 896.114641][T10961] veth0_vlan: left promiscuous mode [ 896.452154][T11535] loop2: detected capacity change from 0 to 128 [ 896.492007][T11535] vfat: Bad value for 'fmask' [ 897.543188][T11526] Bluetooth: hci6: command tx timeout [ 899.831913][T11526] Bluetooth: hci6: command tx timeout [ 901.723734][T11560] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 902.066615][T11564] affs: No valid root block on device nullb0 [ 902.083856][T10961] team0 (unregistering): Port device team_slave_1 removed [ 902.164759][T10961] team0 (unregistering): Port device team_slave_0 removed [ 907.583128][T11526] Bluetooth: hci2: command 0x0406 tx timeout [ 908.284861][T11579] loop2: detected capacity change from 0 to 128 [ 908.307392][T11579] vfat: Bad value for 'fmask' [ 909.683463][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 910.660219][T11587] kAFS: Can only specify source 'none' with -o dyn [ 910.821156][T11590] input: syz1 as /devices/virtual/input/input5 [ 912.867162][T11526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 912.879393][T11526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 912.891483][T11526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 912.906062][T11526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 912.914044][T11526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 913.952710][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.968893][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.976713][T11393] bridge_slave_0: entered allmulticast mode [ 914.001092][T11393] bridge_slave_0: entered promiscuous mode [ 914.221501][T10961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.359365][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.380371][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.392004][T11393] bridge_slave_1: entered allmulticast mode [ 914.408025][T11393] bridge_slave_1: entered promiscuous mode [ 916.979977][ T5619] Bluetooth: hci5: command tx timeout [ 917.210175][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.262529][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.320430][T10961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.392773][T11393] team0: Port device team_slave_0 added [ 918.437022][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 918.519662][T10961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.637210][T11393] team0: Port device team_slave_1 added [ 918.988783][T10961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.003504][ T5619] Bluetooth: hci5: command tx timeout [ 919.866328][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.887288][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.922213][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.083941][T11653] affs: No valid root block on device nullb0 [ 920.111919][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.159579][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.190876][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.130088][ T5619] Bluetooth: hci5: command tx timeout [ 922.233077][T11665] loop2: detected capacity change from 0 to 128 [ 922.257930][T11665] vfat: Bad value for 'fmask' [ 923.163058][ T5619] Bluetooth: hci5: command tx timeout [ 924.153857][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.186338][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.223200][T11481] bridge_slave_0: entered allmulticast mode [ 924.264682][T11481] bridge_slave_0: entered promiscuous mode [ 924.310990][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.347607][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.381120][T11481] bridge_slave_1: entered allmulticast mode [ 924.418802][T11481] bridge_slave_1: entered promiscuous mode [ 924.525518][T11393] hsr_slave_0: entered promiscuous mode [ 924.544387][T11393] hsr_slave_1: entered promiscuous mode [ 924.554584][T11393] debugfs: 'hsr0' already exists in 'hsr' [ 924.573110][T11393] Cannot create hsr debugfs directory [ 924.852749][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.895822][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.792648][T11481] team0: Port device team_slave_0 added [ 926.804110][T11481] team0: Port device team_slave_1 added [ 928.075748][T10961] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.161772][T11526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.169809][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 928.184154][T11526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.194395][T11526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 928.208310][T11526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 928.214879][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 928.225953][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.234324][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.263450][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.263544][T11526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 928.349587][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 928.366123][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 928.389351][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.423636][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.427994][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 928.430974][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.470519][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.502864][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 928.526946][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 928.549015][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.599188][ T10] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 928.616985][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 928.644884][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 928.659234][T11708] loop2: detected capacity change from 0 to 256 [ 928.666953][ T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 928.689084][T11708] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 928.730209][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 928.754608][T11708] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 928.757233][T10961] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.777866][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 928.799057][ T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 929.111648][T11492] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.130592][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.153351][T11492] bridge_slave_0: entered allmulticast mode [ 929.211720][T11710] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 930.106273][T11492] bridge_slave_0: entered promiscuous mode [ 931.033635][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.041557][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.092089][T11526] Bluetooth: hci2: command tx timeout [ 931.145392][ T30] usb 7-1: USB disconnect, device number 2 [ 931.155790][T10961] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.303858][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 931.381179][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 931.439687][ T30] keyspan 7-1:1.0: device disconnected [ 931.506793][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.541453][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.577180][T11492] bridge_slave_1: entered allmulticast mode [ 931.869381][T11492] bridge_slave_1: entered promiscuous mode [ 933.184361][T11526] Bluetooth: hci2: command tx timeout [ 933.217265][T10961] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.931326][T11481] hsr_slave_0: entered promiscuous mode [ 933.966101][T11481] hsr_slave_1: entered promiscuous mode [ 933.994441][T11481] debugfs: 'hsr0' already exists in 'hsr' [ 934.026863][T11481] Cannot create hsr debugfs directory [ 934.288884][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.246698][T11526] Bluetooth: hci2: command tx timeout [ 935.273712][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.323641][T11526] Bluetooth: hci2: command tx timeout [ 938.777208][T11755] kAFS: Can only specify source 'none' with -o dyn [ 939.330451][T11757] input: syz1 as /devices/virtual/input/input6 [ 939.877838][T11110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 941.127721][T11110] usb 3-1: Using ep0 maxpacket: 32 [ 941.367059][T11110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.378271][T11110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.388157][T11110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 941.401571][T11110] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 941.412356][T11110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.459551][T11110] usb 3-1: config 0 descriptor?? [ 941.858856][T11110] usbhid 3-1:0.0: can't add hid device: -71 [ 941.865754][T11110] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 941.922455][T11492] team0: Port device team_slave_0 added [ 941.931373][T11110] usb 3-1: USB disconnect, device number 4 [ 941.951674][T11492] team0: Port device team_slave_1 added [ 942.121507][T11594] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.139433][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.148993][T11594] bridge_slave_0: entered allmulticast mode [ 942.159805][T11594] bridge_slave_0: entered promiscuous mode [ 942.242905][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.250618][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.282172][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.297679][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.305450][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.340481][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.429747][T11492] hsr_slave_0: entered promiscuous mode [ 942.437101][T11492] hsr_slave_1: entered promiscuous mode [ 942.452872][T11492] debugfs: 'hsr0' already exists in 'hsr' [ 942.460103][T11492] Cannot create hsr debugfs directory [ 942.500583][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 942.508107][T11594] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.516555][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.541769][T11594] bridge_slave_1: entered allmulticast mode [ 943.289978][T11594] bridge_slave_1: entered promiscuous mode [ 944.636268][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 944.648483][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.657107][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.671661][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.684305][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 946.766072][ T5619] Bluetooth: hci1: command tx timeout [ 947.055347][T10961] bridge_slave_1: left allmulticast mode [ 947.061046][T10961] bridge_slave_1: left promiscuous mode [ 947.089840][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.187144][T10961] bridge_slave_0: left allmulticast mode [ 947.194551][T10961] bridge_slave_0: left promiscuous mode [ 947.226683][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.247036][T11526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 947.259847][T11526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 947.285800][T11526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 947.295700][T11526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 947.306487][T11526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 947.425632][T10961] bridge_slave_1: left allmulticast mode [ 947.455262][T10961] bridge_slave_1: left promiscuous mode [ 947.474185][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.509499][T10961] bridge_slave_0: left allmulticast mode [ 947.534082][T10961] bridge_slave_0: left promiscuous mode [ 949.993790][ T5619] Bluetooth: hci1: command tx timeout [ 950.000355][ T5619] Bluetooth: hci7: command tx timeout [ 950.053990][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.646586][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.665954][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.676955][T10961] bond0 (unregistering): Released all slaves [ 950.847180][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.861963][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.872912][T10961] bond0 (unregistering): Released all slaves [ 950.912068][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.176489][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.336244][T11594] team0: Port device team_slave_0 added [ 951.345865][T10961] tipc: Left network mode [ 951.426881][T11594] team0: Port device team_slave_1 added [ 951.434974][T11828] loop2: detected capacity change from 0 to 1024 [ 952.458087][ T5619] Bluetooth: hci1: command tx timeout [ 952.472456][T11526] Bluetooth: hci7: command tx timeout [ 952.658091][T11594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.674549][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.733203][T11594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.857416][T11843] loop2: detected capacity change from 0 to 1024 [ 952.909731][T11594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.922893][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.975902][T11843] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 952.998397][T11843] hfsplus: hfsplus: invalid btree header node [ 953.012021][T11843] hfsplus: (loop2): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 953.023122][T11594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.048604][T11843] hfsplus: Run fsck.hfsplus to repair. [ 953.368288][T11594] hsr_slave_0: entered promiscuous mode [ 953.401911][T11594] hsr_slave_1: entered promiscuous mode [ 953.421284][T11594] debugfs: 'hsr0' already exists in 'hsr' [ 953.431393][T11594] Cannot create hsr debugfs directory [ 954.691725][T11526] Bluetooth: hci7: command tx timeout [ 954.697412][ T5619] Bluetooth: hci1: command tx timeout [ 956.652288][T11873] ceph: No mds server is up or the cluster is laggy [ 956.764114][T11526] Bluetooth: hci7: command tx timeout [ 957.537939][ T31] audit: type=1800 audit(1786137385.963:51): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1091" name="file0" dev="overlay" ino=1982 res=0 errno=0 [ 957.703628][ T1624] libceph: connect (1)[c::]:6789 error -101 [ 957.739587][ T1624] libceph: mon0 (1)[c::]:6789 connect error [ 958.014720][ T1624] libceph: connect (1)[c::]:6789 error -101 [ 958.102522][ T1624] libceph: mon0 (1)[c::]:6789 connect error [ 958.774434][ T1624] libceph: connect (1)[c::]:6789 error -101 [ 958.814369][ T1624] libceph: mon0 (1)[c::]:6789 connect error [ 959.007592][T11887] trusted_key: encrypted_key: key user:syz not found [ 960.041344][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 960.075572][T11887] loop2: detected capacity change from 0 to 2048 [ 960.159143][T11887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.175136][T11887] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.188561][T10961] hsr_slave_0: left promiscuous mode [ 960.230463][T10961] hsr_slave_1: left promiscuous mode [ 960.256272][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.295258][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.335870][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.373150][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.398150][T10961] hsr_slave_0: left promiscuous mode [ 960.405373][T10961] hsr_slave_1: left promiscuous mode [ 960.406382][T11893] loop6: detected capacity change from 0 to 512 [ 960.411647][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.435797][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.472177][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.491750][T11893] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1093: iget: bad i_size value: 38620345925642 [ 960.506119][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.529663][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.540971][T11893] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 960.544503][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 960.560154][ C1] EXT4-fs (loop6): initial error at time 1786137389: ext4_orphan_get:1399: inode 15 [ 960.569850][ C1] EXT4-fs (loop6): last error at time 1786137389: ext4_orphan_get:1399: inode 15 [ 960.581898][T11893] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1093: couldn't read orphan inode 15 (err -117) [ 960.610637][T11893] loop6: lost filesystem error report for type 5 error -117 [ 960.617748][T11893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.641629][T10961] veth1_macvtap: left promiscuous mode [ 960.648097][T10961] veth0_macvtap: left promiscuous mode [ 960.658808][T10961] veth1_vlan: left promiscuous mode [ 960.675306][T10961] veth0_vlan: left promiscuous mode [ 960.695861][T10961] veth1_macvtap: left promiscuous mode [ 960.711774][T10961] veth0_macvtap: left promiscuous mode [ 960.720730][T10961] veth1_vlan: left promiscuous mode [ 960.733827][T10961] veth0_vlan: left promiscuous mode [ 961.284491][ T6067] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 961.301618][ T6067] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 961.314829][ T6067] EXT4-fs (loop6): This should not happen!! Data will be lost [ 961.314829][ T6067] [ 961.330111][ T6067] EXT4-fs (loop6): Total free blocks count 0 [ 961.337728][ T6067] EXT4-fs (loop6): Free/Dirty block details [ 961.344204][ T6067] EXT4-fs (loop6): free_blocks=0 [ 961.349280][ T6067] EXT4-fs (loop6): dirty_blocks=5480 [ 961.357465][ T6067] EXT4-fs (loop6): Block reservation details [ 961.363926][ T6067] EXT4-fs (loop6): i_reserved_data_blocks=5480 [ 961.424776][ T6067] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 961.444122][T10961] team0 (unregistering): Port device team_slave_1 removed [ 961.471887][T10961] team0 (unregistering): Port device team_slave_0 removed [ 961.503277][T10499] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 963.976367][ T31] audit: type=1804 audit(1786137392.933:52): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1097" name="/newroot/56/file0" dev="tmpfs" ino=344 res=1 errno=0 [ 968.161981][T10961] team0 (unregistering): Port device team_slave_1 removed [ 969.877379][T10961] team0 (unregistering): Port device team_slave_0 removed [ 970.383591][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.413885][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.421856][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.434845][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.445631][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.455819][T11698] bridge_slave_0: entered allmulticast mode [ 970.464911][T11698] bridge_slave_0: entered promiscuous mode [ 970.472214][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.481343][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.926328][ T5619] Bluetooth: hci4: command tx timeout [ 973.068834][T11698] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.076410][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.083999][T11698] bridge_slave_1: entered allmulticast mode [ 973.092614][T11698] bridge_slave_1: entered promiscuous mode [ 973.397009][T11698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.519085][T11698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.101923][ T5600] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 974.113955][T11698] team0: Port device team_slave_0 added [ 974.137150][T11698] team0: Port device team_slave_1 added [ 974.308827][ T5600] usb 1-1: Dual-Role OTG device on HNP port [ 974.327759][ T5600] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 974.385681][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.435818][T11698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.493065][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.536573][ T5600] gspca_main: spca501-2.14.0 probing 0000:0000 [ 974.557111][ T5600] gspca_spca501: reg write: error -32 [ 974.581884][ T5600] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 974.612762][T11698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.623653][ T5600] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 974.792754][T11698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.829016][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.291932][T11949] loop6: detected capacity change from 0 to 512 [ 975.360763][T11526] Bluetooth: hci4: command tx timeout [ 975.705948][T11949] EXT4-fs error (device loop6): ext4_quota_enable:7227: comm syz.6.1103: Bad quota inum: 2, type: 1 [ 975.717054][T11949] loop6: lost filesystem error report for type 5 error -117 [ 975.723003][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 975.736796][ C1] EXT4-fs (loop6): initial error at time 1786137404: ext4_quota_enable:7227 [ 975.745527][ C1] EXT4-fs (loop6): last error at time 1786137404: ext4_quota_enable:7227 [ 975.801354][T11949] EXT4-fs warning (device loop6): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 975.821458][T11949] EXT4-fs (loop6): mount failed [ 975.885906][T11698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.286531][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 977.403094][T11526] Bluetooth: hci4: command tx timeout [ 977.580940][T11698] hsr_slave_0: entered promiscuous mode [ 977.626725][T11698] hsr_slave_1: entered promiscuous mode [ 978.034922][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.042510][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.062028][T11811] bridge_slave_0: entered allmulticast mode [ 978.091149][T11811] bridge_slave_0: entered promiscuous mode [ 981.186160][ T5619] Bluetooth: hci4: command tx timeout [ 982.107583][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.115064][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.122865][T11811] bridge_slave_1: entered allmulticast mode [ 982.133455][T11811] bridge_slave_1: entered promiscuous mode [ 982.182431][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 982.236495][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1107'. [ 985.157670][T10961] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.387295][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.407288][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.433461][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.444571][T11801] bridge_slave_0: entered allmulticast mode [ 985.466448][T11801] bridge_slave_0: entered promiscuous mode [ 985.528961][T10961] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.558804][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.656218][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.675028][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.690310][T11801] bridge_slave_1: entered allmulticast mode [ 985.702173][T11801] bridge_slave_1: entered promiscuous mode [ 985.778792][T11811] team0: Port device team_slave_0 added [ 985.856618][T10961] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.895630][T11811] team0: Port device team_slave_1 added [ 985.906035][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.920380][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.046715][T10961] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.365660][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.392193][T12038] loop2: detected capacity change from 0 to 1024 [ 986.423144][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.450211][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.465769][T11801] team0: Port device team_slave_0 added [ 986.476905][T11801] team0: Port device team_slave_1 added [ 986.539525][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.547092][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.580401][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.158782][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.198586][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.291589][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.560507][ T31] audit: type=1804 audit(1786137417.463:53): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1115" name="/newroot/356/file0" dev="tmpfs" ino=2050 res=1 errno=0 [ 989.206229][T11811] hsr_slave_0: entered promiscuous mode [ 989.378767][T11811] hsr_slave_1: entered promiscuous mode [ 989.542100][T11811] debugfs: 'hsr0' already exists in 'hsr' [ 989.620362][T11811] Cannot create hsr debugfs directory [ 990.062800][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.112166][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.385314][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.810953][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 990.832725][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 990.897403][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 990.912145][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 990.923928][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.340285][T10961] bridge_slave_1: left allmulticast mode [ 991.347097][T10961] bridge_slave_1: left promiscuous mode [ 991.354728][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.421595][T10961] bridge_slave_0: left allmulticast mode [ 991.445896][T10961] bridge_slave_0: left promiscuous mode [ 991.463540][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.498757][T10961] bridge_slave_1: left allmulticast mode [ 991.506207][T10961] bridge_slave_1: left promiscuous mode [ 991.512105][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.538129][T10961] bridge_slave_0: left allmulticast mode [ 991.553284][T10961] bridge_slave_0: left promiscuous mode [ 991.563359][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.592142][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 991.620739][T10961] bridge_slave_1: left allmulticast mode [ 991.632832][T10961] bridge_slave_1: left promiscuous mode [ 991.638920][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.650515][T10961] bridge_slave_0: left allmulticast mode [ 991.656391][T10961] bridge_slave_0: left promiscuous mode [ 991.662225][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.679844][T10961] bridge_slave_1: left allmulticast mode [ 991.686404][T10961] bridge_slave_1: left promiscuous mode [ 991.692282][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.703521][T10961] bridge_slave_0: left allmulticast mode [ 991.709565][T10961] bridge_slave_0: left promiscuous mode [ 991.716180][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.736008][T10961] bridge_slave_1: left allmulticast mode [ 991.742045][T10961] bridge_slave_1: left promiscuous mode [ 991.749561][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.761296][T10961] bridge_slave_0: left allmulticast mode [ 991.768050][T10961] bridge_slave_0: left promiscuous mode [ 991.776689][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.852813][T12071] loop6: detected capacity change from 0 to 32768 [ 991.887136][T12071] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1118 (12071) [ 992.027015][T12071] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 992.037866][T12071] BTRFS info (device loop6): using crc32c checksum algorithm [ 992.118292][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.139214][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.167812][T10961] bond0 (unregistering): Released all slaves [ 992.206714][T12071] BTRFS info (device loop6): enabling ssd optimizations [ 992.226475][T12071] BTRFS info (device loop6): turning on async discard [ 992.236821][T12071] BTRFS info (device loop6): enabling free space tree [ 992.420271][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.457407][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.470491][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.489262][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.512869][T10961] bond0 (unregistering): Released all slaves [ 992.522285][T10499] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 992.783960][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.832139][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.866732][T10961] bond0 (unregistering): Released all slaves [ 993.007725][T11526] Bluetooth: hci5: command tx timeout [ 994.166496][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.211136][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.247250][T10961] bond0 (unregistering): Released all slaves [ 994.498299][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.514962][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.529529][T10961] bond0 (unregistering): Released all slaves [ 994.731208][ T5269] 8021q: adding VLAN 0 to HW filter on device eth23 [ 995.051914][T11801] hsr_slave_0: entered promiscuous mode [ 995.076128][T11801] hsr_slave_1: entered promiscuous mode [ 995.083383][T11526] Bluetooth: hci5: command tx timeout [ 995.097975][T11801] debugfs: 'hsr0' already exists in 'hsr' [ 995.103919][T11801] Cannot create hsr debugfs directory [ 996.011262][T12111] loop2: detected capacity change from 0 to 512 [ 996.853017][T12111] EXT4-fs error (device loop2): ext4_quota_enable:7227: comm syz.2.1122: Bad quota inum: 2, type: 1 [ 996.863889][T12111] loop2: lost filesystem error report for type 5 error -117 [ 996.869273][T12111] EXT4-fs warning (device loop2): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 996.876659][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 996.876690][ C1] EXT4-fs (loop2): initial error at time 1786137425: ext4_quota_enable:7227 [ 996.876729][ C1] EXT4-fs (loop2): last error at time 1786137425: ext4_quota_enable:7227 [ 996.925240][T12111] EXT4-fs (loop2): mount failed [ 997.163440][T11526] Bluetooth: hci5: command tx timeout [ 999.243375][T11526] Bluetooth: hci5: command tx timeout [ 1002.747882][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1123'. [ 1002.785241][T12153] program syz.2.1125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1003.068312][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.084894][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.092357][T11910] bridge_slave_0: entered allmulticast mode [ 1003.103238][T11910] bridge_slave_0: entered promiscuous mode [ 1003.279943][T10961] hsr_slave_0: left promiscuous mode [ 1003.296240][T10961] hsr_slave_1: left promiscuous mode [ 1003.321049][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.335662][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.359213][T10961] hsr_slave_0: left promiscuous mode [ 1003.471449][T12164] 9p: Bad value for 'rfdno' [ 1003.912284][T10961] hsr_slave_1: left promiscuous mode [ 1003.949024][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.986112][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.039430][T10961] hsr_slave_0: left promiscuous mode [ 1004.061527][T10961] hsr_slave_1: left promiscuous mode [ 1004.088237][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.144840][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.178996][T10961] hsr_slave_0: left promiscuous mode [ 1004.195574][T10961] hsr_slave_1: left promiscuous mode [ 1004.214367][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.233646][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.281850][T10961] hsr_slave_0: left promiscuous mode [ 1005.296892][T10961] hsr_slave_1: left promiscuous mode [ 1005.491011][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.550929][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.612642][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.641283][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.718426][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1005.730371][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1005.748085][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1005.757524][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1005.766836][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1005.794954][T10961] veth1_macvtap: left promiscuous mode [ 1005.818137][T10961] veth0_macvtap: left promiscuous mode [ 1005.841159][T10961] veth1_vlan: left promiscuous mode [ 1005.870695][T10961] veth0_vlan: left promiscuous mode [ 1006.166459][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1006.182308][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1006.195837][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1006.235079][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1006.254542][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1007.990702][T11526] Bluetooth: hci6: command tx timeout [ 1008.215416][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1008.283184][T11526] Bluetooth: hci8: command tx timeout [ 1008.318878][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1008.956373][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1009.012762][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1010.353083][T11526] Bluetooth: hci6: command tx timeout [ 1010.363196][ T5619] Bluetooth: hci8: command tx timeout [ 1011.316544][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1011.356803][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1014.750440][T11526] Bluetooth: hci6: command tx timeout [ 1014.795701][ T5619] Bluetooth: hci8: command tx timeout [ 1016.853455][T12201] Bluetooth: hci8: command tx timeout [ 1016.861262][T12201] Bluetooth: hci6: command tx timeout [ 1017.220024][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1017.247660][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1018.406268][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1018.426256][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1018.597035][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.608537][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.618278][T11910] bridge_slave_1: entered allmulticast mode [ 1018.626425][T11910] bridge_slave_1: entered promiscuous mode [ 1018.712686][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1136'. [ 1019.031631][T11910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.115410][T11910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.192121][T11910] team0: Port device team_slave_0 added [ 1023.260924][T11910] team0: Port device team_slave_1 added [ 1023.740800][T12238] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[12238] [ 1023.785524][T12238] 9p: Bad value for 'rfdno' [ 1024.503103][T12235] affs: No valid root block on device nullb0 [ 1024.769932][T12245] loop6: detected capacity change from 0 to 256 [ 1024.965840][ T31] audit: type=1804 audit(1786137453.933:54): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1141" name="/newroot/80/file0/bus" dev="loop6" ino=1048691 res=1 errno=0 [ 1025.061067][T11910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.098986][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.207809][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.470644][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.492910][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.255602][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.284082][ T5626] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1029.216294][T12268] loop8: detected capacity change from 0 to 7 [ 1029.297302][T12268] Dev loop8: unable to read RDB block 7 [ 1029.320633][T12268] loop8: unable to read partition table [ 1029.355696][T12268] loop8: partition table beyond EOD, truncated [ 1029.369027][T12268] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1034.194351][ T5269] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1034.247707][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1034.269128][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1034.279210][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1034.289464][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1034.297481][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1034.846213][ T5619] Bluetooth: hci8: command 0x0405 tx timeout [ 1035.713690][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.746428][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.783310][T12059] bridge_slave_0: entered allmulticast mode [ 1035.804158][T12059] bridge_slave_0: entered promiscuous mode [ 1035.841030][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.860290][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.873287][T12059] bridge_slave_1: entered allmulticast mode [ 1035.899113][T12059] bridge_slave_1: entered promiscuous mode [ 1036.239611][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 1036.363199][ T5619] Bluetooth: hci1: command tx timeout [ 1038.378307][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.850298][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.363673][ T5619] Bluetooth: hci1: command tx timeout [ 1039.539274][T12345] affs: No valid root block on device nullb0 [ 1039.853473][T12348] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[12348] [ 1040.010038][T12346] 9p: Bad value for 'rfdno' [ 1040.485262][T12059] team0: Port device team_slave_0 added [ 1041.408006][ T5619] Bluetooth: hci1: command tx timeout [ 1041.489737][T12059] team0: Port device team_slave_1 added [ 1041.519046][T10961] bridge_slave_1: left allmulticast mode [ 1041.544660][T10961] bridge_slave_1: left promiscuous mode [ 1041.562975][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.191531][ T5619] Bluetooth: hci1: command tx timeout [ 1044.384984][T10961] bridge_slave_0: left allmulticast mode [ 1044.412073][T10961] bridge_slave_0: left promiscuous mode [ 1044.438454][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.510570][T10961] bridge_slave_1: left allmulticast mode [ 1044.528701][T10961] bridge_slave_1: left promiscuous mode [ 1044.543417][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.570232][T10961] bridge_slave_0: left allmulticast mode [ 1044.583221][T10961] bridge_slave_0: left promiscuous mode [ 1044.595945][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.944495][T10961] bridge_slave_1: left allmulticast mode [ 1044.956694][T10961] bridge_slave_1: left promiscuous mode [ 1044.973331][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.461124][T10961] bridge_slave_0: left allmulticast mode [ 1045.494354][T10961] bridge_slave_0: left promiscuous mode [ 1045.524771][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.580301][T10961] bridge_slave_1: left allmulticast mode [ 1045.595066][T10961] bridge_slave_1: left promiscuous mode [ 1045.613349][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.629863][T10961] bridge_slave_0: left allmulticast mode [ 1045.645823][T10961] bridge_slave_0: left promiscuous mode [ 1045.669656][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.919270][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.971868][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.095823][T10961] bond0 (unregistering): Released all slaves [ 1046.199561][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.212423][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.232247][T10961] bond0 (unregistering): Released all slaves [ 1046.333343][ T5626] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1046.822194][ T5626] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1046.845194][ T5626] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1046.855236][ T5626] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1046.866817][ T5626] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1046.884402][ T5626] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1046.894361][ T5626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.902400][ T5626] usb 7-1: Product: syz [ 1046.908523][ T5626] usb 7-1: Manufacturer: syz [ 1046.913579][ T5626] usb 7-1: SerialNumber: syz [ 1046.989936][ T5626] usb 7-1: config 0 descriptor?? [ 1047.049850][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.080873][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.095543][T10961] bond0 (unregistering): Released all slaves [ 1047.239232][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.289838][ T5626] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1047.327721][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.342079][T10961] bond0 (unregistering): Released all slaves [ 1047.531941][T12377] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 1047.572623][ T5626] usb 7-1: USB disconnect, device number 3 [ 1047.768095][T12386] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 1048.284451][ T5269] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1051.609686][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.628569][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.648174][T12177] bridge_slave_0: entered allmulticast mode [ 1051.669100][T12177] bridge_slave_0: entered promiscuous mode [ 1051.689259][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.704847][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.722543][T12177] bridge_slave_1: entered allmulticast mode [ 1051.742114][T12177] bridge_slave_1: entered promiscuous mode [ 1051.795225][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.916033][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.015962][T12399] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[12399] [ 1052.065625][T12399] 9p: Bad value for 'rfdno' [ 1052.519965][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1052.531196][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1052.541333][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1052.554464][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1052.567429][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1052.843289][T10961] hsr_slave_0: left promiscuous mode [ 1052.920240][T10961] hsr_slave_1: left promiscuous mode [ 1052.944764][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.973552][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.000034][T10961] hsr_slave_0: left promiscuous mode [ 1053.009415][T10961] hsr_slave_1: left promiscuous mode [ 1053.042527][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.106456][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.117527][T12406] affs: No valid root block on device nullb0 [ 1053.135637][T10961] hsr_slave_0: left promiscuous mode [ 1053.143544][T10961] hsr_slave_1: left promiscuous mode [ 1053.150519][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.197209][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.553773][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1053.620849][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1053.900529][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.909636][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.337072][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1054.364433][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1054.611648][ T5625] Bluetooth: hci2: command tx timeout [ 1057.980641][ T5625] Bluetooth: hci2: command tx timeout [ 1058.270829][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1058.293094][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1058.747455][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1058.770254][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1058.952731][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.960142][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.979214][T12181] bridge_slave_0: entered allmulticast mode [ 1059.002510][T12181] bridge_slave_0: entered promiscuous mode [ 1059.269073][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.293168][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.309227][T12181] bridge_slave_1: entered allmulticast mode [ 1059.325485][T12181] bridge_slave_1: entered promiscuous mode [ 1059.440578][T12436] loop2: detected capacity change from 0 to 256 [ 1059.537606][ T31] audit: type=1804 audit(1786137488.503:55): pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1173" name="/newroot/381/file0/bus" dev="loop2" ino=1048692 res=1 errno=0 [ 1059.679081][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1174'. [ 1059.698654][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.813037][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.854779][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.962652][T12439] syzkaller0: entered promiscuous mode [ 1059.971439][T12439] syzkaller0: entered allmulticast mode [ 1060.002293][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.042450][T12442] tipc: Started in network mode [ 1060.043651][ T5625] Bluetooth: hci2: command tx timeout [ 1060.051126][T12442] tipc: Node identity 16bda57acbbd, cluster identity 4711 [ 1060.108439][T12442] tipc: Enabled bearer , priority 0 [ 1060.221363][T12434] tipc: Resetting bearer [ 1060.309193][T12434] tipc: Disabling bearer [ 1060.381687][T12177] team0: Port device team_slave_0 added [ 1060.414827][T12177] team0: Port device team_slave_1 added [ 1060.616634][T12181] team0: Port device team_slave_0 added [ 1060.630434][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.637731][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.667384][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.682432][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.690644][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.718112][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.804334][T12181] team0: Port device team_slave_1 added [ 1061.034255][T12461] affs: No valid root block on device nullb0 [ 1061.180502][T12464] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[12464] [ 1061.197067][T12464] 9p: Bad value for 'rfdno' [ 1062.266703][ T5625] Bluetooth: hci2: command tx timeout [ 1065.381013][ T31] audit: type=1800 audit(1786137494.303:56): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1178" name="file0" dev="overlay" ino=609 res=0 errno=0 [ 1067.396745][T12181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.161433][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.194917][T12181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.931644][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1069.947550][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1069.969987][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1070.035322][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1070.048876][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1070.198237][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.248735][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.340904][T12286] bridge_slave_0: entered allmulticast mode [ 1070.416432][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.433546][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.442909][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.454787][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.466884][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1070.496988][T12286] bridge_slave_0: entered promiscuous mode [ 1070.555072][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.574713][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.596156][T12286] bridge_slave_1: entered allmulticast mode [ 1070.616282][T12286] bridge_slave_1: entered promiscuous mode [ 1070.939893][ T5269] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1071.027333][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.101527][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.168329][ T5625] Bluetooth: hci4: command tx timeout [ 1072.523685][ T5625] Bluetooth: hci5: command tx timeout [ 1072.742082][T12286] team0: Port device team_slave_0 added [ 1072.792062][T12286] team0: Port device team_slave_1 added [ 1073.257514][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.329600][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.373109][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.438806][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.477145][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.584403][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.273519][T12534] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[12534] [ 1074.416363][T12533] 9p: Bad value for 'rfdno' [ 1074.870505][T12201] Bluetooth: hci5: command tx timeout [ 1074.876102][ T5619] Bluetooth: hci4: command tx timeout [ 1076.011066][T10961] bridge_slave_1: left allmulticast mode [ 1076.032782][T10961] bridge_slave_1: left promiscuous mode [ 1076.057995][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.157050][T10961] bridge_slave_0: left allmulticast mode [ 1076.200798][T10961] bridge_slave_0: left promiscuous mode [ 1076.223618][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.356051][T10961] bridge_slave_1: left allmulticast mode [ 1076.386684][T10961] bridge_slave_1: left promiscuous mode [ 1076.403842][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.429759][T10961] bridge_slave_0: left allmulticast mode [ 1076.453407][T10961] bridge_slave_0: left promiscuous mode [ 1076.459341][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.533489][T10961] bridge_slave_1: left allmulticast mode [ 1076.551775][T10961] bridge_slave_1: left promiscuous mode [ 1076.573369][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.605852][T10961] bridge_slave_0: left allmulticast mode [ 1076.623364][T10961] bridge_slave_0: left promiscuous mode [ 1076.633952][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.938054][ T5625] Bluetooth: hci4: command tx timeout [ 1076.946133][ T5625] Bluetooth: hci5: command tx timeout [ 1078.952100][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.983720][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.003338][ T5625] Bluetooth: hci5: command tx timeout [ 1079.008803][ T5619] Bluetooth: hci4: command tx timeout [ 1079.028723][T10961] bond0 (unregistering): Released all slaves [ 1079.260624][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.295590][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.328364][T10961] bond0 (unregistering): Released all slaves [ 1079.855793][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.318199][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.348030][T10961] bond0 (unregistering): Released all slaves [ 1080.472998][ T5269] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1080.795690][ T31] audit: type=1800 audit(1786137509.763:57): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1194" name="c_srate" dev="configfs" ino=36854 res=0 errno=0 [ 1080.836886][T12286] hsr_slave_0: entered promiscuous mode [ 1080.848092][T12286] hsr_slave_1: entered promiscuous mode [ 1081.045500][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.064202][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.857846][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.057101][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1084.103750][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1089.967609][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1090.040308][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1090.467561][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1090.584009][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1090.880364][T12602] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[12602] [ 1090.897093][T12602] 9p: Bad value for 'rfdno' [ 1092.518650][T12615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 1095.059978][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.127687][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.171393][T12400] bridge_slave_0: entered allmulticast mode [ 1095.214179][T12400] bridge_slave_0: entered promiscuous mode [ 1095.279968][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.315852][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.335216][T12400] bridge_slave_1: entered allmulticast mode [ 1095.377942][T12400] bridge_slave_1: entered promiscuous mode [ 1095.397946][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1095.411372][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1095.421032][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1095.430193][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1095.439112][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1095.668904][T12400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.744587][T12400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.180226][T12400] team0: Port device team_slave_0 added [ 1096.281724][T12400] team0: Port device team_slave_1 added [ 1096.573883][T12400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.581084][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.683869][T12400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.850844][T12400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.881311][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.921043][T12400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.444562][T10961] bridge_slave_1: left allmulticast mode [ 1097.450507][T10961] bridge_slave_1: left promiscuous mode [ 1097.461893][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.477326][T10961] bridge_slave_0: left allmulticast mode [ 1097.483163][ T5625] Bluetooth: hci6: command tx timeout [ 1097.489288][T10961] bridge_slave_0: left promiscuous mode [ 1097.510814][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.794867][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.811765][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.824933][T10961] bond0 (unregistering): Released all slaves [ 1098.158145][T12400] hsr_slave_0: entered promiscuous mode [ 1098.247187][T12400] hsr_slave_1: entered promiscuous mode [ 1098.346223][T12400] debugfs: 'hsr0' already exists in 'hsr' [ 1098.397114][T12400] Cannot create hsr debugfs directory [ 1098.607889][ T5269] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1099.563212][ T5625] Bluetooth: hci6: command tx timeout [ 1099.973149][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.993140][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.016050][T12492] bridge_slave_0: entered allmulticast mode [ 1100.025124][T12492] bridge_slave_0: entered promiscuous mode [ 1100.054479][T10961] hsr_slave_0: left promiscuous mode [ 1100.061361][T10961] hsr_slave_1: left promiscuous mode [ 1100.069994][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.086239][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.488070][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1100.517494][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1100.538460][T12683] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[12683] [ 1100.556954][T12683] 9p: Bad value for 'rfdno' [ 1100.880150][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.888220][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.902840][T12492] bridge_slave_1: entered allmulticast mode [ 1100.927982][T12492] bridge_slave_1: entered promiscuous mode [ 1101.439047][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.450796][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.458869][T12505] bridge_slave_0: entered allmulticast mode [ 1101.469174][T12505] bridge_slave_0: entered promiscuous mode [ 1101.481213][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.489061][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.498002][T12505] bridge_slave_1: entered allmulticast mode [ 1101.508136][T12505] bridge_slave_1: entered promiscuous mode [ 1101.588067][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.617227][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.657102][ T5625] Bluetooth: hci6: command tx timeout [ 1101.781061][T12698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 1104.194999][ T5619] Bluetooth: hci6: command tx timeout [ 1104.227808][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.276600][T12505] team0: Port device team_slave_0 added [ 1104.380053][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.412543][T12505] team0: Port device team_slave_1 added [ 1104.650221][T12492] team0: Port device team_slave_0 added [ 1104.669970][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.679808][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.733079][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.775111][T12492] team0: Port device team_slave_1 added [ 1104.865035][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.883145][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.943159][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.988468][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.998342][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.029347][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.127852][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.143060][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.181100][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.508525][T12505] hsr_slave_0: entered promiscuous mode [ 1105.523633][T12505] hsr_slave_1: entered promiscuous mode [ 1106.002098][T12492] hsr_slave_0: entered promiscuous mode [ 1106.028201][T12492] hsr_slave_1: entered promiscuous mode [ 1106.039910][T12492] debugfs: 'hsr0' already exists in 'hsr' [ 1106.047769][T12492] Cannot create hsr debugfs directory [ 1106.160557][T12726] : renamed from vlan0 (while UP) [ 1109.996471][ T5269] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1110.567932][T12750] loop6: detected capacity change from 0 to 1024 [ 1110.664100][T12750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.844245][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1110.866445][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1110.904578][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.085215][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.096792][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1111.256933][T12631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.266272][T12631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.275291][T12631] bridge_slave_0: entered allmulticast mode [ 1111.289819][T12631] bridge_slave_0: entered promiscuous mode [ 1111.872871][T12766] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[12766] [ 1111.886872][T12631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.897745][T12766] 9p: Bad value for 'rfdno' [ 1111.903769][T12631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.911293][T12631] bridge_slave_1: entered allmulticast mode [ 1111.921587][T12631] bridge_slave_1: entered promiscuous mode [ 1112.119155][T12631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.201566][T12631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.539832][T12631] team0: Port device team_slave_0 added [ 1112.548935][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.623754][T12631] team0: Port device team_slave_1 added [ 1114.314478][ T5619] Bluetooth: hci1: command tx timeout [ 1114.416866][T12631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.431536][T12631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.460856][T12631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.900870][T12631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.920580][T12631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.080951][T12789] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1223'. [ 1115.415271][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.442874][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.479388][T12631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.893399][T12796] jffs2: notice: (12796) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1116.166422][T12631] hsr_slave_0: entered promiscuous mode [ 1116.185032][T12631] hsr_slave_1: entered promiscuous mode [ 1116.206979][T12631] debugfs: 'hsr0' already exists in 'hsr' [ 1116.223039][T12631] Cannot create hsr debugfs directory [ 1116.235817][T12505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1116.301764][T12505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1116.360152][T12505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1116.372157][T12505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1116.373724][ T5619] Bluetooth: hci1: command tx timeout [ 1116.394163][T12505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1116.417483][T12505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1116.438195][ T5269] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1116.516319][T12505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1116.575057][T12505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.530485][ T5619] Bluetooth: hci1: command tx timeout [ 1119.253105][ T31] audit: type=1800 audit(1786137547.963:58): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1228" name="file0" dev="overlay" ino=2339 res=0 errno=0 [ 1121.403525][ T5619] Bluetooth: hci1: command tx timeout [ 1122.752871][T10961] bridge_slave_1: left allmulticast mode [ 1122.760654][T10961] bridge_slave_1: left promiscuous mode [ 1122.767423][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.779774][T10961] bridge_slave_0: left allmulticast mode [ 1122.785729][T10961] bridge_slave_0: left promiscuous mode [ 1122.791546][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.981034][T10961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.001029][T10961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.017018][T10961] bond0 (unregistering): Released all slaves [ 1123.242453][T10961] hsr_slave_0: left promiscuous mode [ 1123.393074][T10961] hsr_slave_1: left promiscuous mode [ 1123.406116][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.417777][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.219905][T10961] team0 (unregistering): Port device team_slave_1 removed [ 1125.507289][T10961] team0 (unregistering): Port device team_slave_0 removed [ 1125.698114][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 1126.291197][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.299108][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.307759][T12759] bridge_slave_0: entered allmulticast mode [ 1126.319873][T12759] bridge_slave_0: entered promiscuous mode [ 1126.383374][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.390552][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.397846][T12759] bridge_slave_1: entered allmulticast mode [ 1126.418723][T12759] bridge_slave_1: entered promiscuous mode [ 1126.500912][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.514534][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.723977][T12759] team0: Port device team_slave_0 added [ 1127.069540][T12759] team0: Port device team_slave_1 added [ 1127.381942][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.405259][T12867] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[12867] [ 1127.421212][T12867] 9p: Bad value for 'rfdno' [ 1127.675676][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1127.688969][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1127.700553][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1127.712504][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1127.723843][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1127.809294][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.827508][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.883061][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.900482][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.910273][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.939414][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.247678][T12759] hsr_slave_0: entered promiscuous mode [ 1128.262765][T12759] hsr_slave_1: entered promiscuous mode [ 1128.275582][T12759] debugfs: 'hsr0' already exists in 'hsr' [ 1128.292845][T12759] Cannot create hsr debugfs directory [ 1129.117859][ T31] audit: type=1800 audit(1786137558.073:59): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1238" name="file0" dev="overlay" ino=2380 res=0 errno=0 [ 1129.803519][ T5619] Bluetooth: hci2: command tx timeout [ 1130.546355][T12505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.013330][ T6068] bridge_slave_1: left allmulticast mode [ 1131.019219][ T6068] bridge_slave_1: left promiscuous mode [ 1131.041589][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.106125][ T6068] bridge_slave_0: left allmulticast mode [ 1131.129421][ T6068] bridge_slave_0: left promiscuous mode [ 1131.148969][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.599514][ T6068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.673669][ T6068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.786062][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1131.797944][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1131.807749][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1131.816493][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1131.824696][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.022091][ T6068] bond0 (unregistering): Released all slaves [ 1132.094319][ T5269] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1132.114541][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.121732][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.131309][ T5619] Bluetooth: hci2: command tx timeout [ 1132.498560][ T6068] hsr_slave_0: left promiscuous mode [ 1132.507204][ T6068] hsr_slave_1: left promiscuous mode [ 1132.535056][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.626072][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.032325][ T6068] team0 (unregistering): Port device team_slave_1 removed [ 1133.071554][ T6068] team0 (unregistering): Port device team_slave_0 removed [ 1133.303532][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 1133.710514][T12908] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1133.894584][ T5619] Bluetooth: hci4: command tx timeout [ 1134.213147][ T5619] Bluetooth: hci2: command tx timeout [ 1134.324034][T12925] FAT-fs (nbd6): unable to read boot sector [ 1134.523405][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 1135.628043][T12932] loop2: detected capacity change from 0 to 512 [ 1135.644558][T12932] EXT4-fs: Ignoring removed bh option [ 1135.809988][T12932] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.1245: corrupted in-inode xattr: e_value size too large [ 1135.911778][T12932] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1135.912989][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1135.928875][ C1] EXT4-fs (loop2): initial error at time 1786137564: ext4_iget_extra_inode:5179: inode 15 [ 1135.938882][ C1] EXT4-fs (loop2): last error at time 1786137564: ext4_iget_extra_inode:5179: inode 15 [ 1135.950612][T12932] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1245: couldn't read orphan inode 15 (err -117) [ 1135.965040][ T5619] Bluetooth: hci4: command tx timeout [ 1136.013730][T12932] loop2: lost filesystem error report for type 5 error -117 [ 1136.017925][T12932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.613108][T12943] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[10499] was attempted by ""[12943] [ 1136.676105][T12943] 9p: Bad value for 'rfdno' [ 1136.742825][ T5619] Bluetooth: hci2: command tx timeout [ 1137.170416][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.446872][T12950] affs: No valid root block on device nullb0 [ 1138.054188][ T5619] Bluetooth: hci4: command tx timeout [ 1138.117106][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.127539][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.137396][T12872] bridge_slave_0: entered allmulticast mode [ 1138.147112][T12872] bridge_slave_0: entered promiscuous mode [ 1138.289505][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.297447][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.305734][T12872] bridge_slave_1: entered allmulticast mode [ 1138.320717][T12872] bridge_slave_1: entered promiscuous mode [ 1138.452692][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.464182][T12631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1138.480024][T12631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1138.667166][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.763867][T12631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1138.782602][T12631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1138.967975][T12631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1138.990929][T12631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.039236][T12631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1139.111468][T12631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.434628][T12872] team0: Port device team_slave_0 added [ 1139.445764][T12872] team0: Port device team_slave_1 added [ 1139.626829][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1253'. [ 1141.782406][ T5619] Bluetooth: hci4: command tx timeout [ 1141.889718][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.913143][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.970272][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.994158][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.012421][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.093415][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.337681][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.354173][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.161716][T12900] bridge_slave_0: entered allmulticast mode [ 1145.186888][T12900] bridge_slave_0: entered promiscuous mode [ 1145.211570][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.237721][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.253852][T12900] bridge_slave_1: entered allmulticast mode [ 1145.267076][T12900] bridge_slave_1: entered promiscuous mode [ 1145.407064][T12872] hsr_slave_0: entered promiscuous mode [ 1145.414443][T12872] hsr_slave_1: entered promiscuous mode [ 1145.420995][T12872] debugfs: 'hsr0' already exists in 'hsr' [ 1145.431124][T12872] Cannot create hsr debugfs directory [ 1145.809260][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.838289][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.326720][T12998] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[12998] [ 1146.343565][T12998] 9p: Bad value for 'rfdno' [ 1146.361392][T12900] team0: Port device team_slave_0 added [ 1146.386264][T12900] team0: Port device team_slave_1 added [ 1146.523261][ T6068] bridge_slave_1: left allmulticast mode [ 1146.532373][ T6068] bridge_slave_1: left promiscuous mode [ 1146.539255][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.552325][ T6068] bridge_slave_0: left allmulticast mode [ 1146.558686][ T6068] bridge_slave_0: left promiscuous mode [ 1146.565832][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.924998][ T6068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.944058][ T6068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.960911][ T6068] bond0 (unregistering): Released all slaves [ 1147.169066][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.187747][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.221797][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.308306][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.331601][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.359201][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.394680][ T6068] hsr_slave_0: left promiscuous mode [ 1147.414652][ T6068] hsr_slave_1: left promiscuous mode [ 1147.422821][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.445447][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.857388][ T6068] team0 (unregistering): Port device team_slave_1 removed [ 1147.916713][ T6068] team0 (unregistering): Port device team_slave_0 removed [ 1148.402663][T12759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1148.430122][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.447986][T12759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1148.471076][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.578888][T12900] hsr_slave_0: entered promiscuous mode [ 1148.598991][T12900] hsr_slave_1: entered promiscuous mode [ 1148.659480][T12759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1148.677260][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1148.698541][T12759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1148.768944][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.962581][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 1153.156553][T12872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1153.303804][T12872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.322708][T12872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1153.367022][T12872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.504053][T12872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1153.545527][T12872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.574529][T12872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1153.610948][T12872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.626468][T13037] syzkaller0: entered promiscuous mode [ 1153.633401][T13037] syzkaller0: entered allmulticast mode [ 1153.665603][T13031] tipc: Enabled bearer , priority 0 [ 1153.767856][T13030] tipc: Resetting bearer [ 1153.813782][T13030] tipc: Disabling bearer [ 1154.262095][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.358563][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.465156][T12872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.546053][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.553341][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.757301][T13053] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5610] was attempted by ""[13053] [ 1154.772485][T13053] 9p: Bad value for 'rfdno' [ 1154.849656][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.856937][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.230622][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1155.244769][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1155.253391][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1155.262051][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1155.270817][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1155.509070][T12872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.959156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.966389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.316307][T12900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1156.363848][T12900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.386495][T12900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1156.426592][T12900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.338070][ T5619] Bluetooth: hci5: command tx timeout [ 1158.156673][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.163925][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.223387][T12900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1158.289341][T12900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.403382][ T5619] Bluetooth: hci5: command tx timeout [ 1160.299440][T12900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1161.803444][ T5619] Bluetooth: hci5: command tx timeout [ 1162.755300][T12900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.029214][ T5619] Bluetooth: hci5: command tx timeout [ 1164.983700][T13121] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 1164.983700][T13121] \!ug[ [ 1165.698196][T13135] loop3: detected capacity change from 0 to 7 [ 1165.722549][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.732511][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.768100][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.777897][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.791563][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.801795][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.822096][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.831868][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.843398][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.853113][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.878110][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.887868][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.910985][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1165.920761][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1165.944317][T13135] ldm_validate_partition_table(): Disk read failed. [ 1166.056389][T13137] [ 1166.058750][T13137] ====================================================== [ 1166.065767][T13137] WARNING: possible circular locking dependency detected [ 1166.072785][T13137] syzkaller #0 Not tainted [ 1166.077200][T13137] ------------------------------------------------------ [ 1166.084215][T13137] syz.2.1280/13137 is trying to acquire lock: [ 1166.090285][T13137] ffff88801caed210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 1166.100560][T13137] [ 1166.100560][T13137] but task is already holding lock: [ 1166.107918][T13137] ffff888027eb9c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1166.119252][T13137] [ 1166.119252][T13137] which lock already depends on the new lock. [ 1166.119252][T13137] [ 1166.129667][T13137] [ 1166.129667][T13137] the existing dependency chain (in reverse order) is: [ 1166.138692][T13137] [ 1166.138692][T13137] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 1166.147364][T13137] lock_acquire+0x1b9/0x370 [ 1166.152442][T13137] blk_alloc_queue+0x610/0x790 [ 1166.157767][T13137] blk_mq_alloc_queue+0x174/0x290 [ 1166.163349][T13137] __blk_mq_alloc_disk+0x29/0x120 [ 1166.168919][T13137] loop_add+0x498/0xb60 [ 1166.173618][T13137] loop_init+0x1d3/0x200 [ 1166.178419][T13137] do_one_initcall+0x11d/0x700 [ 1166.183738][T13137] kernel_init_freeable+0x6ea/0x7b0 [ 1166.189508][T13137] kernel_init+0x1f/0x1e0 [ 1166.194369][T13137] ret_from_fork+0x72b/0xd50 [ 1166.199511][T13137] ret_from_fork_asm+0x1a/0x30 [ 1166.204832][T13137] [ 1166.204832][T13137] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1166.212080][T13137] lock_acquire+0x1b9/0x370 [ 1166.217478][T13137] fs_reclaim_acquire+0xc4/0x100 [ 1166.222963][T13137] kmem_cache_alloc_noprof+0x63/0x6a0 [ 1166.228925][T13137] __kernfs_iattrs+0x126/0x450 [ 1166.234294][T13137] __kernfs_setattr+0x4d/0x3c0 [ 1166.239637][T13137] kernfs_iop_setattr+0xda/0x130 [ 1166.245136][T13137] notify_change+0xb25/0x1330 [ 1166.250365][T13137] do_truncate+0x1df/0x240 [ 1166.255338][T13137] path_openat+0x370f/0x4280 [ 1166.260503][T13137] do_file_open+0x20e/0x430 [ 1166.265572][T13137] do_sys_openat2+0x10f/0x1e0 [ 1166.270788][T13137] __x64_sys_openat+0x12d/0x210 [ 1166.276179][T13137] do_syscall_64+0x115/0x870 [ 1166.281427][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.287868][T13137] [ 1166.287868][T13137] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1166.296427][T13137] check_prev_add+0xeb/0xe60 [ 1166.301564][T13137] __lock_acquire+0x136c/0x1a40 [ 1166.306957][T13137] lock_acquire+0x1b9/0x370 [ 1166.312010][T13137] down_read+0x99/0x4c0 [ 1166.316736][T13137] kernfs_iop_getattr+0x9c/0xf0 [ 1166.322155][T13137] vfs_getattr_nosec+0x2d4/0x430 [ 1166.327662][T13137] vfs_getattr+0x4a/0x60 [ 1166.332473][T13137] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1166.339096][T13137] lo_ioctl+0x13aa/0x1bc0 [ 1166.344068][T13137] blkdev_ioctl+0x5ad/0x6f0 [ 1166.349130][T13137] __x64_sys_ioctl+0x18e/0x210 [ 1166.354435][T13137] do_syscall_64+0x115/0x870 [ 1166.359748][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.366173][T13137] [ 1166.366173][T13137] other info that might help us debug this: [ 1166.366173][T13137] [ 1166.376569][T13137] Chain exists of: [ 1166.376569][T13137] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 1166.376569][T13137] [ 1166.391063][T13137] Possible unsafe locking scenario: [ 1166.391063][T13137] [ 1166.398519][T13137] CPU0 CPU1 [ 1166.403922][T13137] ---- ---- [ 1166.409365][T13137] lock(&q->q_usage_counter(io)#20); [ 1166.414761][T13137] lock(fs_reclaim); [ 1166.421279][T13137] lock(&q->q_usage_counter(io)#20); [ 1166.429198][T13137] rlock(&root->kernfs_iattr_rwsem); [ 1166.434602][T13137] [ 1166.434602][T13137] *** DEADLOCK *** [ 1166.434602][T13137] [ 1166.442742][T13137] 3 locks held by syz.2.1280/13137: [ 1166.447936][T13137] #0: ffff888027fb6430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 1166.458294][T13137] #1: ffff888027eb9c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1166.470346][T13137] #2: ffff888027eb9c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1166.482327][T13137] [ 1166.482327][T13137] stack backtrace: [ 1166.488310][T13137] CPU: 1 UID: 0 PID: 13137 Comm: syz.2.1280 Not tainted syzkaller #0 PREEMPT(full) [ 1166.488358][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1166.488380][T13137] Call Trace: [ 1166.488392][T13137] [ 1166.488406][T13137] dump_stack_lvl+0x100/0x190 [ 1166.488451][T13137] print_circular_bug.cold+0x178/0x1c7 [ 1166.488517][T13137] check_noncircular+0x146/0x160 [ 1166.488563][T13137] check_prev_add+0xeb/0xe60 [ 1166.488600][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.488652][T13137] __lock_acquire+0x136c/0x1a40 [ 1166.488701][T13137] lock_acquire+0x1b9/0x370 [ 1166.488740][T13137] ? kernfs_iop_getattr+0x9c/0xf0 [ 1166.488798][T13137] ? __pfx___might_resched+0x10/0x10 [ 1166.488843][T13137] down_read+0x99/0x4c0 [ 1166.488899][T13137] ? kernfs_iop_getattr+0x9c/0xf0 [ 1166.488953][T13137] ? find_held_lock+0x2b/0x80 [ 1166.489011][T13137] ? __pfx_down_read+0x10/0x10 [ 1166.489070][T13137] ? kernfs_root+0xee/0x2a0 [ 1166.489118][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489169][T13137] kernfs_iop_getattr+0x9c/0xf0 [ 1166.489224][T13137] vfs_getattr_nosec+0x2d4/0x430 [ 1166.489281][T13137] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 1166.489335][T13137] vfs_getattr+0x4a/0x60 [ 1166.489394][T13137] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1166.489439][T13137] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1166.489501][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489549][T13137] lo_ioctl+0x13aa/0x1bc0 [ 1166.489594][T13137] ? __pfx_lo_ioctl+0x10/0x10 [ 1166.489638][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489685][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489728][T13137] ? blk_get_meta_cap+0xd4/0x6c0 [ 1166.489792][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489837][T13137] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1166.489895][T13137] ? tomoyo_path_number_perm+0x28f/0x580 [ 1166.489943][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.489995][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490039][T13137] ? blkdev_common_ioctl+0x515/0x2b80 [ 1166.490107][T13137] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1166.490165][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490217][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490262][T13137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1166.490306][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490350][T13137] ? do_vfs_ioctl+0x226/0x13e0 [ 1166.490395][T13137] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1166.490443][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490486][T13137] ? find_held_lock+0x2b/0x80 [ 1166.490543][T13137] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.490588][T13137] ? __pfx_lo_ioctl+0x10/0x10 [ 1166.490630][T13137] blkdev_ioctl+0x5ad/0x6f0 [ 1166.490691][T13137] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1166.490753][T13137] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1166.490817][T13137] __x64_sys_ioctl+0x18e/0x210 [ 1166.490861][T13137] do_syscall_64+0x115/0x870 [ 1166.490916][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.490956][T13137] RIP: 0033:0x7f2a9c79e0d9 [ 1166.490984][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.491024][T13137] RSP: 002b:00007f2a9d5d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.491058][T13137] RAX: ffffffffffffffda RBX: 00007f2a9ca26180 RCX: 00007f2a9c79e0d9 [ 1166.491085][T13137] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1166.491108][T13137] RBP: 00007f2a9c835024 R08: 0000000000000000 R09: 0000000000000000 [ 1166.491131][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.491153][T13137] R13: 00007f2a9ca26218 R14: 00007f2a9ca26180 R15: 00007ffc5b0b0e48 [ 1166.491189][T13137] [ 1166.975896][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.002672][T12900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.033386][T12900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1167.043877][T12900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1167.078552][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1167.088263][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1167.117299][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1167.126997][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1167.136870][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1167.146534][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 1167.154903][T13135] Dev loop3: unable to read RDB block 0 [ 1167.208185][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.215327][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.260723][T13135] loop3: unable to read partition table [ 1167.266729][T13135] loop3: partition table beyond EOD, truncated [ 1167.275191][T13135] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1167.314384][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.321576][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.404148][T13137] ldm_validate_partition_table(): Disk read failed. [ 1167.625819][T13137] Dev loop3: unable to read RDB block 0 [ 1167.748031][T13137] loop3: unable to read partition table [ 1167.865170][T13137] loop3: partition table beyond EOD, truncated [ 1167.976330][T13137] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1168.256942][ T62] bridge_slave_1: left allmulticast mode [ 1168.283407][ T62] bridge_slave_1: left promiscuous mode [ 1168.314179][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.404546][ T62] bridge_slave_0: left allmulticast mode [ 1168.448262][ T62] bridge_slave_0: left promiscuous mode [ 1168.480379][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.694402][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.719143][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.736543][ T62] bond0 (unregistering): Released all slaves [ 1168.881385][ T62] hsr_slave_0: left promiscuous mode [ 1168.896087][ T62] hsr_slave_1: left promiscuous mode [ 1168.903922][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.920684][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.140617][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1169.157693][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1170.546977][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.597071][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.652657][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.716983][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.846426][ T62] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.922649][ T62] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.988809][ T62] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.059543][ T62] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.160528][ T62] bridge_slave_1: left allmulticast mode [ 1171.169810][ T62] bridge_slave_1: left promiscuous mode [ 1171.177758][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.187695][ T62] bridge_slave_0: left allmulticast mode [ 1171.194003][ T62] bridge_slave_0: left promiscuous mode [ 1171.199834][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.215840][ T62] bridge_slave_1: left allmulticast mode [ 1171.221576][ T62] bridge_slave_1: left promiscuous mode [ 1171.228648][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.239543][ T62] bridge_slave_0: left allmulticast mode [ 1171.249334][ T62] bridge_slave_0: left promiscuous mode [ 1171.256860][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.271271][ T62] bridge_slave_1: left allmulticast mode [ 1171.277898][ T62] bridge_slave_1: left promiscuous mode [ 1171.285641][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.305130][ T62] bridge_slave_0: left allmulticast mode [ 1171.310927][ T62] bridge_slave_0: left promiscuous mode [ 1171.321016][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.336198][ T62] bridge_slave_1: left allmulticast mode [ 1171.341934][ T62] bridge_slave_1: left promiscuous mode [ 1171.348507][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.359309][ T62] bridge_slave_0: left allmulticast mode [ 1171.365216][ T62] bridge_slave_0: left promiscuous mode [ 1171.371002][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.392708][ T62] bridge_slave_1: left allmulticast mode [ 1171.398677][ T62] bridge_slave_1: left promiscuous mode [ 1171.405687][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.421135][ T62] bridge_slave_0: left allmulticast mode [ 1171.427095][ T62] bridge_slave_0: left promiscuous mode [ 1171.432902][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.660444][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.671791][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.686229][ T62] bond0 (unregistering): Released all slaves [ 1171.769549][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.780547][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.801293][ T62] bond0 (unregistering): Released all slaves [ 1171.852073][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.882439][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.892625][ T62] bond0 (unregistering): Released all slaves [ 1171.968602][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.979502][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.989795][ T62] bond0 (unregistering): Released all slaves [ 1172.050702][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.066829][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.077057][ T62] bond0 (unregistering): Released all slaves [ 1172.254697][ T62] tipc: Left network mode [ 1172.269833][ T62] tipc: Left network mode [ 1172.589445][ T62] hsr_slave_0: left promiscuous mode [ 1172.597935][ T62] hsr_slave_1: left promiscuous mode [ 1172.604966][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.615938][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.629994][ T62] hsr_slave_0: left promiscuous mode [ 1172.638140][ T62] hsr_slave_1: left promiscuous mode [ 1172.644778][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.652792][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.672421][ T62] hsr_slave_0: left promiscuous mode [ 1172.679411][ T62] hsr_slave_1: left promiscuous mode [ 1172.686042][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.696715][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.709706][ T62] hsr_slave_0: left promiscuous mode [ 1172.717130][ T62] hsr_slave_1: left promiscuous mode [ 1172.723937][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.731399][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.740693][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.748763][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.762224][ T62] hsr_slave_0: left promiscuous mode [ 1172.769385][ T62] hsr_slave_1: left promiscuous mode [ 1172.777026][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.785636][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.794372][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.801899][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.830723][ T62] veth1_macvtap: left promiscuous mode [ 1172.836739][ T62] veth0_macvtap: left promiscuous mode [ 1172.846812][ T62] veth1_macvtap: left promiscuous mode [ 1172.852350][ T62] veth0_macvtap: left promiscuous mode [ 1172.867513][ T62] veth1_vlan: left promiscuous mode [ 1172.872789][ T62] veth0_vlan: left promiscuous mode [ 1173.205187][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1173.220275][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1173.446217][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1173.459415][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1173.609731][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1173.622746][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1173.751727][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1173.766144][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1173.913526][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1173.926477][ T62] team0 (unregistering): Port device team_slave_0 removed