last executing test programs: 3m21.355163393s ago: executing program 1 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x848c}], 0x1}, 0x0) 3m20.015138385s ago: executing program 1 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d0806", 0x36, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m19.127674647s ago: executing program 1 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019440)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000340)=""/172, 0xac, 0x4) 3m17.396187s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x34b5, &(0x7f00000024c0)={0x0, 0xe3b1, 0x0, 0x5, 0x82}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3m13.652280232s ago: executing program 1 (id=37): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 3m13.036521947s ago: executing program 1 (id=39): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x250, 0x2f0, 0x250, 0x2f0, 0x98, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0xfffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x10, 0xf1, 0x5, 0xfd, 0xd3, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x3, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4004000f, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 3m12.453398741s ago: executing program 32 (id=39): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x250, 0x2f0, 0x250, 0x2f0, 0x98, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0xfffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x10, 0xf1, 0x5, 0xfd, 0xd3, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x3, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4004000f, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 1m50.502711215s ago: executing program 4 (id=234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1m48.592115752s ago: executing program 4 (id=240): ioprio_get$uid(0x3, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) 1m45.787594981s ago: executing program 4 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 1m42.96580814s ago: executing program 4 (id=250): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000005a80)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m37.317582168s ago: executing program 0 (id=255): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1m36.900583679s ago: executing program 4 (id=256): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd2942, 0x4) io_setup(0x20ff, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[0x0]) 1m35.706611728s ago: executing program 4 (id=258): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) r4 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x145, 0xfffffffc) 1m32.956086415s ago: executing program 0 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='o'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x8000012a, 0x3c66, 0x1f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m27.647644077s ago: executing program 0 (id=263): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m26.205130972s ago: executing program 0 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='rdma', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='ipv4', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x20b) write(r3, &(0x7f0000000500)='172.20.20.20\x00', 0xd) write(0xffffffffffffffff, &(0x7f0000000580)='4421\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 1m25.47164619s ago: executing program 0 (id=268): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffffc}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044044) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0xf0}, {0x12, @none}}}}, 0xd) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040844) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0xc}) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@random="f3c5f60ba0b9", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fe288f", 0x8, 0x2b, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0) rename(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='./file0\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) iopl(0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000006c0)={"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"}) 1m20.319624897s ago: executing program 33 (id=258): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) r4 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x145, 0xfffffffc) 1m19.35965693s ago: executing program 0 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 1m3.774181445s ago: executing program 34 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 30.39637033s ago: executing program 6 (id=325): add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fsmount(r0, 0x0, 0x9) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) 28.508541556s ago: executing program 6 (id=329): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0xc854) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002280)=[{&(0x7f0000000500)={0x0, &(0x7f0000000400)="331ce46322", 0x89cc9476c6b5ad1b, 0x5}, &(0x7f0000000540)="ceaa622ea2e4c4ff6cdb1e0d0626fa804b9b51c0a2f6c942908732b52ac8749582c78b3f5e804ca353dad17d1acaee716f28702c32b0de57a06ec3bd418871be1bebf72a6db859a3ec9ff97df76f75cf1c443b272b1d6e96c9e6a03526a076eabdc8500e55524017d9dc2e7ab98131df94209de1b9", 0x0, 0x75}, {&(0x7f0000000b80)={&(0x7f0000000ac0)={0x0, 0x0, 0x2}, 0x0, 0x1}, 0x0, 0x1}, {0x0, &(0x7f0000000e00)="be82c7677c7033d2b6bbea4f75834aeddcf607d1680d364d8d4b42986e7e3d5a0b24641219ce55faaadadae73409f719ec9b8eb0e25439f7360ad84c65fb31e5ec01e734a480214503ca19ee38bcc528150caf56ef", 0x0, 0x55}, {&(0x7f00000021c0)={0x0, 0x0, 0x2}, &(0x7f0000002200), 0x2}], 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x9a, 0x5, 0x68, 0x1, 0x408}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0x8, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 27.325926405s ago: executing program 6 (id=331): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$IPT_SO_GET_INFO(r0, 0x11e, 0x40, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) creat(0x0, 0xc7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x9, 0x0, 0x0, 0x3}]}) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) 26.094260685s ago: executing program 2 (id=332): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x8000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40400, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000740), 0x0, 0x60cd894) 23.202301727s ago: executing program 6 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 23.200745797s ago: executing program 2 (id=343): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x82a, 0x0, 0x81, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 19.077187519s ago: executing program 2 (id=345): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 17.130757237s ago: executing program 3 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24010844}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 17.032541969s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcc93f1264b77d0bf}, 0x8040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0xd4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") 14.9645901s ago: executing program 3 (id=341): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$802154_dgram(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf6645dfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f", 0x1a7}], 0x1}}], 0x2, 0x42054) 13.125518706s ago: executing program 3 (id=342): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x20004850) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x60, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}}) r6 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r6, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 12.56575769s ago: executing program 6 (id=344): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x803, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x20008000) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.404605904s ago: executing program 5 (id=346): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r4, 0x3, 0x0, 0x0, &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd01, 0x0) 12.381908864s ago: executing program 3 (id=347): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{0x0}], 0x1) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 12.326911065s ago: executing program 2 (id=348): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r7, 0x0, 0x4000000000010046) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.114412235s ago: executing program 5 (id=349): syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600b0e0000140600"/33, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='.\x00\x00\x00', 0x4) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18) brk(0x5d555ede6000) syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a28b", 0x13, 0x0, &(0x7f0000000400), 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) 7.884742345s ago: executing program 5 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback, 0x54}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xa, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x800, 0x5a, 0x2, 0xfffffffffffffe90, 0x7, 0x3, 0x980, 0x6}, {0x1, 0x3, 0x5, 0x1}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x8, 0x80, 0x5, 0x5}}, 0xe8) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 7.640523891s ago: executing program 3 (id=351): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, 0x0}) r1 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) 6.616212197s ago: executing program 2 (id=352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = getegid() mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r2}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 5.324797729s ago: executing program 5 (id=353): inotify_init1(0x80000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) chdir(&(0x7f00000003c0)='./bus\x00') mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000"], 0x0, 0x56}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) syz_clone3(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') 1.62835717s ago: executing program 5 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.62641974s ago: executing program 6 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x1, 0x40, [0xfffffffffffffff9, 0x0, 0x4, 0xffffffffffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe2}]}}]}, 0x38}}, 0x0) 18.844909ms ago: executing program 5 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 0s ago: executing program 3 (id=356): r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="51e2976b", 0x36, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000000000)=0x40) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/67, 0x43}, {0x0}], 0x2, &(0x7f0000000600), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fb00) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0000000120001000000000000000000736861333834000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9b73d38760b4ed5beaa9e00"/217], 0xe0}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ptrace$getsig(0x4202, r0, 0xffff, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 76.519366][ T5761] cgroup: Unknown subsys name 'net' [ 76.649244][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.328623][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.944269][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.946207][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.953588][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.964240][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.966613][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.973772][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.982378][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.987815][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.995349][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.002344][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.009751][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.015278][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.033033][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.040988][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.049099][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.057954][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.065328][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.065348][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.073192][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.089244][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.092189][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.097279][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.110859][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.112517][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.516717][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.610986][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.637299][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.742397][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.750225][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.757891][ T5774] bridge_slave_0: entered allmulticast mode [ 80.765040][ T5774] bridge_slave_0: entered promiscuous mode [ 80.789975][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.827746][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.835668][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.843123][ T5774] bridge_slave_1: entered allmulticast mode [ 80.849911][ T5774] bridge_slave_1: entered promiscuous mode [ 80.921755][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.928979][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.936620][ T5773] bridge_slave_0: entered allmulticast mode [ 80.943615][ T5773] bridge_slave_0: entered promiscuous mode [ 80.977292][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.986642][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.994512][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.001857][ T5772] bridge_slave_0: entered allmulticast mode [ 81.008881][ T5772] bridge_slave_0: entered promiscuous mode [ 81.016137][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.026640][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.034009][ T5773] bridge_slave_1: entered allmulticast mode [ 81.040756][ T5773] bridge_slave_1: entered promiscuous mode [ 81.063518][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.083808][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.091093][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.100935][ T5772] bridge_slave_1: entered allmulticast mode [ 81.107780][ T5772] bridge_slave_1: entered promiscuous mode [ 81.158762][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.182680][ T5774] team0: Port device team_slave_0 added [ 81.202809][ T5774] team0: Port device team_slave_1 added [ 81.210558][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.229616][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.237158][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.244678][ T5775] bridge_slave_0: entered allmulticast mode [ 81.251494][ T5775] bridge_slave_0: entered promiscuous mode [ 81.261665][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.275038][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.315285][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.322690][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.329832][ T5775] bridge_slave_1: entered allmulticast mode [ 81.336985][ T5775] bridge_slave_1: entered promiscuous mode [ 81.356645][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.363810][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.390129][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.405116][ T5773] team0: Port device team_slave_0 added [ 81.423186][ T5773] team0: Port device team_slave_1 added [ 81.437814][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.445095][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.471447][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.502917][ T5772] team0: Port device team_slave_0 added [ 81.525225][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.547845][ T5772] team0: Port device team_slave_1 added [ 81.554562][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.561532][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.590628][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.603287][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.610234][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.637695][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.651370][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.708271][ T5774] hsr_slave_0: entered promiscuous mode [ 81.714617][ T5774] hsr_slave_1: entered promiscuous mode [ 81.731262][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.738381][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.766962][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.779448][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.786598][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.812725][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.880701][ T5775] team0: Port device team_slave_0 added [ 81.892551][ T5775] team0: Port device team_slave_1 added [ 81.914138][ T5773] hsr_slave_0: entered promiscuous mode [ 81.920678][ T5773] hsr_slave_1: entered promiscuous mode [ 81.927217][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.935430][ T5773] Cannot create hsr debugfs directory [ 82.009443][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.016531][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.042855][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.058939][ T5772] hsr_slave_0: entered promiscuous mode [ 82.066159][ T5772] hsr_slave_1: entered promiscuous mode [ 82.072516][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.080095][ T5772] Cannot create hsr debugfs directory [ 82.102973][ T5787] Bluetooth: hci3: command tx timeout [ 82.110699][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.118272][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.144554][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.182165][ T5787] Bluetooth: hci1: command tx timeout [ 82.187841][ T5787] Bluetooth: hci2: command tx timeout [ 82.193770][ T5084] Bluetooth: hci0: command tx timeout [ 82.289439][ T5775] hsr_slave_0: entered promiscuous mode [ 82.298421][ T5775] hsr_slave_1: entered promiscuous mode [ 82.304873][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.313249][ T5775] Cannot create hsr debugfs directory [ 82.574836][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.589070][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.609005][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.620187][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.703251][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.714739][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.726787][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.739223][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.809919][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.827305][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.838426][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.857097][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.943261][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.953937][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.972881][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.986249][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.008783][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.060936][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.098039][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.105393][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.116981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.124155][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.198506][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.248378][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.275079][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.282236][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.320644][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.336477][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.343672][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.385065][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.430684][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.481736][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.510560][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.541645][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.548825][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.560792][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.568122][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.621407][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.628676][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.639647][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.648108][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.788893][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.920259][ T5774] veth0_vlan: entered promiscuous mode [ 83.951352][ T5774] veth1_vlan: entered promiscuous mode [ 84.051330][ T5774] veth0_macvtap: entered promiscuous mode [ 84.078876][ T5774] veth1_macvtap: entered promiscuous mode [ 84.129939][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.164144][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.184805][ T5787] Bluetooth: hci3: command tx timeout [ 84.210068][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.227690][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.249110][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.259569][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.268708][ T5787] Bluetooth: hci1: command tx timeout [ 84.272556][ T5787] Bluetooth: hci2: command tx timeout [ 84.279623][ T5787] Bluetooth: hci0: command tx timeout [ 84.288018][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377778][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.404924][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.491820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.513737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.581110][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.590265][ T5773] veth0_vlan: entered promiscuous mode [ 84.599695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.636773][ T5772] veth0_vlan: entered promiscuous mode [ 84.653493][ T5772] veth1_vlan: entered promiscuous mode [ 84.716992][ T5773] veth1_vlan: entered promiscuous mode [ 84.749839][ T5775] veth0_vlan: entered promiscuous mode [ 84.780647][ T5772] veth0_macvtap: entered promiscuous mode [ 84.838028][ T5772] veth1_macvtap: entered promiscuous mode [ 84.865353][ T5773] veth0_macvtap: entered promiscuous mode [ 84.896314][ T5773] veth1_macvtap: entered promiscuous mode [ 84.910902][ T5775] veth1_vlan: entered promiscuous mode [ 84.936923][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.949908][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.964451][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.989637][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.000633][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.011648][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.023673][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.035901][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.047710][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.058392][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.070758][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.101738][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.113005][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.123506][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.134842][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.146637][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.155356][ T5839] syzkaller0: entered promiscuous mode [ 85.160899][ T5839] syzkaller0: entered allmulticast mode [ 85.211633][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.223878][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.233048][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241777][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256235][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.267573][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.276650][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.293480][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.316685][ T5775] veth0_macvtap: entered promiscuous mode [ 85.368958][ T5775] veth1_macvtap: entered promiscuous mode [ 86.822019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 87.106125][ T5787] Bluetooth: hci3: command tx timeout [ 87.106704][ T5084] Bluetooth: hci0: command tx timeout [ 87.111585][ T5787] Bluetooth: hci2: command tx timeout [ 87.117024][ T5084] Bluetooth: hci1: command tx timeout [ 87.378743][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.402192][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.422808][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.442017][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.451887][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.502197][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.523635][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.656323][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.672956][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.692515][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.722525][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.742214][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.762050][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.783831][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.840185][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.868173][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.877740][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.893487][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.918209][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.942176][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.969846][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.999795][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.031101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.058619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.131001][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.162309][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.344386][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.357394][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.526585][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.540252][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.873580][ T5858] syzkaller0: entered promiscuous mode [ 88.898794][ T5858] syzkaller0: entered allmulticast mode [ 89.034928][ T5861] netlink: 'syz.0.7': attribute type 39 has an invalid length. [ 89.143234][ T5787] Bluetooth: hci1: command tx timeout [ 89.143537][ T51] Bluetooth: hci0: command tx timeout [ 89.149291][ T5084] Bluetooth: hci3: command tx timeout [ 89.155649][ T51] Bluetooth: hci2: command tx timeout [ 89.323477][ T5864] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.347268][ T5866] syz.2.8[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.421256][ T5866] loop2: detected capacity change from 0 to 2048 [ 89.438647][ T5866] ======================================================= [ 89.438647][ T5866] WARNING: The mand mount option has been deprecated and [ 89.438647][ T5866] and is ignored by this kernel. Remove the mand [ 89.438647][ T5866] option from the mount to silence this warning. [ 89.438647][ T5866] ======================================================= [ 91.942606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 92.227288][ T9] cfg80211: failed to load regulatory.db [ 92.365902][ T5884] syzkaller0: entered promiscuous mode [ 92.371547][ T5884] syzkaller0: entered allmulticast mode [ 92.580540][ T5886] loop1: detected capacity change from 0 to 1024 [ 92.727883][ T5886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.982527][ T5893] syzkaller0: entered promiscuous mode [ 93.988082][ T5893] syzkaller0: entered allmulticast mode [ 94.082395][ T5893] tipc: Started in network mode [ 94.087463][ T5893] tipc: Node identity ce3479ad2ff9, cluster identity 4711 [ 94.105492][ T5886] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Out of memory [ 94.142273][ T5886] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #15: comm syz.1.14: mark_inode_dirty error [ 94.171108][ T5893] tipc: Enabled bearer , priority 0 [ 94.201724][ T5886] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #15: comm syz.1.14: can't get inode location 15 [ 94.252365][ T5892] tipc: Resetting bearer [ 94.364281][ T5892] tipc: Disabling bearer [ 94.385510][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.496603][ T5895] syzkaller0: entered promiscuous mode [ 94.514994][ T5895] syzkaller0: entered allmulticast mode [ 94.698965][ T5897] loop1: detected capacity change from 0 to 512 [ 94.722923][ T5897] EXT4-fs: Ignoring removed i_version option [ 94.728998][ T5897] EXT4-fs: Ignoring removed oldalloc option [ 94.758967][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.952393][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.059628][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.142718][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 95.170372][ T5815] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 95.190741][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.202099][ T5815] usb 3-1: Product: syz [ 95.206578][ T5815] usb 3-1: Manufacturer: syz [ 95.211400][ T5815] usb 3-1: SerialNumber: syz [ 95.256368][ T5815] usb 3-1: config 0 descriptor?? [ 95.262735][ T5908] syzkaller0: entered promiscuous mode [ 95.268423][ T5908] syzkaller0: entered allmulticast mode [ 96.345246][ T5815] airspy 3-1:0.0: Board ID: 00 [ 96.372693][ T5815] airspy 3-1:0.0: Firmware version: [ 96.465498][ T5915] syzkaller0: entered promiscuous mode [ 96.471053][ T5915] syzkaller0: entered allmulticast mode [ 96.896958][ T5815] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 96.943814][ T5815] airspy 3-1:0.0: Registered as swradio24 [ 96.949649][ T5815] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 97.033107][ T5815] usb 3-1: USB disconnect, device number 2 [ 102.345052][ T5952] loop3: detected capacity change from 0 to 32768 [ 102.384141][ T5952] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop3 scanned by syz.3.34 (5952) [ 102.525486][ T5952] BTRFS info (device loop3): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 102.583902][ T5952] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 102.619716][ T5952] BTRFS info (device loop3): using free space tree [ 102.899812][ T5952] BTRFS info (device loop3): enabling ssd optimizations [ 102.935060][ T5952] BTRFS info (device loop3): auto enabling async discard [ 103.558063][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.645129][ T5773] BTRFS info (device loop3): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 103.764556][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.080183][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.319936][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.442365][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.593374][ T5993] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 104.663577][ T5993] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 104.673273][ T5993] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 104.679164][ T5815] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 104.681621][ T5993] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 104.717296][ T5815] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 104.750009][ T5815] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 104.781992][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.810460][ T5815] usb 1-1: Product: syz [ 104.826894][ T5815] usb 1-1: Manufacturer: syz [ 104.840380][ T5815] usb 1-1: SerialNumber: syz [ 104.857398][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.864914][ T5991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.874783][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.883463][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.892714][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.898412][ T5991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.909426][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.917244][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.938090][ T5815] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 105.093181][ T5815] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/input/input6 [ 106.980057][ T5846] usb 1-1: USB disconnect, device number 2 [ 107.757512][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 108.167034][ T6041] syzkaller0: entered promiscuous mode [ 108.192112][ T6041] syzkaller0: entered allmulticast mode [ 112.455672][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.482339][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.489651][ T5999] bridge_slave_0: entered allmulticast mode [ 112.523784][ T5999] bridge_slave_0: entered promiscuous mode [ 112.553373][ T6088] loop0: detected capacity change from 0 to 512 [ 112.614308][ T6088] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.718465][ T6088] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 112.761594][ T6088] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 112.798807][ T6088] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.53: Failed to acquire dquot type 1 [ 112.833723][ T6088] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.53: corrupted inode contents [ 112.889813][ T6088] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #16: comm syz.0.53: mark_inode_dirty error [ 112.923205][ T6088] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.53: corrupted inode contents [ 112.953762][ T6088] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.53: mark_inode_dirty error [ 112.978099][ T6088] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.53: corrupted inode contents [ 113.003283][ T6088] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 113.015779][ T6088] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.53: corrupted inode contents [ 113.279894][ T6088] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.53: mark_inode_dirty error [ 113.352422][ T6088] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 113.442927][ T6088] EXT4-fs (loop0): 1 truncate cleaned up [ 113.517066][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.648510][ T6088] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.825164][ T6099] loop2: detected capacity change from 0 to 16 [ 113.924164][ T6099] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.035625][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.179443][ T6102] loop0: detected capacity change from 0 to 8 [ 118.585816][ T6130] Bluetooth: MGMT ver 1.22 [ 122.594643][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.601851][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.652374][ T5999] bridge_slave_1: entered allmulticast mode [ 122.678199][ T5999] bridge_slave_1: entered promiscuous mode [ 122.940534][ T49] hsr_slave_0: left promiscuous mode [ 122.950438][ T49] hsr_slave_1: left promiscuous mode [ 122.963537][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.988549][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.020743][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.038593][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.068078][ T49] bridge_slave_1: left allmulticast mode [ 123.076406][ T49] bridge_slave_1: left promiscuous mode [ 123.093527][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.124885][ T49] bridge_slave_0: left allmulticast mode [ 123.130613][ T49] bridge_slave_0: left promiscuous mode [ 123.152239][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.225148][ T49] veth1_macvtap: left promiscuous mode [ 123.226414][ T6153] loop0: detected capacity change from 0 to 32768 [ 123.231164][ T49] veth0_macvtap: left promiscuous mode [ 123.272245][ T49] veth1_vlan: left promiscuous mode [ 123.278653][ T49] veth0_vlan: left promiscuous mode [ 123.361677][ T6153] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.672233][ T6153] XFS (loop0): Ending clean mount [ 123.751498][ T6153] XFS (loop0): Quotacheck needed: Please wait. [ 123.912041][ T6153] XFS (loop0): Quotacheck: Done. [ 124.508454][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.788958][ T49] team0 (unregistering): Port device team_slave_1 removed [ 124.880938][ T49] team0 (unregistering): Port device team_slave_0 removed [ 124.944343][ T6189] kvm: pic: level sensitive irq not supported [ 124.944671][ T6189] kvm: pic: non byte read [ 124.958062][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.961106][ T6189] kvm: pic: level sensitive irq not supported [ 124.968700][ T6189] kvm: pic: non byte read [ 125.031886][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.134141][ T6192] loop0: detected capacity change from 0 to 512 [ 125.141809][ T6192] EXT4-fs: Ignoring removed bh option [ 125.185544][ T6192] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.75: corrupted in-inode xattr: e_value size too large [ 125.219166][ T6192] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.75: couldn't read orphan inode 15 (err -117) [ 125.258194][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.097126][ T49] bond0 (unregistering): Released all slaves [ 126.250246][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.292793][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.307802][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.592977][ T5999] team0: Port device team_slave_0 added [ 126.640900][ T5999] team0: Port device team_slave_1 added [ 126.758532][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.770842][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.805357][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.838771][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.849549][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.876751][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.981271][ T6211] syzkaller0: entered promiscuous mode [ 126.987440][ T6211] syzkaller0: entered allmulticast mode [ 127.004806][ T5999] hsr_slave_0: entered promiscuous mode [ 127.011877][ T5999] hsr_slave_1: entered promiscuous mode [ 127.018584][ T5999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.026744][ T5999] Cannot create hsr debugfs directory [ 128.553307][ T5999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.560635][ T5999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.577071][ T5999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.588007][ T5999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.897420][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.960093][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.997419][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.010359][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.066338][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.066451][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.168519][ T5999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.168547][ T5999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.700130][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.362342][ T5834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.467243][ T5999] veth0_vlan: entered promiscuous mode [ 130.499508][ T5999] veth1_vlan: entered promiscuous mode [ 130.567306][ T5834] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.590682][ T5834] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.595259][ T5999] veth0_macvtap: entered promiscuous mode [ 130.629957][ T5834] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 130.639463][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.650355][ T5999] veth1_macvtap: entered promiscuous mode [ 130.650864][ T5834] usb 4-1: Product: syz [ 130.660495][ T5834] usb 4-1: Manufacturer: syz [ 130.671118][ T5834] usb 4-1: SerialNumber: syz [ 130.679878][ T6265] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.693773][ T5834] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 130.718339][ T5834] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 130.726256][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.743481][ T5834] usbserial_generic 4-1:1.0: generic converter detected [ 130.773953][ T5834] usb 4-1: generic converter now attached to ttyUSB0 [ 130.787329][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.818074][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.839946][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.871154][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.891862][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.964414][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.153878][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.184225][ T5834] usb 4-1: USB disconnect, device number 2 [ 131.229842][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.259422][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.301478][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.331604][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.332000][ T5834] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 131.354681][ T5834] usbserial_generic 4-1:1.0: device disconnected [ 131.368255][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.383852][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.420732][ T5999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.434469][ T5999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.443631][ T5999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.453009][ T5999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.561508][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.578767][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.625728][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.634324][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.902479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 133.248463][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248674][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.276567][ T6297] tty tty3: ldisc open failed (-12), clearing slot 2 [ 133.312097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 135.872123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.384565][ T6316] syzkaller0: entered promiscuous mode [ 136.390127][ T6316] syzkaller0: entered allmulticast mode [ 138.719054][ T6345] binder_alloc: 6344: binder_alloc_buf, no vma [ 138.778885][ T28] audit: type=1800 audit(1786184101.200:2): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.102" name="ipv4_address" dev="configfs" ino=10377 res=0 errno=0 [ 138.859785][ T28] audit: type=1800 audit(1786184101.230:3): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.102" name="ipv4_port" dev="configfs" ino=10378 res=0 errno=0 [ 138.908131][ T28] audit: type=1800 audit(1786184101.230:4): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.102" name="num" dev="configfs" ino=10379 res=0 errno=0 [ 141.606372][ T6385] loop4: detected capacity change from 0 to 128 [ 142.044461][ T6385] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.086078][ T6385] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.359442][ T6406] loop2: detected capacity change from 0 to 1024 [ 142.717198][ T5999] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.734792][ T28] audit: type=1800 audit(1786184105.150:5): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="zoned" dev="configfs" ino=10443 res=0 errno=0 [ 142.757788][ T28] audit: type=1800 audit(1786184105.180:6): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="memory_backed" dev="configfs" ino=10444 res=0 errno=0 [ 142.834421][ T28] audit: type=1800 audit(1786184105.210:7): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="zone_nr_conv" dev="configfs" ino=10445 res=0 errno=0 [ 142.913678][ T28] audit: type=1800 audit(1786184105.210:8): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="power" dev="configfs" ino=9929 res=0 errno=0 [ 142.988970][ T6412] null_blk: disk nullb1 created [ 143.361472][ T6425] loop4: detected capacity change from 0 to 1024 [ 144.413534][ T6452] loop3: detected capacity change from 0 to 128 [ 144.839327][ T6452] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.947801][ T6452] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.287593][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.691557][ T6491] loop3: detected capacity change from 0 to 512 [ 146.817566][ T6491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.869627][ T6491] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.556275][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.747568][ T9] smpboot: CPU 1 is now offline [ 147.797573][ T6517] binder: BINDER_SET_CONTEXT_MGR already set [ 148.895900][ T6517] binder: 6516:6517 ioctl 4018620d 200000004a80 returned -16 [ 149.644121][ T6515] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 149.651156][ T0] Disabled fast string operations [ 149.683002][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 150.902472][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.105550][ T9] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 151.128099][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.172041][ T9] usb 1-1: Product: syz [ 151.193741][ T9] usb 1-1: Manufacturer: syz [ 151.198419][ T9] usb 1-1: SerialNumber: syz [ 151.253912][ T9] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 151.489842][ T6557] loop2: detected capacity change from 0 to 2048 [ 151.573061][ T6557] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 151.647548][ T6557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.742973][ T6559] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 152.092409][ T5815] usb 1-1: USB disconnect, device number 3 [ 152.989300][ T6561] loop4: detected capacity change from 0 to 40427 [ 153.060768][ T6561] F2FS-fs (loop4): invalid crc value [ 153.114386][ T6561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.294743][ T6561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.331930][ C0] sched: RT throttling activated [ 156.687279][ T6599] Zero length message leads to an empty skb [ 157.274606][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.283799][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.292204][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.300549][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.309079][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.317422][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.325787][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.334145][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.342506][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.350849][ T6620] tc action pedit unable to extract header offset for header type (0x4) [ 157.359378][ T6620] 0: reclassify loop, rule prio 0, protocol 800 [ 157.562720][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.782900][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 157.802698][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.865751][ T9] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 158.087528][ T6641] syzkaller0: entered promiscuous mode [ 158.108435][ T6641] syzkaller0: entered allmulticast mode [ 158.984008][ T6651] syzkaller0: entered promiscuous mode [ 159.004878][ T6651] syzkaller0: entered allmulticast mode [ 159.047661][ T6651] tipc: Started in network mode [ 159.065665][ T6651] tipc: Node identity eac43d9e9837, cluster identity 4711 [ 159.089349][ T6651] tipc: Enabled bearer , priority 0 [ 159.176085][ T6651] tipc: Resetting bearer [ 159.227729][ T6650] tipc: Resetting bearer [ 159.290964][ T6650] tipc: Disabling bearer [ 159.512267][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.925062][ T6678] bridge0: port 3(syz_tun) entered blocking state [ 159.932343][ T6678] bridge0: port 3(syz_tun) entered disabled state [ 159.940094][ T6678] syz_tun: entered allmulticast mode [ 159.950530][ T5834] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 160.270441][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.280625][ T6678] syz_tun: entered promiscuous mode [ 160.286724][ T6678] bridge0: port 3(syz_tun) entered blocking state [ 160.293698][ T6678] bridge0: port 3(syz_tun) entered forwarding state [ 160.305815][ T6688] bridge0: port 4(ip6gretap0) entered blocking state [ 160.318438][ T6688] bridge0: port 4(ip6gretap0) entered disabled state [ 160.325784][ T5834] i2c-tiny-usb 5-1:1.0: version 0.00 found at bus 005 address 002 [ 160.336802][ T6688] ip6gretap0: entered allmulticast mode [ 160.353866][ T6688] ip6gretap0: entered promiscuous mode [ 160.363195][ T6688] bridge0: port 4(ip6gretap0) entered blocking state [ 160.370086][ T6688] bridge0: port 4(ip6gretap0) entered forwarding state [ 160.380757][ T6678] bridge0: port 5(bond0) entered blocking state [ 160.387634][ T6678] bridge0: port 5(bond0) entered disabled state [ 160.394871][ T6678] bond0: entered allmulticast mode [ 160.400196][ T6678] bond_slave_0: entered allmulticast mode [ 160.406591][ T6678] bond_slave_1: entered allmulticast mode [ 160.417222][ T6678] bond0: entered promiscuous mode [ 160.422614][ T6678] bond_slave_0: entered promiscuous mode [ 160.429017][ T6678] bond_slave_1: entered promiscuous mode [ 160.654939][ T6678] bridge0: port 5(bond0) entered blocking state [ 160.661438][ T6678] bridge0: port 5(bond0) entered forwarding state [ 160.783999][ T6699] syzkaller0: entered promiscuous mode [ 160.798155][ T6699] syzkaller0: entered allmulticast mode [ 160.839255][ T6699] tipc: Enabled bearer , priority 0 [ 160.890505][ T6699] tipc: Resetting bearer [ 160.920284][ T6698] tipc: Resetting bearer [ 160.949598][ T6698] tipc: Disabling bearer [ 160.989136][ T6704] tipc: Enabled bearer , priority 0 [ 161.001154][ T6704] syzkaller0: entered promiscuous mode [ 161.015485][ T6704] syzkaller0: entered allmulticast mode [ 161.046461][ T6704] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 161.069230][ T5834] i2c i2c-1: connected i2c-tiny-usb device [ 161.136959][ T6704] tipc: Resetting bearer [ 162.286576][ T5834] tipc: Node number set to 1928543646 [ 162.374658][ T6703] tipc: Resetting bearer [ 162.382857][ T5834] usb 5-1: USB disconnect, device number 2 [ 162.524380][ T5815] usb 1-1: USB disconnect, device number 4 [ 162.599289][ T6703] tipc: Disabling bearer [ 167.626372][ T6752] gadgetfs: bound to dummy_udc driver [ 167.979548][ T5834] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 168.003523][ C0] gadgetfs: connected [ 168.009879][ T6759] gadgetfs: suspended from state 3 [ 168.015680][ T6759] gadgetfs: disconnected [ 168.185875][ T6768] loop3: detected capacity change from 0 to 1024 [ 168.404348][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.460230][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.528173][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.552755][ T6774] syzkaller0: entered promiscuous mode [ 168.562712][ T28] audit: type=1800 audit(1786184130.990:9): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="attr_allow_any_host" dev="configfs" ino=12010 res=0 errno=0 [ 168.564211][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.594525][ T6774] syzkaller0: entered allmulticast mode [ 168.602441][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.622364][ T28] audit: type=1800 audit(1786184131.040:10): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="addr_trtype" dev="configfs" ino=12016 res=0 errno=0 [ 168.633691][ T6774] tipc: Started in network mode [ 168.654156][ T6778] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 168.675401][ T28] audit: type=1800 audit(1786184131.040:11): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="addr_traddr" dev="configfs" ino=12017 res=0 errno=0 [ 168.708733][ T6774] tipc: Node identity cac3d3e57636, cluster identity 4711 [ 168.725457][ T6774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.734153][ T28] audit: type=1800 audit(1786184131.050:12): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="addr_trsvcid" dev="configfs" ino=12018 res=0 errno=0 [ 168.753204][ T6774] tipc: Enabled bearer , priority 0 [ 168.793353][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.800740][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.815083][ T6773] tipc: Resetting bearer [ 168.828645][ T28] audit: type=1800 audit(1786184131.050:13): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="addr_adrfam" dev="configfs" ino=12019 res=0 errno=0 [ 168.878511][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.916252][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 168.931378][ T10] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:954b1141-86c1-444f-a7c9-79689133052d. [ 168.953385][ T6773] tipc: Disabling bearer [ 168.992581][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.018239][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.039907][ T6778] nvme nvme0: creating 2 I/O queues. [ 169.090251][ T6778] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 169.097153][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.140540][ T6778] nvme nvme0: new ctrl: NQN "testnqn", addr 127.0.0.1:8009 [ 169.154853][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.199326][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.249214][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.306475][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.330862][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.351201][ T28] audit: type=1800 audit(1786184131.770:14): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="attr_allow_any_host" dev="configfs" ino=12057 res=0 errno=0 [ 169.358964][ T6791] nvmet: adding nsid 1 to subsystem testnqn [ 169.414943][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.462378][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.511181][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.512481][ T28] audit: type=1800 audit(1786184131.930:15): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="device_path" dev="configfs" ino=12063 res=0 errno=0 [ 169.539052][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.548689][ T6791] nvmet: failed to open file ./fi: (-2) [ 169.564966][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.586176][ T28] audit: type=1800 audit(1786184131.950:16): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="buffered_io" dev="configfs" ino=12064 res=0 errno=0 [ 169.600751][ T6768] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.620339][ T6791] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 169.629998][ T28] audit: type=1800 audit(1786184131.950:17): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="enable" dev="configfs" ino=12065 res=0 errno=0 [ 169.630052][ T28] audit: type=1800 audit(1786184132.010:18): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="addr_trtype" dev="configfs" ino=12068 res=0 errno=0 [ 169.691569][ T6798] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 169.705438][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.732196][ T6777] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.756353][ T6802] hfsplus: request for non-existent node 33423360 in B*Tree [ 169.815933][ T6802] hfsplus: request for non-existent node 33423360 in B*Tree [ 170.883229][ T5815] IPVS: starting estimator thread 0... [ 171.003314][ T6839] IPVS: using max 18 ests per chain, 43200 per kthread [ 172.982188][ T6867] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 173.026098][ T6867] syzkaller0: entered promiscuous mode [ 173.031652][ T6867] syzkaller0: entered allmulticast mode [ 174.412034][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 174.642298][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 174.654476][ T5815] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.679477][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.702030][ T5815] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 174.731590][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.799751][ T5815] usb 3-1: config 0 descriptor?? [ 175.304580][ T6902] loop3: detected capacity change from 0 to 512 [ 175.322843][ T6902] EXT4-fs: Ignoring removed oldalloc option [ 175.377982][ T6902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.418023][ T5815] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 175.496083][ T6902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.572256][ T6902] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.987681][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.050754][ T6910] kvm: pic: level sensitive irq not supported [ 176.177673][ T5834] usb 3-1: USB disconnect, device number 3 [ 176.322286][ T6914] syzkaller0: entered promiscuous mode [ 176.327844][ T6914] syzkaller0: entered allmulticast mode [ 176.558776][ T6921] syzkaller0: entered promiscuous mode [ 176.580960][ T6921] syzkaller0: entered allmulticast mode [ 176.608804][ T6918] syzkaller0: entered promiscuous mode [ 176.623655][ T6918] syzkaller0: entered allmulticast mode [ 176.711640][ T6918] tipc: Enabled bearer , priority 0 [ 176.719873][ T6924] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 176.768815][ T6918] tipc: Resetting bearer [ 176.800189][ T6917] kvm: kvm [6915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 176.824370][ T6916] tipc: Resetting bearer [ 176.862323][ T6917] kvm: kvm [6915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 176.879700][ T6916] tipc: Disabling bearer [ 176.898376][ T6917] kvm: kvm [6915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 176.914406][ T6917] kvm: kvm [6915]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 176.939701][ T6917] kvm: kvm [6915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 176.968535][ T6927] loop0: detected capacity change from 0 to 1024 [ 177.006584][ T6927] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 177.218071][ T6930] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 177.954034][ T6937] event trace: Could not enable event p [ 179.335851][ T6957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 179.422122][ T6959] syzkaller0: entered promiscuous mode [ 179.437944][ T6959] syzkaller0: entered allmulticast mode [ 179.464473][ T6959] TC_ACT_REPEAT abuse ? [ 179.662038][ T5780] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.871993][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 179.894226][ T5780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.936427][ T5780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.981996][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 180.031009][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 180.071359][ T5780] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 180.100974][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.145402][ T5780] hub 3-1:1.0: bad descriptor, ignoring hub [ 180.166070][ T5780] hub: probe of 3-1:1.0 failed with error -5 [ 180.183462][ T5780] cdc_wdm 3-1:1.0: skipping garbage [ 180.203862][ T5780] cdc_wdm 3-1:1.0: skipping garbage [ 180.266134][ T5780] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 180.287422][ T5780] cdc_wdm 3-1:1.0: Unknown control protocol [ 183.905888][ T6967] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 184.175394][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.182203][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.189850][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.196479][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.202748][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.209371][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.216641][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.223269][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.229743][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.236372][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.242722][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.249361][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.255719][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.262344][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.268871][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.275470][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.281801][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.288413][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.294898][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 184.301502][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 184.307566][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.333370][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 184.352226][ T5834] usb 3-1: USB disconnect, device number 4 [ 185.349948][ T6994] kvm: pic: non byte write [ 186.435130][ T7010] 0: reclassify loop, rule prio 0, protocol 700 [ 186.646903][ T7005] loop0: detected capacity change from 0 to 32768 [ 187.806145][ T7005] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.161147][ T7005] XFS (loop0): Ending clean mount [ 189.761475][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.251475][ T7048] loop2: detected capacity change from 0 to 1024 [ 190.371349][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.276717][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.585829][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.278286][ T7093] syzkaller0: entered promiscuous mode [ 199.302321][ T7093] syzkaller0: entered allmulticast mode [ 200.683528][ T173] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 200.813518][ T7095] loop2: detected capacity change from 0 to 32768 [ 200.842129][ T7095] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.251 (7095) [ 200.902777][ T173] usb 4-1: Using ep0 maxpacket: 8 [ 200.910707][ T7095] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 200.944444][ T173] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 200.962005][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.970285][ T7095] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 201.197706][ T173] usb 4-1: Product: syz [ 201.207898][ T7095] BTRFS info (device loop2): using free space tree [ 201.214556][ T173] usb 4-1: Manufacturer: syz [ 201.250118][ T173] usb 4-1: SerialNumber: syz [ 201.274673][ T173] usb 4-1: config 0 descriptor?? [ 201.293297][ T173] gspca_main: sq930x-2.14.0 probing 2770:930c [ 201.330977][ T7095] BTRFS info (device loop2): enabling ssd optimizations [ 201.361396][ T7095] BTRFS info (device loop2): auto enabling async discard [ 203.294339][ C0] nvme nvme0: long keepalive RTT (1590 ms) [ 203.301349][ T173] gspca_sq930x: reg_r 001f failed -110 [ 203.321804][ T173] sq930x: probe of 4-1:0.0 failed with error -110 [ 203.492847][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 204.016660][ T173] usb 4-1: USB disconnect, device number 3 [ 206.821978][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 206.822460][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 206.832060][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 208.664362][ T7140] syz.3.261 (7140) used greatest stack depth: 17896 bytes left [ 210.508974][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 210.508991][ T28] audit: type=1800 audit(1786184172.930:20): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.266" name="addr_trtype" dev="configfs" ino=13479 res=0 errno=0 [ 210.536773][ T7158] NILFS (nullb0): couldn't find nilfs on the device [ 210.555875][ T7157] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 210.610493][ T28] audit: type=1800 audit(1786184173.030:21): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.266" name="addr_adrfam" dev="configfs" ino=13480 res=0 errno=0 [ 210.618653][ T7157] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 210.740142][ T28] audit: type=1800 audit(1786184173.160:22): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.266" name="addr_traddr" dev="configfs" ino=13481 res=0 errno=0 [ 210.769580][ T7157] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 211.779566][ T51] Bluetooth: hci1: unexpected event for opcode 0x040d [ 212.318089][ T7173] sctp: [Deprecated]: syz.2.269 (pid 7173) Use of int in max_burst socket option. [ 212.318089][ T7173] Use struct sctp_assoc_value instead [ 216.137508][ T7179] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 216.438191][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.449199][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.460244][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.468592][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.477220][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.485653][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.891175][ T7184] chnl_net:caif_netlink_parms(): no params data found [ 217.133599][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.141859][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.150241][ T7184] bridge_slave_0: entered allmulticast mode [ 217.158105][ T7184] bridge_slave_0: entered promiscuous mode [ 217.196826][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.212260][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.219552][ T7184] bridge_slave_1: entered allmulticast mode [ 217.234573][ T7184] bridge_slave_1: entered promiscuous mode [ 217.285705][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.309857][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.367875][ T7184] team0: Port device team_slave_0 added [ 217.385821][ T7184] team0: Port device team_slave_1 added [ 217.444064][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.451083][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.484487][ T7184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.503647][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.510725][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.546922][ T7184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.875450][ T7184] hsr_slave_0: entered promiscuous mode [ 218.054558][ T7184] hsr_slave_1: entered promiscuous mode [ 218.092173][ T7184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.122617][ T7184] Cannot create hsr debugfs directory [ 218.582114][ T51] Bluetooth: hci4: command tx timeout [ 219.790076][ T7211] affs: No valid root block on device nullb0 [ 220.662011][ T51] Bluetooth: hci4: command tx timeout [ 221.926542][ T7222] process 'syz.3.276' launched './file0' with NULL argv: empty string added [ 222.742532][ T51] Bluetooth: hci4: command tx timeout [ 224.698627][ T7228] syz.2.277 uses obsolete (PF_INET,SOCK_PACKET) [ 224.822593][ T51] Bluetooth: hci4: command tx timeout [ 225.454895][ T7204] syzkaller0: entered promiscuous mode [ 225.460470][ T7204] syzkaller0: entered allmulticast mode [ 227.720198][ T7232] x_tables: duplicate underflow at hook 1 [ 227.728076][ T7232] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 227.736000][ T7232] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 227.744576][ T7232] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 227.752532][ T7232] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 227.763081][ C0] nvme nvme0: long keepalive RTT (1420 ms) [ 233.063129][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.076735][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.085338][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.127775][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.148123][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.156653][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.207277][ T7184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.362205][ T7184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.405507][ T7184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.504159][ T5084] Bluetooth: hci0: command tx timeout [ 235.611091][ T7184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.853968][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.867540][ T7248] chnl_net:caif_netlink_parms(): no params data found [ 236.899271][ T7184] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.013522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.020719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.031957][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.039110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.102902][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.112312][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.129829][ T7248] bridge_slave_0: entered allmulticast mode [ 237.140876][ T7248] bridge_slave_0: entered promiscuous mode [ 237.173848][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.181002][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.198587][ T7248] bridge_slave_1: entered allmulticast mode [ 237.213593][ T7248] bridge_slave_1: entered promiscuous mode [ 237.356203][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.428277][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.543376][ T51] Bluetooth: hci0: command tx timeout [ 237.595596][ T7248] team0: Port device team_slave_0 added [ 237.625940][ T7248] team0: Port device team_slave_1 added [ 237.674996][ T28] audit: type=1800 audit(1786184200.100:23): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.288" name="zoned" dev="configfs" ino=13803 res=0 errno=0 [ 237.706799][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.722101][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.748445][ T28] audit: type=1800 audit(1786184200.140:24): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.288" name="memory_backed" dev="configfs" ino=13804 res=0 errno=0 [ 237.777346][ T28] audit: type=1800 audit(1786184200.170:25): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.288" name="zone_nr_conv" dev="configfs" ino=13805 res=0 errno=0 [ 237.803421][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.830375][ T28] audit: type=1800 audit(1786184200.170:26): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.288" name="power" dev="configfs" ino=13806 res=0 errno=0 [ 237.856106][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.874518][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.945547][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.055255][ T7248] hsr_slave_0: entered promiscuous mode [ 238.071774][ T7248] hsr_slave_1: entered promiscuous mode [ 238.079468][ T7248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.096300][ T7248] Cannot create hsr debugfs directory [ 238.141646][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.683346][ T7248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.715221][ T7248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.739495][ T7248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.765221][ T7248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.795725][ T7285] syzkaller0: entered promiscuous mode [ 238.801227][ T7285] syzkaller0: entered allmulticast mode [ 239.159377][ T7184] veth0_vlan: entered promiscuous mode [ 239.429172][ T7184] veth1_vlan: entered promiscuous mode [ 239.623904][ T51] Bluetooth: hci0: command tx timeout [ 239.865049][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.371749][ T7184] veth0_macvtap: entered promiscuous mode [ 240.460999][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.594893][ T7184] veth1_macvtap: entered promiscuous mode [ 240.693795][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.700944][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.939730][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.946965][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.204447][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.263119][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.301413][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.351420][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.394030][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.439420][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.483888][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.531102][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.610201][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.703430][ T51] Bluetooth: hci0: command tx timeout [ 241.823631][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.861228][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.907836][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.962364][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.999629][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.047913][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.069189][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.119725][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.226214][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.464582][ T7184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.499571][ T7184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.549587][ T7184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.588290][ T7184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.266735][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.309182][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.426513][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.466888][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.741834][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.286571][ T7248] veth0_vlan: entered promiscuous mode [ 244.328207][ T7248] veth1_vlan: entered promiscuous mode [ 244.423349][ T7248] veth0_macvtap: entered promiscuous mode [ 244.439456][ T7248] veth1_macvtap: entered promiscuous mode [ 244.482677][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.500869][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.511504][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.532158][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.549499][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.560337][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.577601][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.599480][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.611843][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.632477][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.656319][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.700154][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.718832][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.737886][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.753809][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.776209][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.792369][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.810126][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.820905][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.842833][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.860946][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.959272][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.010547][ T7248] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.082058][ T7248] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.113977][ T7310] ubi16: attaching mtd0 [ 245.122753][ T7248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.127795][ T7310] ubi16: scanning is finished [ 245.131488][ T7248] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.167001][ T28] audit: type=1800 audit(1786184207.580:27): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="attr_allow_any_host" dev="configfs" ino=13892 res=0 errno=0 [ 245.169515][ T7310] ubi16: empty MTD device detected [ 245.233832][ T1097] nvme nvme0: rescanning namespaces. [ 245.370343][ T28] audit: type=1800 audit(1786184207.590:28): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="device_path" dev="configfs" ino=13893 res=0 errno=0 [ 245.466537][ T7310] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 245.475380][ T7310] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 245.483335][ T7310] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 245.490560][ T7310] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 245.498683][ T7310] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 245.505887][ T7310] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 245.515545][ T7310] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2386294548 [ 245.525956][ T7310] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 245.536326][ T28] audit: type=1800 audit(1786184207.590:29): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="buffered_io" dev="configfs" ino=13894 res=0 errno=0 [ 245.568621][ T7320] ubi16: background thread "ubi_bgt16d" started, PID 7320 [ 245.661160][ T5815] nvmet: connect request for invalid subsystem testnqn! [ 245.677873][ T7312] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 245.722872][ T28] audit: type=1800 audit(1786184207.620:30): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="enable" dev="configfs" ino=13895 res=0 errno=0 [ 245.823837][ T28] audit: type=1800 audit(1786184207.650:31): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="addr_trtype" dev="configfs" ino=13896 res=0 errno=0 [ 245.852455][ T37] Dev nvme0n1: unable to read RDB block 8 [ 245.890449][ T37] nvme0n1: unable to read partition table [ 245.910975][ T37] nvme0n1: partition table beyond EOD, truncated [ 245.982842][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.990727][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.237124][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.278365][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.136684][ T7337] random: crng reseeded on system resumption [ 248.511967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.753622][ T7352] loop5: detected capacity change from 0 to 16 [ 249.674701][ T7352] erofs: (device loop5): erofs_read_inode: bogus i_mode (177777) @ nid 36 [ 249.877575][ T7295] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.465255][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.6.308'. [ 254.531334][ T28] audit: type=1800 audit(1786184216.950:32): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.309" name="zoned" dev="configfs" ino=14001 res=0 errno=0 [ 254.594448][ T28] audit: type=1800 audit(1786184217.020:33): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.309" name="memory_backed" dev="configfs" ino=14002 res=0 errno=0 [ 254.666848][ T7388] nvmet: disable ns before setting buffered_io value. [ 254.682269][ T28] audit: type=1800 audit(1786184217.020:34): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.309" name="zone_nr_conv" dev="configfs" ino=14003 res=0 errno=0 [ 254.734263][ T7388] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 254.764630][ T28] audit: type=1800 audit(1786184217.020:35): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.309" name="power" dev="configfs" ino=14004 res=0 errno=0 [ 255.795266][ T7391] raw_sendmsg: syz.3.312 forgot to set AF_INET. Fix it! [ 255.948206][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965760][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010763][ T28] audit: type=1800 audit(1786184217.040:36): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.311" name="attr_allow_any_host" dev="configfs" ino=15318 res=0 errno=0 [ 256.054000][ T7388] nvme_fabrics: missing parameter 'transport=%s' [ 256.085361][ T7388] nvme_fabrics: missing parameter 'nqn=%s' [ 256.158137][ T28] audit: type=1800 audit(1786184217.070:37): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.311" name="device_path" dev="configfs" ino=15322 res=0 errno=0 [ 256.271404][ T28] audit: type=1800 audit(1786184217.080:38): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.311" name="buffered_io" dev="configfs" ino=15323 res=0 errno=0 [ 256.432129][ T28] audit: type=1800 audit(1786184217.140:39): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.311" name="enable" dev="configfs" ino=15324 res=0 errno=0 [ 256.522154][ T28] audit: type=1800 audit(1786184217.150:40): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.311" name="addr_trtype" dev="configfs" ino=15325 res=0 errno=0 [ 259.585739][ T7398] x_tables: duplicate underflow at hook 1 [ 259.593283][ T7398] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.601154][ T7398] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 259.610045][ T7398] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 259.617964][ T7398] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 260.941789][ T7412] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 261.640250][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.456931][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.715317][ T7421] warning: `syz.6.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.473060][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.568043][ T7423] loop6: detected capacity change from 0 to 8 [ 263.860061][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.585494][ T7431] loop5: detected capacity change from 0 to 256 [ 265.075374][ T7431] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 266.061495][ T12] tipc: Left network mode [ 266.445035][ T28] audit: type=1326 audit(1786184228.870:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.6.325" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273e19e0d9 code=0x0 [ 268.992477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 269.511337][ T7484] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 270.770741][ T789] libceph: connect (1)[c::]:6789 error -101 [ 271.962136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 272.714682][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 272.768890][ T7486] ceph: No mds server is up or the cluster is laggy [ 273.039768][ T789] libceph: connect (1)[c::]:6789 error -101 [ 273.077422][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 275.736836][ T12] hsr_slave_0: left promiscuous mode [ 275.766274][ T12] hsr_slave_1: left promiscuous mode [ 277.269295][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.311552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.413342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.428946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.483911][ T12] bridge_slave_1: left allmulticast mode [ 277.582398][ T12] bridge_slave_1: left promiscuous mode [ 277.588300][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.771154][ T12] bridge_slave_0: left allmulticast mode [ 277.778606][ T7542] Bluetooth: MGMT ver 1.22 [ 277.792136][ T7542] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 277.824694][ T12] bridge_slave_0: left promiscuous mode [ 278.384213][ T7555] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 278.418744][ T7555] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 278.611684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.883372][ T12] veth1_macvtap: left promiscuous mode [ 280.889924][ T12] veth0_macvtap: left promiscuous mode [ 280.920333][ T12] veth1_vlan: left promiscuous mode [ 280.984005][ T12] veth0_vlan: left promiscuous mode [ 281.559524][ T7570] loop2: detected capacity change from 0 to 512 [ 281.663133][ T7570] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 281.702445][ T7570] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 281.731977][ T7570] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.340: Corrupt directory, running e2fsck is recommended [ 281.779665][ T7570] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 281.817798][ T7570] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.340: corrupted in-inode xattr: e_name out of bounds [ 281.865881][ T7570] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.340: couldn't read orphan inode 15 (err -117) [ 281.904290][ T7570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.820919][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.921076][ T12] team0 (unregistering): Port device team_slave_0 removed [ 283.013770][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.099077][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.630999][ T12] bond0 (unregistering): Released all slaves [ 283.754943][ T7535] netlink: 'syz.6.335': attribute type 4 has an invalid length. [ 283.892417][ T7563] tipc: Started in network mode [ 283.897389][ T7563] tipc: Node identity 4, cluster identity 4711 [ 283.903708][ T7563] tipc: Node number set to 4 [ 284.360307][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.432505][ T7601] loop5: detected capacity change from 0 to 16 [ 288.108147][ T51] Bluetooth: hci4: hcon ffff8880275c4000 sent 1 < count 257 [ 288.204405][ T7601] erofs: (device loop5): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 289.062131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 289.886651][ T7609] loop5: detected capacity change from 0 to 128 [ 290.056916][ T7609] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.206454][ T7609] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.047577][ T7184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.167371][ T7617] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 294.174438][ T7617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.225874][ T7630] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 294.316348][ T7617] vhci_hcd vhci_hcd.0: Device attached [ 294.495769][ T7621] vhci_hcd: connection closed [ 294.518078][ T49] vhci_hcd: stop threads [ 294.601991][ T8] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 294.604211][ T49] vhci_hcd: release socket [ 294.675052][ T49] vhci_hcd: disconnect device [ 296.297106][ T7640] netlink: 'syz.5.354': attribute type 4 has an invalid length. [ 296.533052][ T7639] [ 296.535466][ T7639] ====================================================== [ 296.542514][ T7639] WARNING: possible circular locking dependency detected [ 296.549557][ T7639] syzkaller #0 Tainted: G S [ 296.555545][ T7639] ------------------------------------------------------ [ 296.562582][ T7639] syz.6.362/7639 is trying to acquire lock: [ 296.568509][ T7639] ffffffff8ddf7170 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 296.578311][ T7639] [ 296.578311][ T7639] but task is already holding lock: [ 296.585702][ T7639] ffff88805d8e55a0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 296.595436][ T7639] [ 296.595436][ T7639] which lock already depends on the new lock. [ 296.595436][ T7639] [ 296.605875][ T7639] [ 296.605875][ T7639] the existing dependency chain (in reverse order) is: [ 296.614913][ T7639] [ 296.614913][ T7639] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 296.623652][ T7639] down_write+0x97/0x200 [ 296.628458][ T7639] configfs_depend_item_unlocked+0x157/0x430 [ 296.634995][ T7639] usbg_make_tpg+0x1f7/0x580 [ 296.640147][ T7639] target_fabric_make_tpg+0xa4/0x6d0 [ 296.645995][ T7639] configfs_mkdir+0x515/0x9e0 [ 296.651229][ T7639] vfs_mkdir+0x2a5/0x470 [ 296.656026][ T7639] do_mkdirat+0x1dc/0x450 [ 296.660906][ T7639] __x64_sys_mkdir+0x6e/0x80 [ 296.666049][ T7639] do_syscall_64+0x55/0xb0 [ 296.671019][ T7639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.677479][ T7639] [ 296.677479][ T7639] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 296.685179][ T7639] __mutex_lock+0x135/0xc80 [ 296.690255][ T7639] tcm_set_name+0x2a/0x90 [ 296.695141][ T7639] function_make+0x199/0x350 [ 296.700282][ T7639] configfs_mkdir+0x515/0x9e0 [ 296.705511][ T7639] vfs_mkdir+0x2a5/0x470 [ 296.710338][ T7639] do_mkdirat+0x1dc/0x450 [ 296.715303][ T7639] __x64_sys_mkdir+0x6e/0x80 [ 296.720443][ T7639] do_syscall_64+0x55/0xb0 [ 296.725406][ T7639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.731848][ T7639] [ 296.731848][ T7639] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 296.740141][ T7639] __lock_acquire+0x37ef/0x7d80 [ 296.745554][ T7639] lock_acquire+0x19e/0x420 [ 296.750612][ T7639] __mutex_lock+0x135/0xc80 [ 296.755667][ T7639] configfs_rmdir+0x63c/0x980 [ 296.760905][ T7639] vfs_rmdir+0x352/0x4b0 [ 296.765697][ T7639] do_rmdir+0x29f/0x590 [ 296.770399][ T7639] __x64_sys_unlinkat+0xc4/0xe0 [ 296.775796][ T7639] do_syscall_64+0x55/0xb0 [ 296.780761][ T7639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.787201][ T7639] [ 296.787201][ T7639] other info that might help us debug this: [ 296.787201][ T7639] [ 296.797451][ T7639] Chain exists of: [ 296.797451][ T7639] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 296.797451][ T7639] [ 296.812188][ T7639] Possible unsafe locking scenario: [ 296.812188][ T7639] [ 296.819658][ T7639] CPU0 CPU1 [ 296.825054][ T7639] ---- ---- [ 296.830436][ T7639] lock(&sb->s_type->i_mutex_key#27); [ 296.835931][ T7639] lock(&opts->dep_lock); [ 296.842897][ T7639] lock(&sb->s_type->i_mutex_key#27); [ 296.850910][ T7639] lock(gadget_subsys.su_mutex); [ 296.855989][ T7639] [ 296.855989][ T7639] *** DEADLOCK *** [ 296.855989][ T7639] [ 296.864154][ T7639] 3 locks held by syz.6.362/7639: [ 296.869196][ T7639] #0: ffff888142e9c418 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 296.878489][ T7639] #1: ffff88805d92dfc0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 296.889331][ T7639] #2: ffff88805d8e55a0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 296.899477][ T7639] [ 296.899477][ T7639] stack backtrace: [ 296.905386][ T7639] CPU: 1 PID: 7639 Comm: syz.6.362 Tainted: G S syzkaller #0 [ 296.914172][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.924247][ T7639] Call Trace: [ 296.927550][ T7639] [ 296.930505][ T7639] dump_stack_lvl+0x18c/0x250 [ 296.935215][ T7639] ? load_image+0x420/0x420 [ 296.939754][ T7639] ? show_regs_print_info+0x20/0x20 [ 296.944989][ T7639] ? print_circular_bug+0x12b/0x1a0 [ 296.950232][ T7639] check_noncircular+0x2fc/0x400 [ 296.955298][ T7639] ? print_deadlock_bug+0x5d0/0x5d0 [ 296.960529][ T7639] ? lockdep_lock+0xf5/0x230 [ 296.965153][ T7639] ? _find_first_zero_bit+0xd6/0x100 [ 296.970477][ T7639] __lock_acquire+0x37ef/0x7d80 [ 296.975367][ T7639] ? verify_lock_unused+0x140/0x140 [ 296.980616][ T7639] ? verify_lock_unused+0x140/0x140 [ 296.985853][ T7639] lock_acquire+0x19e/0x420 [ 296.990389][ T7639] ? configfs_rmdir+0x63c/0x980 [ 296.995273][ T7639] ? __might_sleep+0xe0/0xe0 [ 296.999896][ T7639] ? read_lock_is_recursive+0x20/0x20 [ 297.005302][ T7639] __mutex_lock+0x135/0xc80 [ 297.009844][ T7639] ? configfs_rmdir+0x63c/0x980 [ 297.014729][ T7639] ? configfs_rmdir+0x63c/0x980 [ 297.019615][ T7639] ? mutex_lock_nested+0x20/0x20 [ 297.024606][ T7639] ? __lock_acquire+0x7d80/0x7d80 [ 297.029663][ T7639] ? lockref_put_or_lock+0x72/0xb0 [ 297.034802][ T7639] ? dput+0x3b/0x1e0 [ 297.038742][ T7639] ? dput+0x3b/0x1e0 [ 297.042674][ T7639] configfs_rmdir+0x63c/0x980 [ 297.047386][ T7639] vfs_rmdir+0x352/0x4b0 [ 297.051660][ T7639] do_rmdir+0x29f/0x590 [ 297.055849][ T7639] ? __check_object_size+0x4fc/0xa40 [ 297.061162][ T7639] ? d_delete_notify+0x150/0x150 [ 297.066128][ T7639] ? getname_flags+0x20a/0x500 [ 297.070928][ T7639] __x64_sys_unlinkat+0xc4/0xe0 [ 297.075816][ T7639] do_syscall_64+0x55/0xb0 [ 297.080273][ T7639] ? clear_bhb_loop+0x40/0x90 [ 297.084978][ T7639] ? clear_bhb_loop+0x40/0x90 [ 297.089681][ T7639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.095612][ T7639] RIP: 0033:0x7f273e19e0d9 [ 297.100059][ T7639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.119813][ T7639] RSP: 002b:00007f273f106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 297.128265][ T7639] RAX: ffffffffffffffda RBX: 00007f273e425fa0 RCX: 00007f273e19e0d9 [ 297.136265][ T7639] RDX: 0000000000000200 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 297.144265][ T7639] RBP: 00007f273e235024 R08: 0000000000000000 R09: 0000000000000000 [ 297.152262][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.160259][ T7639] R13: 00007f273e426038 R14: 00007f273e425fa0 R15: 00007ffecbb5da58 [ 297.168267][ T7639] [ 300.042106][ T8] vhci_hcd: vhci_device speed not set [ 300.097077][ T7657] 9pnet_fd: Insufficient options for proto=fd