last executing test programs: 22m6.254153379s ago: executing program 2 (id=47): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x47f, 0xf}]) 22m5.854835318s ago: executing program 2 (id=49): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0xffefffff, 0x21, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e0000006ee10c507c04ad4bf9b384329edf51d3ff84ba8a0ee08cdd35a4489008ae591f34d0b384c3a861cb970503d322929b218e493d36aeab83df9c795e06cc4aabd8b5d0d40f0a0439205909ddad8bfeb657762c03a9b09762a99c2f3e78ba044b9b62a7670b559d"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 22m5.542478542s ago: executing program 2 (id=51): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c01000019000100fdffffffffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a0080"], 0x17c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 22m5.305931674s ago: executing program 2 (id=52): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 22m4.570785639s ago: executing program 2 (id=57): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x200, 0xfffffffc, @loopback, 0x6}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r0, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000001}) 22m1.647971886s ago: executing program 2 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902"], 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 22m0.411923395s ago: executing program 32 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902"], 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 7m13.609979448s ago: executing program 1 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) restart_syscall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') ptrace$setsig(0x4203, r0, 0x7, &(0x7f0000002200)={0x1b, 0xe, 0x605}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44085}, 0x20000000) 7m12.254768522s ago: executing program 1 (id=1912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 7m10.980140243s ago: executing program 1 (id=1913): openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0xe}) epoll_pwait2(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71cf, 0x2000, 0x6, 0x15e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) 7m8.93104676s ago: executing program 1 (id=1915): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48010) semctl$SETALL(0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000000100000000000000180000000200000408000000130000000200000000000000010000000100"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xf266, r5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='12:.1:/exporb\x00\x00\x00\x00\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 7m4.250348402s ago: executing program 1 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) futex(&(0x7f0000004000), 0x5, 0xffffffff, 0x0, &(0x7f0000004000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") 7m2.578422571s ago: executing program 1 (id=1926): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0\x00', 0xc08, &(0x7f00000001c0)=ANY=[], 0x3, 0x242, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000028000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='/dev/kvm\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x28400, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, [@generic={0xf, 0xe, 0x5, 0x9, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7e}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') 6m46.865672736s ago: executing program 33 (id=1926): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0\x00', 0xc08, &(0x7f00000001c0)=ANY=[], 0x3, 0x242, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000028000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='/dev/kvm\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x28400, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, [@generic={0xf, 0xe, 0x5, 0x9, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7e}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') 4m27.828089476s ago: executing program 5 (id=2132): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x152d, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket(0xa, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 4m26.711299099s ago: executing program 5 (id=2133): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) 4m22.302367408s ago: executing program 5 (id=2141): prctl$PR_GET_TSC(0x43, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) setuid(0xee00) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) ptrace(0x10, 0x0) 4m19.145323457s ago: executing program 5 (id=2147): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, &(0x7f0000000740)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 4m17.763948463s ago: executing program 5 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x32, 0x0, 0x0) 4m15.908904851s ago: executing program 5 (id=2151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000001140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r4, 0xb6ae1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) 4m0.589897157s ago: executing program 34 (id=2151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000001140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r4, 0xb6ae1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) 45.554649981s ago: executing program 0 (id=2428): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0) write(r1, &(0x7f0000000230)='0x0', 0x3) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa18, 0x0, 0x0, 0x4}}, 0x50) syz_mount_image$udf(&(0x7f0000000140), &(0x7f00000013c0)='./file0\x00', 0x1200a07, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x1, 0xc4d, &(0x7f0000001400)="$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") r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0xfffffffffffffece, 0x0}, 0x8a}], 0x1, 0x22, 0x0) read(r3, &(0x7f0000002140)=""/243, 0xf3) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file0\x00', 0x1) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000340)={0xf, 0x586e, 0x3, 0x1, 0xf034, 0x3f, 0x4}) 36.70880364s ago: executing program 0 (id=2444): chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x8, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000068b87753"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x5}, 0x50) 33.286348383s ago: executing program 0 (id=2452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 32.334201137s ago: executing program 0 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037", 0x3, 0x0, 0x0, 0x0) sched_getscheduler(r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4a0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 30.877297626s ago: executing program 0 (id=2457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x3, 0x1) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) r3 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) connect(r3, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 28.176363264s ago: executing program 0 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000000)='./file0\x00', 0x1) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) memfd_secret(0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21.191227796s ago: executing program 4 (id=2469): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408c851}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005", 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x20c, 0x20a, 0x278, 0x20c, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0xff0001fe], 0x4e21, 0x4e20, 0x4e24, 0x4e21, 0x2d90b2e5, 0x4, 0xfffffffc, 0x7, 0x1}}}, {{@ipv6={@loopback, @loopback, [], [0xffffffff, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214060, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='10000', 0x5) socket$packet(0x11, 0x3, 0x300) 19.080394725s ago: executing program 4 (id=2472): openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace(0x4207, r1) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r2, 0x0, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 16.420903952s ago: executing program 4 (id=2474): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = getpgrp(0x0) r1 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', 0x0, 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, 0x0, 0x8000) 13.860533093s ago: executing program 3 (id=2477): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 10.464664284s ago: executing program 35 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000000)='./file0\x00', 0x1) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) memfd_secret(0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10.441437035s ago: executing program 6 (id=2479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x90}}, 0x4000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x1, 0xffffb313, 0x40, "1ae34e6566ff7b2afa55bcd8b1407958339f00", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 10.439870415s ago: executing program 4 (id=2480): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) gettid() mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) 10.423555836s ago: executing program 3 (id=2481): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400003e436d5b000000000000000000070000000c00cfbac0c6e3185d080012400000ffff05000100068300000514953b3a2866a57c408a15a09d000500020000000510"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r0 = syz_open_dev$loop(&(0x7f0000001880), 0x3ff, 0x60400) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000018c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000003180)=0x23b, 0x4) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./sys/class/rnbd-client/ctl/map_device\x00', 0x200) msgget(0x2, 0x47a5f2ebe3f1275b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000440), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[0x0]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004"], 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x0) 9.872505502s ago: executing program 6 (id=2482): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 9.257436081s ago: executing program 4 (id=2483): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xf, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x202, 0x188) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000440)) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4.704596007s ago: executing program 7 (id=2478): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1400, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x1000, @multicast2}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.693940367s ago: executing program 6 (id=2491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7f) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r5, &(0x7f0000000280)=""/168, 0xa8, 0xe0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0xa, 0x4, 0x81}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) 4.690696067s ago: executing program 4 (id=2492): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) memfd_create(0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff00"/24) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() 4.689162547s ago: executing program 3 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e", 0x6b) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000940)='dummy_udc.0', 0xb) 4.559777284s ago: executing program 7 (id=2484): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = fanotify_init(0x4, 0x1) fanotify_mark(r4, 0x20, 0x40000000, 0xffffffffffffffff, &(0x7f0000000580)='configfs\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xc2}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.489309537s ago: executing program 6 (id=2485): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 3.198792688s ago: executing program 7 (id=2486): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)="2e2f30a9efdfd4981b0c2ad178c2a1b338000000", 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x500, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 3.16197416s ago: executing program 3 (id=2487): add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000700)="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", 0x110, 0xffffffffffffffff) landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 1.583807045s ago: executing program 6 (id=2488): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 1.570282416s ago: executing program 3 (id=2489): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="23000000010006", 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 75.499137ms ago: executing program 6 (id=2490): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) gettid() mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) 0s ago: executing program 3 (id=2494): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, &(0x7f00000013c0)={&(0x7f0000001100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e1f}}, 0x80, &(0x7f0000000140)}, 0x0) fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2, 0x8e92, 0x4f, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x15) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpgrp(0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800006, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) kernel console output (not intermixed with test programs): 41][T10849] bond4: (slave gretap1): making interface the new active one [ 669.681041][T10849] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 669.898023][T10847] macvlan2: entered promiscuous mode [ 670.025802][T10847] macvlan2: entered allmulticast mode [ 671.686212][T10847] bond4: entered promiscuous mode [ 671.725496][T10847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 671.759726][T10847] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 671.839169][T10847] bond4: left promiscuous mode [ 673.481636][T10878] loop0: detected capacity change from 0 to 164 [ 673.853665][T10884] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 673.871559][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.879310][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.060749][T10893] rock: directory entry would overflow storage [ 674.067774][T10893] rock: sig=0x4f50, size=4, remaining=3 [ 674.073600][T10893] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 674.378141][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.385505][T10884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.394695][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.402007][T10884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.576560][T10884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 674.662412][T10897] nfs: Unknown parameter 'axé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 676.667155][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 676.667175][ T27] audit: type=1326 audit(1789188985.022:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 676.744161][ T27] audit: type=1326 audit(1789188985.022:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.057935][ T27] audit: type=1326 audit(1789188985.122:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.087841][ T27] audit: type=1326 audit(1789188985.122:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.517532][T10912] jffs2: notice: (10912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 677.591507][ T27] audit: type=1326 audit(1789188985.122:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.645963][ T27] audit: type=1326 audit(1789188985.222:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.816708][ T27] audit: type=1326 audit(1789188985.222:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.868535][ T27] audit: type=1326 audit(1789188985.222:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.918380][ T27] audit: type=1326 audit(1789188985.322:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 677.957894][ T27] audit: type=1326 audit(1789188985.322:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.3.1264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 678.078181][T10922] fuse: Bad value for 'fd' [ 678.303443][T10928] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 684.940951][T10970] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 686.666413][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.678541][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.036098][T10993] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 689.348038][T10997] fuse: Bad value for 'fd' [ 690.793522][T11019] UBIFS error (pid: 11019): cannot open "(null)", error -22 [ 691.232827][T11015] wg1 speed is unknown, defaulting to 1000 [ 693.321720][T11016] CIFS: Attempting to mount //127.0.0.1/share [ 694.205633][T11016] CIFS: VFS: cifs_mount failed w/return code = -112 [ 700.791542][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 700.791558][ T27] audit: type=1326 audit(1789189010.032:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 700.856883][ T27] audit: type=1326 audit(1789189010.032:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 700.898599][ T27] audit: type=1326 audit(1789189010.072:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 700.978819][ T27] audit: type=1326 audit(1789189010.072:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.058517][ T27] audit: type=1326 audit(1789189010.072:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.101607][ T27] audit: type=1326 audit(1789189010.072:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.132331][T11066] macsec2: entered allmulticast mode [ 701.151312][ T27] audit: type=1326 audit(1789189010.072:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.159592][T11066] veth1_macvtap: entered allmulticast mode [ 701.201178][ T27] audit: type=1326 audit(1789189010.072:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.234528][T11066] veth1_macvtap: left allmulticast mode [ 701.263315][ T27] audit: type=1326 audit(1789189010.072:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 701.333036][ T27] audit: type=1326 audit(1789189010.072:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.3.1306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2959e159 code=0x7ffc0000 [ 702.165960][T10490] block nbd0: Receive control failed (result -32) [ 702.181231][ T5787] block nbd0: Receive control failed (result -32) [ 704.896940][T11094] vlan0: entered allmulticast mode [ 704.935167][T11094] bond0: entered allmulticast mode [ 706.846133][T11113] tipc: Enabling of bearer rejected, failed to enable media [ 708.110744][T11143] UBIFS error (pid: 11143): cannot open "(null)", error -22 [ 713.676985][T11193] loop0: detected capacity change from 0 to 256 [ 713.814447][T11193] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 713.885451][T11193] syz.0.1334: attempt to access beyond end of device [ 713.885451][T11193] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 713.917063][T11193] syz.0.1334: attempt to access beyond end of device [ 713.917063][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 714.047995][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 714.048016][ T27] audit: type=1800 audit(1789189023.262:379): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1334" name="file1" dev="loop0" ino=1048634 res=0 errno=0 [ 714.628759][ T5823] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 715.028270][ T5823] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 715.062829][ T5823] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 715.117115][T11193] syz.0.1334: attempt to access beyond end of device [ 715.117115][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.794412][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.878621][T11193] syz.0.1334: attempt to access beyond end of device [ 715.878621][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.892740][T11193] syz.0.1334: attempt to access beyond end of device [ 715.892740][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.906816][T11193] syz.0.1334: attempt to access beyond end of device [ 715.906816][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.920872][T11193] syz.0.1334: attempt to access beyond end of device [ 715.920872][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.934906][T11193] syz.0.1334: attempt to access beyond end of device [ 715.934906][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.954728][T11193] syz.0.1334: attempt to access beyond end of device [ 715.954728][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 715.991252][ T5823] usb 5-1: Product: syz [ 716.028836][T11193] syz.0.1334: attempt to access beyond end of device [ 716.028836][T11193] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 716.057100][ T5823] usb 5-1: Manufacturer: syz [ 716.062244][ T5823] usb 5-1: SerialNumber: syz [ 716.101226][T11198] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 716.152747][T11198] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.188923][T11198] exFAT-fs (loop0): Filesystem has been set read-only [ 716.195790][T11198] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 9, err : -5) [ 716.238865][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.248648][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 0, err : -5) [ 716.279118][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.342623][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 0, err : -5) [ 716.373433][T11198] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.398464][T11198] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 8, err : -5) [ 716.429724][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.458670][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 1, err : -5) [ 716.471955][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.498860][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 2, err : -5) [ 716.518675][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.527470][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 3, err : -5) [ 716.560092][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.578562][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 4, err : -5) [ 716.598497][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.607270][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 5, err : -5) [ 716.623867][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 716.633394][T11193] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d7a87e0 iblock : 6, err : -5) [ 716.653851][T11193] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 717.800649][ T5823] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 717.809813][ T5823] usb 5-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 717.817206][ T5823] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 717.825268][ T5823] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 717.879185][ T5823] usb 5-1: USB disconnect, device number 9 [ 719.074586][T10757] udevd[10757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.220271][ T7942] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 720.337715][ T7942] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 720.357698][ T7942] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 720.413274][ T7942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.438531][ T7942] usb 1-1: Product: syz [ 720.453615][ T7942] usb 1-1: Manufacturer: syz [ 720.460940][ T7942] usb 1-1: SerialNumber: syz [ 722.517043][ T7942] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 722.578696][ T7942] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 722.631006][ T7942] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 722.671384][ T7942] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 723.915965][ T7942] usb 1-1: USB disconnect, device number 6 [ 724.377448][T10757] udevd[10757]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.404047][T11275] syzkaller0: entered promiscuous mode [ 724.461538][T11275] syzkaller0: entered allmulticast mode [ 724.484417][T11277] tipc: Enabled bearer , priority 0 [ 724.544324][T11281] bond0: (slave syz_tun): Releasing backup interface [ 724.606651][T11281] bond5: (slave veth0_to_bond): Releasing active interface [ 724.646038][T11281] veth0_to_bond: left allmulticast mode [ 724.655208][T11281] veth0_to_bond: left promiscuous mode [ 724.689216][T11281] bond0: (slave bond_slave_0): Releasing backup interface [ 724.712276][T11281] bond_slave_0: left promiscuous mode [ 724.747269][T11281] bond0: (slave bond_slave_1): Releasing backup interface [ 724.767634][T11281] bond_slave_1: left promiscuous mode [ 724.845500][T11281] team0: Port device team_slave_0 removed [ 724.897495][T11281] team0: Port device team_slave_1 removed [ 724.907061][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.917672][T11281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.934183][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.944444][T11281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.978323][T11281] bond0: (slave vxlan0): Releasing backup interface [ 725.009755][T11281] vxlan0: left promiscuous mode [ 725.029676][T11281] bond1: (slave veth3): Releasing active interface [ 725.052541][T11281] bond2: (slave geneve2): Releasing active interface [ 725.077105][T11281] bond3: (slave geneve3): Releasing active interface [ 725.107021][T11281] tipc: Resetting bearer [ 725.147575][T11281] team0: Port device bridge1 removed [ 725.156720][T11281] bond5: (slave veth5): Releasing active interface [ 725.182191][T11277] tipc: Resetting bearer [ 725.222913][T11280] team0: Port device xfrm0 added [ 725.246901][T11282] tipc: Enabled bearer , priority 0 [ 725.257120][T11274] tipc: Resetting bearer [ 725.288088][T11274] tipc: Disabling bearer [ 729.184360][T11315] UBIFS error (pid: 11315): cannot open "(null)", error -22 [ 729.951895][T11324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 731.190016][T11335] ip6gretap0: left allmulticast mode [ 731.205621][T11335] ip6gretap0: left promiscuous mode [ 731.219050][T11335] bridge0: port 1(ip6gretap0) entered disabled state [ 731.236906][T11335] infiniband syz2: set active [ 731.263715][T11335] bond4: (slave veth0_to_bond): Releasing backup interface [ 731.346802][T11335] veth7: left allmulticast mode [ 731.366732][T11335] veth7: left promiscuous mode [ 731.381122][T11335] bridge2: port 1(veth7) entered disabled state [ 731.405682][T11335] veth9: left allmulticast mode [ 731.415377][T11335] veth9: left promiscuous mode [ 731.426780][T11335] bridge2: port 3(veth9) entered disabled state [ 731.466997][ T5823] wg1 speed is unknown, defaulting to 1000 [ 731.525579][T11339] team0: Port device xfrm0 added [ 731.549818][T11340] tipc: Enabled bearer , priority 0 [ 738.872735][T11407] loop4: detected capacity change from 0 to 164 [ 740.760019][T11421] __vm_enough_memory: pid: 11421, comm: syz.3.1376, not enough memory for the allocation [ 744.206439][T11440] loop4: detected capacity change from 0 to 16 [ 744.269299][T11440] erofs: (device loop4): mounted with root inode @ nid 36. [ 744.701974][T11445] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 744.716983][T11445] bio_check_eod: 160 callbacks suppressed [ 744.717033][T11445] syz.4.1389: attempt to access beyond end of device [ 744.717033][T11445] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 745.213149][ T27] audit: type=1800 audit(1789189054.342:380): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1389" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 747.145273][T11465] UBIFS error (pid: 11465): cannot open "(null)", error -22 [ 747.601014][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.619324][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.536746][T11489] bond0: (slave bridge0): Releasing backup interface [ 750.552943][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.560385][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.599465][T11489] bridge_slave_0: left allmulticast mode [ 750.605203][T11489] bridge_slave_0: left promiscuous mode [ 750.616535][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.629786][T11489] bridge_slave_1: left allmulticast mode [ 750.635951][T11489] bridge_slave_1: left promiscuous mode [ 750.647669][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.667390][T11489] bond4: (slave veth0_to_bond): Releasing backup interface [ 750.710229][T11489] bond0: (slave bond_slave_0): Releasing backup interface [ 750.747624][T11489] bond0: (slave bond_slave_1): Releasing backup interface [ 750.892886][T11489] team0: Port device team_slave_0 removed [ 751.274831][T11489] team0: Port device team_slave_1 removed [ 751.389744][T11489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.479187][T11489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.521530][T11489] bond1: (slave geneve2): Releasing active interface [ 751.567042][T11489] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.587174][T11489] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.600173][T11489] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.621141][T11489] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.656914][T11489] bond2: (slave bridge1): Releasing backup interface [ 751.663916][T11489] bond2: (slave bridge1): the permanent HWaddr of slave - 2e:35:74:33:6e:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 751.703042][T11489] bond2: (slave bridge2): making interface the new active one [ 751.767465][T11489] bond2: (slave bridge2): Releasing backup interface [ 751.881841][T11492] team0: Port device xfrm0 added [ 751.941674][T11493] tipc: Enabled bearer , priority 0 [ 752.953124][ T7942] tipc: Node number set to 4077344216 [ 754.660986][T11524] netlink: set zone limit has 8 unknown bytes [ 756.937543][T11556] netlink: 'syz.4.1416': attribute type 39 has an invalid length. [ 758.970808][T11572] netlink: set zone limit has 8 unknown bytes [ 764.469186][T11606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 767.770937][T11631] netlink: set zone limit has 8 unknown bytes [ 771.206099][T11659] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 771.224119][T11659] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 771.293745][T11659] tipc: New replicast peer: 255.255.255.255 [ 771.352358][T11659] tipc: Enabled bearer , priority 10 [ 772.996107][T11675] "syz.0.1449" (11675) uses obsolete ecb(arc4) skcipher [ 776.113802][T11692] ip6gretap2: entered allmulticast mode [ 776.129409][T11692] batman_adv: batadv0: Adding interface: ip6gretap2 [ 776.136305][T11692] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.163669][T11692] batman_adv: batadv0: Interface activated: ip6gretap2 [ 776.946363][T11696] netlink: 'syz.3.1455': attribute type 39 has an invalid length. [ 780.726422][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 783.024457][T11742] netlink: 'syz.0.1463': attribute type 1 has an invalid length. [ 783.241680][T11742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.259739][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 783.514648][T11745] veth11: entered allmulticast mode [ 783.873457][T11745] bond5: (slave veth11): Enslaving as an active interface with a down link [ 784.250619][T11747] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 784.434131][T11742] bond5: entered promiscuous mode [ 784.439473][T11742] bond5: entered allmulticast mode [ 789.417961][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'. [ 790.837257][T11796] loop4: detected capacity change from 0 to 128 [ 795.296075][T11826] tipc: Enabling of bearer rejected, failed to enable media [ 797.321473][T11845] loop0: detected capacity change from 0 to 128 [ 797.599367][T11845] nfs: Unknown parameter 'axé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 797.912351][ T27] audit: type=1326 audit(1789189107.142:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 797.937324][ T27] audit: type=1326 audit(1789189107.142:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 797.965133][ T27] audit: type=1326 audit(1789189107.142:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.636372][ T27] audit: type=1326 audit(1789189107.142:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.713893][ T27] audit: type=1326 audit(1789189107.142:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.824056][ T27] audit: type=1326 audit(1789189107.142:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.903745][ T27] audit: type=1326 audit(1789189107.142:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.934887][ T27] audit: type=1326 audit(1789189107.142:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 798.963099][ T27] audit: type=1326 audit(1789189107.142:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 799.007647][ T27] audit: type=1326 audit(1789189107.142:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79e159 code=0x7ffc0000 [ 804.959605][T11344] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 805.587492][T11904] program syz.0.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.345800][T11907] wg1 speed is unknown, defaulting to 1000 [ 807.960668][ T3067] IPVS: starting estimator thread 0... [ 807.966499][T11916] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 807.989124][T11916] netlink: 'syz.4.1507': attribute type 2 has an invalid length. [ 808.038515][T11916] tipc: New replicast peer: 255.255.255.255 [ 808.046980][T11916] tipc: Enabled bearer , priority 10 [ 808.068671][T11917] IPVS: using max 16 ests per chain, 38400 per kthread [ 809.009335][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.016119][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.812596][T11934] loop4: detected capacity change from 0 to 1024 [ 809.820271][T11934] EXT4-fs: Ignoring removed i_version option [ 811.573092][T11934] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.123596][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 818.241564][T11978] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 818.467836][T11978] netlink: 'syz.1.1524': attribute type 2 has an invalid length. [ 826.156704][T12007] loop0: detected capacity change from 0 to 1024 [ 826.323676][T12007] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 826.380686][T12007] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1529: lblock 2 mapped to illegal pblock 2 (length 1) [ 826.395265][T12007] __quota_error: 4 callbacks suppressed [ 826.395281][T12007] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 826.409849][T12007] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1529: lblock 0 mapped to illegal pblock 48 (length 1) [ 826.429187][T12007] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 826.438111][T12007] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1529: Failed to acquire dquot type 0 [ 826.452956][T12007] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 826.464529][T12007] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1529: mark_inode_dirty error [ 826.497760][T12007] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 826.508567][T12007] EXT4-fs (loop0): 1 orphan inode deleted [ 826.515823][T12007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.900513][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.918906][ T2888] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 826.952809][ T2888] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 826.984755][ T2888] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 827.038862][ T5775] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 827.218435][ T5775] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 827.398456][ T5775] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 831.704934][T12054] macsec1: entered allmulticast mode [ 831.718603][T12054] veth1_macvtap: entered allmulticast mode [ 831.780287][T12054] veth1_macvtap: left allmulticast mode [ 833.846219][T12107] loop4: detected capacity change from 0 to 128 [ 833.888153][T12107] nfs: Unknown parameter 'axé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 834.339002][ T27] audit: type=1326 audit(1789189143.502:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.135634][ T27] audit: type=1326 audit(1789189143.502:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.171634][ T27] audit: type=1326 audit(1789189143.502:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.229116][ T27] audit: type=1326 audit(1789189143.502:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.337565][ T27] audit: type=1326 audit(1789189143.512:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.413375][ T27] audit: type=1326 audit(1789189143.512:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.465632][ T27] audit: type=1326 audit(1789189143.512:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.517684][ T27] audit: type=1326 audit(1789189143.512:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 835.593064][ T27] audit: type=1326 audit(1789189143.512:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 836.021062][T12125] overlayfs: workdir and upperdir must be separate subtrees [ 836.030092][ T27] audit: type=1326 audit(1789189143.512:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12106 comm="syz.4.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 836.842986][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 837.125750][ T7942] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 837.261147][T12127] ceph: No mds server is up or the cluster is laggy [ 843.201918][T12176] Bluetooth: MGMT ver 1.22 [ 844.030791][T12180] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 844.087641][T12180] netlink: 'syz.1.1579': attribute type 2 has an invalid length. [ 844.658840][T12198] team_slave_0: mtu less than device minimum [ 847.430127][T12224] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 847.473293][T12224] netlink: 'syz.0.1590': attribute type 2 has an invalid length. [ 847.524917][T12224] tipc: Enabling of bearer rejected, already enabled [ 849.114767][T12250] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 849.127324][T12250] netlink: 'syz.3.1600': attribute type 2 has an invalid length. [ 849.257148][T12250] tipc: New replicast peer: 255.255.255.255 [ 849.304996][T12250] tipc: Enabled bearer , priority 10 [ 850.229482][T12262] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 850.237492][T12262] netlink: 'syz.4.1604': attribute type 2 has an invalid length. [ 850.252373][T12262] tipc: Enabling of bearer rejected, already enabled [ 852.956868][T12293] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 852.966952][T12293] netlink: 'syz.4.1611': attribute type 2 has an invalid length. [ 852.991168][T12293] tipc: Enabling of bearer rejected, already enabled [ 854.400174][T12305] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 854.440784][T12305] netlink: 'syz.0.1613': attribute type 2 has an invalid length. [ 855.164696][T12313] overlayfs: upper fs does not support file handles, falling back to index=off. [ 856.159625][T12311] tipc: Enabling of bearer rejected, already enabled [ 857.512419][T12330] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 857.528456][T12330] netlink: 'syz.0.1621': attribute type 2 has an invalid length. [ 857.768862][T12330] tipc: Enabling of bearer rejected, already enabled [ 860.604391][T12352] tc action pedit 'at' offset -2147483645 out of bounds [ 861.132208][T12367] overlayfs: workdir and upperdir must be separate subtrees [ 867.380714][T12394] ceph: No mds server is up or the cluster is laggy [ 869.631774][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 869.631794][ T27] audit: type=1800 audit(1789189178.702:409): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1647" name="file0" dev="overlay" ino=2179 res=0 errno=0 [ 870.412841][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.419354][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.521263][T12437] overlayfs: failed to clone upperpath [ 872.321232][T12443] tipc: Bearer : already 2 bearers with priority 0 [ 872.329745][T12443] tipc: Enabling of bearer rejected, cannot adjust to lower [ 876.840937][T12473] loop6: detected capacity change from 0 to 6 [ 876.944773][T12473] Dev loop6: unable to read RDB block 6 [ 876.951069][T12473] loop6: unable to read partition table [ 876.957056][T12473] loop6: partition table beyond EOD, truncated [ 876.963433][T12473] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 885.898106][T12527] overlayfs: failed to clone upperpath [ 892.431020][T12586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1691'. [ 892.941126][T12590] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 892.973168][T12590] CIFS: Attempting to mount //127.0.0.1/share [ 893.361977][T12590] CIFS: VFS: Error connecting to socket. Aborting operation. [ 893.378681][T12590] CIFS: VFS: cifs_mount failed w/return code = -4 [ 893.774560][T12607] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 894.518832][ T27] audit: type=1800 audit(1789189203.642:410): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1699" name="file0" dev="overlay" ino=2179 res=0 errno=0 [ 896.499250][T12626] loop0: detected capacity change from 0 to 512 [ 896.506754][T12626] EXT4-fs: inline encryption not supported [ 896.818570][T12626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 896.871487][T12626] EXT4-fs (loop0): Invalid default hash set in the superblock [ 898.695259][T12649] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 898.704801][T12649] netlink: 'syz.4.1708': attribute type 2 has an invalid length. [ 899.054765][T12658] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 899.081384][T12658] netlink: 'syz.1.1710': attribute type 2 has an invalid length. [ 902.319110][T12692] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 902.339643][T12692] netlink: 'syz.1.1719': attribute type 2 has an invalid length. [ 903.292097][T12697] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 903.300686][T12697] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 903.314869][T12697] tipc: Enabling of bearer rejected, already enabled [ 903.472411][T12704] loop0: detected capacity change from 0 to 1024 [ 903.485889][T12704] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 904.464857][T12704] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1721: Invalid block bitmap block 0 in block_group 0 [ 904.548604][T12704] Quota error (device loop0): write_blk: dquota write failed [ 904.607028][T12704] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 904.779220][T12704] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1721: Failed to acquire dquot type 0 [ 904.961544][T12704] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.1721: Freeing blocks not in datazone - block = 0, count = 4096 [ 905.042216][T12704] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1721: Invalid inode bitmap blk 0 in block_group 0 [ 905.060702][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 905.077801][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 905.332631][T12704] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 906.130346][T12704] EXT4-fs (loop0): 1 orphan inode deleted [ 906.137547][T12704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.217899][T12729] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 906.236983][T12729] netlink: 'syz.4.1732': attribute type 2 has an invalid length. [ 908.078398][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.639940][T12775] FAT-fs (nullb0): bogus number of reserved sectors [ 911.646912][T12775] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 911.690922][T12775] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 914.487683][T12798] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 914.533905][T12798] netlink: 'syz.1.1751': attribute type 2 has an invalid length. [ 916.053968][T12812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1753'. [ 920.162249][T12830] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 920.183910][T12830] netlink: 'syz.4.1761': attribute type 2 has an invalid length. [ 923.472467][T12862] loop4: detected capacity change from 0 to 256 [ 923.594527][T12862] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 924.164782][T12872] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 924.174895][T12872] netlink: 'syz.1.1771': attribute type 2 has an invalid length. [ 927.281526][T12891] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 928.465559][T12898] infiniband syz2: set active [ 928.984239][T12898] bond5: (slave veth0_to_bond): Releasing active interface [ 929.314069][T12898] team0: Port device xfrm0 removed [ 929.331978][T12898] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 929.339198][T12898] batman_adv: batadv0: Removing interface: ip6gretap2 [ 929.385978][T12898] bond5: (slave veth11): Releasing active interface [ 929.453442][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 929.481562][ T8] wg1 speed is unknown, defaulting to 1000 [ 929.576294][T12900] team0: Port device xfrm0 added [ 929.620993][T12903] tipc: Enabling of bearer rejected, already enabled [ 931.904535][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.911749][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.148773][T12928] "syz.3.1787" (12928) uses obsolete ecb(arc4) skcipher [ 935.168668][ T7942] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 935.378826][ T7942] usb 5-1: Using ep0 maxpacket: 32 [ 935.397856][ T7942] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 935.430789][ T7942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.520092][ T7942] usb 5-1: config 0 descriptor?? [ 935.730039][ T7942] as10x_usb: device has been detected [ 935.748983][ T7942] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 935.849895][ T7942] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 936.075502][ T7942] as10x_usb: error during firmware upload part1 [ 936.089113][ T7942] Registered device nBox DVB-T Dongle [ 936.939974][T12933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 937.028183][ T7942] usb 5-1: USB disconnect, device number 11 [ 937.183243][ T7942] Unregistered device nBox DVB-T Dongle [ 937.201477][ T7942] as10x_usb: device has been disconnected [ 938.008578][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 940.843773][T12971] "syz.4.1798" (12971) uses obsolete ecb(arc4) skcipher [ 942.138157][ T3067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 942.234104][ T3067] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 942.341489][T12979] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 942.350521][T12979] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 942.359088][T12979] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 946.651602][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 946.663248][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1807'. [ 946.672543][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 946.682674][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 947.652827][T13012] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 947.713671][T13012] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 947.841815][T13004] vlan2: entered promiscuous mode [ 947.847324][T13004] vlan2: entered allmulticast mode [ 947.856904][T13004] hsr_slave_1: entered allmulticast mode [ 953.279459][T13049] loop0: detected capacity change from 0 to 512 [ 953.287029][T13049] EXT4-fs: Ignoring removed bh option [ 953.329988][T13049] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 953.840285][T13053] infiniband syz2: set active [ 953.862683][T13053] bond5: left promiscuous mode [ 955.208787][ T7942] wg1 speed is unknown, defaulting to 1000 [ 955.308621][T13055] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 955.338216][T13055] netlink: 'syz.4.1822': attribute type 2 has an invalid length. [ 955.364327][T13055] tipc: Enabling of bearer rejected, already enabled [ 959.214537][T13075] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5785] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13075] [ 965.636715][T13115] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 965.645202][T13115] netlink: 'syz.4.1839': attribute type 2 has an invalid length. [ 965.678729][T13115] tipc: Enabling of bearer rejected, already enabled [ 966.614690][T13124] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 966.638258][T13124] netlink: 'syz.4.1840': attribute type 2 has an invalid length. [ 966.681572][T13124] tipc: Enabling of bearer rejected, already enabled [ 966.870658][ T27] audit: type=1800 audit(1789189276.112:411): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1842" name="idVendor" dev="configfs" ino=27767 res=0 errno=0 [ 966.909742][ T27] audit: type=1800 audit(1789189276.142:412): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1842" name="idProduct" dev="configfs" ino=27768 res=0 errno=0 [ 966.948733][ T27] audit: type=1800 audit(1789189276.142:413): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1842" name="max_speed" dev="configfs" ino=27769 res=0 errno=0 [ 966.978684][ T27] audit: type=1800 audit(1789189276.142:414): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1842" name="c_sync" dev="configfs" ino=27771 res=0 errno=0 [ 967.006998][ T27] audit: type=1800 audit(1789189276.172:415): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1842" name="UDC" dev="configfs" ino=27772 res=0 errno=0 [ 967.115449][T13130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1843'. [ 970.316740][T13157] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 970.331896][T13157] netlink: 'syz.3.1848': attribute type 2 has an invalid length. [ 970.347520][T13157] tipc: Enabling of bearer rejected, already enabled [ 970.521558][T13164] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 970.529981][T13164] netlink: 'syz.3.1850': attribute type 2 has an invalid length. [ 970.546676][T13164] tipc: Enabling of bearer rejected, already enabled [ 971.896242][T13177] ALSA: mixer_oss: invalid OSS volume '' [ 971.905122][T13177] SET target dimension over the limit! [ 973.178495][T13187] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 973.234472][T13187] netlink: 'syz.4.1858': attribute type 2 has an invalid length. [ 973.256621][T13187] tipc: Enabling of bearer rejected, already enabled [ 973.605712][T13181] vlan3: entered promiscuous mode [ 973.629155][T13181] vlan3: entered allmulticast mode [ 973.638753][T13181] hsr_slave_1: entered allmulticast mode [ 979.793498][T13218] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 979.812852][T13218] netlink: 'syz.1.1868': attribute type 2 has an invalid length. [ 979.868828][T13218] tipc: New replicast peer: 255.255.255.255 [ 980.017772][T13218] tipc: Enabled bearer , priority 10 [ 981.068995][T13230] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 981.077318][T13230] netlink: 'syz.0.1863': attribute type 2 has an invalid length. [ 981.099057][T13230] tipc: Enabling of bearer rejected, already enabled [ 982.748066][T13239] loop0: detected capacity change from 0 to 16 [ 983.483308][T13239] erofs: (device loop0): mounted with root inode @ nid 36. [ 984.937179][T13251] loop0: detected capacity change from 0 to 128 [ 986.283426][T13257] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 986.296040][T13257] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 986.318652][T13257] tipc: Enabling of bearer rejected, already enabled [ 993.296049][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.340006][T13311] dummy0: Caught tx_queue_len zero misconfig [ 995.165698][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.372366][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 997.596739][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1898'. [ 998.544550][T13338] syzkaller0: entered promiscuous mode [ 998.550199][T13338] syzkaller0: entered allmulticast mode [ 998.572810][T13338] tipc: Enabled bearer , priority 0 [ 998.619205][T13338] tipc: Resetting bearer [ 998.638704][T13337] tipc: Resetting bearer [ 998.714124][T13337] tipc: Disabling bearer [ 998.767300][T13340] SET target dimension over the limit! [ 999.786702][T13348] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1002.112779][T13360] overlayfs: failed to clone upperpath [ 1007.188686][ T27] audit: type=1326 audit(1789189316.362:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1007.443255][ T27] audit: type=1326 audit(1789189316.362:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1007.502810][ T27] audit: type=1326 audit(1789189316.362:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1007.568965][ T27] audit: type=1326 audit(1789189316.372:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2dd95e98e code=0x7ffc0000 [ 1007.594986][ T27] audit: type=1326 audit(1789189316.372:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd2dd99f457 code=0x7ffc0000 [ 1007.641708][ T27] audit: type=1326 audit(1789189316.372:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1007.716285][T13411] overlayfs: failed to clone upperpath [ 1008.108955][ T27] audit: type=1326 audit(1789189316.382:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd2dd99f457 code=0x7ffc0000 [ 1008.133687][ T27] audit: type=1326 audit(1789189316.382:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd2dd95e98e code=0x7ffc0000 [ 1008.544650][ T27] audit: type=1326 audit(1789189316.382:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1008.578439][ T27] audit: type=1326 audit(1789189316.382:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.4.1918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1013.053363][T13429] syz.0.1925: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1013.070983][T13429] CPU: 1 PID: 13429 Comm: syz.0.1925 Not tainted syzkaller #0 [ 1013.078537][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.088647][T13429] Call Trace: [ 1013.091978][T13429] [ 1013.094958][T13429] dump_stack_lvl+0x18c/0x250 [ 1013.099700][T13429] ? show_regs_print_info+0x20/0x20 [ 1013.104952][T13429] ? load_image+0x420/0x420 [ 1013.109514][T13429] ? __rcu_read_unlock+0x7c/0xd0 [ 1013.114503][T13429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1013.120980][T13429] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1013.127541][T13429] warn_alloc+0x246/0x340 [ 1013.132001][T13429] ? zone_watermark_ok_safe+0x230/0x230 [ 1013.137624][T13429] ? asan.module_dtor+0x20/0x20 [ 1013.142623][T13429] ? mark_lock+0x94/0x320 [ 1013.147048][T13429] __vmalloc_node_range+0x129/0x1320 [ 1013.152418][T13429] ? mark_lock+0x94/0x320 [ 1013.156817][T13429] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1013.162866][T13429] ? preempt_schedule_notrace+0x110/0x110 [ 1013.168647][T13429] ? lock_chain_count+0x20/0x20 [ 1013.173568][T13429] ? free_vm_area+0x50/0x50 [ 1013.178129][T13429] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1013.183825][T13429] ? lockdep_hardirqs_on+0x98/0x150 [ 1013.189089][T13429] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1013.194812][T13429] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1013.200809][T13429] vmalloc+0x79/0x90 [ 1013.204769][T13429] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1013.210722][T13429] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1013.216419][T13429] dvb_demux_do_ioctl+0x454/0x530 [ 1013.221640][T13429] dvb_usercopy+0x195/0x2b0 [ 1013.226203][T13429] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1013.231808][T13429] ? dvb_generic_ioctl+0xb0/0xb0 [ 1013.236857][T13429] ? dvb_demux_poll+0x210/0x210 [ 1013.241781][T13429] dvb_demux_ioctl+0x29/0x30 [ 1013.246444][T13429] __se_sys_ioctl+0xfd/0x170 [ 1013.251139][T13429] do_syscall_64+0x55/0xb0 [ 1013.255648][T13429] ? clear_bhb_loop+0x40/0x90 [ 1013.260391][T13429] ? clear_bhb_loop+0x40/0x90 [ 1013.265132][T13429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.271176][T13429] RIP: 0033:0x7f394a79e159 [ 1013.275653][T13429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.295321][T13429] RSP: 002b:00007f394b735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.303805][T13429] RAX: ffffffffffffffda RBX: 00007f394aa26090 RCX: 00007f394a79e159 [ 1013.311839][T13429] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 1013.319909][T13429] RBP: 00007f394a83503b R08: 0000000000000000 R09: 0000000000000000 [ 1013.327965][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.336158][T13429] R13: 00007f394aa26128 R14: 00007f394aa26090 R15: 00007ffdf5ba64d8 [ 1013.344200][T13429] [ 1013.369419][T13429] Mem-Info: [ 1013.372793][T13429] active_anon:28137 inactive_anon:67723 isolated_anon:0 [ 1013.372793][T13429] active_file:21099 inactive_file:37816 isolated_file:0 [ 1013.372793][T13429] unevictable:768 dirty:325 writeback:0 [ 1013.372793][T13429] slab_reclaimable:11930 slab_unreclaimable:100414 [ 1013.372793][T13429] mapped:30969 shmem:89719 pagetables:963 [ 1013.372793][T13429] sec_pagetables:0 bounce:0 [ 1013.372793][T13429] kernel_misc_reclaimable:0 [ 1013.372793][T13429] free:1239570 free_pcp:13144 free_cma:0 [ 1013.419528][T13429] Node 0 active_anon:112548kB inactive_anon:270892kB active_file:84384kB inactive_file:151072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123876kB dirty:1300kB writeback:0kB shmem:357340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11780kB pagetables:3852kB sec_pagetables:0kB all_unreclaimable? no [ 1013.453114][T13429] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1013.483921][T13429] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.511639][T13429] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1013.517802][T13429] Node 0 DMA32 free:1054588kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:112508kB inactive_anon:270892kB active_file:83752kB inactive_file:150872kB unevictable:1536kB writepending:1300kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:35968kB local_pcp:15476kB free_cma:0kB [ 1013.549590][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 1013.554696][T13429] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:632kB inactive_file:200kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.581978][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 1013.587159][T13429] Node 1 Normal free:3888332kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:8032kB free_cma:0kB [ 1013.617855][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 1013.623030][T13429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1013.636741][T13429] Node 0 DMA32: 217*4kB (UM) 525*8kB (UME) 243*16kB (UM) 464*32kB (UME) 202*64kB (UM) 28*128kB (UME) 70*256kB (UME) 14*512kB (UME) 4*1024kB (UM) 7*2048kB (UM) 237*4096kB (UM) = 1054588kB [ 1013.656576][T13429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1013.678772][T13429] Node 1 Normal: 301*4kB (UME) 57*8kB (UME) 37*16kB (UME) 156*32kB (UME) 42*64kB (UME) 6*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3888332kB [ 1013.698414][T13429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.708498][T13429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1013.718062][T13429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.727844][T13429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1013.979357][T13429] 146946 total pagecache pages [ 1013.984303][T13429] 12 pages in swap cache [ 1013.989665][T13429] Free swap = 122588kB [ 1013.993935][T13429] Total swap = 124996kB [ 1013.998171][T13429] 2097051 pages RAM [ 1014.006822][T13429] 0 pages HighMem/MovableOnly [ 1014.011817][T13429] 416960 pages reserved [ 1014.016253][T13429] 0 pages cma reserved [ 1017.553396][T13448] SET target dimension over the limit! [ 1017.939543][T13450] overlayfs: failed to clone upperpath [ 1025.953559][T13496] loop0: detected capacity change from 0 to 8 [ 1026.762020][T13496] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1026.799276][T13496] SQUASHFS error: Failed to read block 0x9b: -5 [ 1026.805659][T13496] SQUASHFS error: Unable to read metadata cache entry [99] [ 1026.813888][T13496] SQUASHFS error: Unable to read inode 0x127 [ 1027.291118][T13496] loop0: detected capacity change from 0 to 4096 [ 1027.350297][T13511] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.893180][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1028.893199][ T27] audit: type=1800 audit(1789189338.122:438): pid=13523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1947" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 1029.573093][T13526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.588897][T13526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.599320][T13526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.616476][T13526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.625171][T13526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1029.634661][T13526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1029.737050][T13525] wg1 speed is unknown, defaulting to 1000 [ 1030.355258][T13537] xt_hashlimit: size too large, truncated to 1048576 [ 1030.362545][T13537] xt_hashlimit: max too large, truncated to 1048576 [ 1030.369648][T13537] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1031.106239][T13534] ALSA: mixer_oss: invalid OSS volume '' [ 1031.118154][T13534] SET target dimension over the limit! [ 1031.677482][T13525] chnl_net:caif_netlink_parms(): no params data found [ 1031.688515][ T5787] Bluetooth: hci4: command tx timeout [ 1031.748450][T11344] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1031.950776][T11344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1031.974849][T11344] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1031.991688][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.999067][T11344] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1032.007453][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.014735][T11344] usb 5-1: Product: syz [ 1032.019969][T11344] usb 5-1: Manufacturer: syz [ 1032.025053][T13525] bridge_slave_0: entered allmulticast mode [ 1032.031609][T11344] usb 5-1: SerialNumber: syz [ 1032.038776][T13525] bridge_slave_0: entered promiscuous mode [ 1032.048182][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.059058][T11344] usb 5-1: config 0 descriptor?? [ 1032.064194][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.072573][T13548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1032.082035][T13525] bridge_slave_1: entered allmulticast mode [ 1032.093060][T13525] bridge_slave_1: entered promiscuous mode [ 1032.191969][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.218852][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.336261][T13525] team0: Port device team_slave_0 added [ 1032.372033][T13525] team0: Port device team_slave_1 added [ 1032.450945][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.460064][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.505214][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.593084][T13564] SET target dimension over the limit! [ 1033.768377][ T5787] Bluetooth: hci4: command tx timeout [ 1035.376275][ T7942] usb 5-1: USB disconnect, device number 12 [ 1035.384101][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.407948][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.465095][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.623288][ T5787] Bluetooth: hci4: command tx timeout [ 1036.795794][T13573] loop4: detected capacity change from 0 to 2048 [ 1036.866052][T13573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.116075][T13525] hsr_slave_0: entered promiscuous mode [ 1037.742634][T13525] hsr_slave_1: entered promiscuous mode [ 1037.880556][T10592] tipc: Disabling bearer [ 1037.948812][T10592] tipc: Disabling bearer [ 1037.979694][T10592] tipc: Disabling bearer [ 1038.022583][T10592] tipc: Left network mode [ 1038.648374][ T5787] Bluetooth: hci4: command tx timeout [ 1042.761332][T10592] team0: Port device xfrm0 removed [ 1042.963341][T13525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1042.975221][T13525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1043.000597][T13525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1043.011685][T13525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1043.307951][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.332277][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.345354][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.352560][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.405234][ T2886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.412461][ T2886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.774333][T10592] hsr_slave_0: left promiscuous mode [ 1043.803742][T10592] veth1_macvtap: left promiscuous mode [ 1043.809894][T10592] veth0_macvtap: left promiscuous mode [ 1043.817347][T10592] veth1_vlan: left promiscuous mode [ 1043.825164][T10592] veth0_vlan: left promiscuous mode [ 1044.188130][T10592] bond5 (unregistering): Released all slaves [ 1044.369256][T10592] bond4 (unregistering): Released all slaves [ 1044.654508][T10592] bond3 (unregistering): Released all slaves [ 1044.854848][T10592] bond2 (unregistering): Released all slaves [ 1044.898490][T10592] bond1 (unregistering): Released all slaves [ 1046.232607][T10592] bond0 (unregistering): Released all slaves [ 1046.454943][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.713225][T10592] IPVS: stop unused estimator thread 0... [ 1046.832114][T13525] veth0_vlan: entered promiscuous mode [ 1046.848047][T13525] veth1_vlan: entered promiscuous mode [ 1046.885311][T13525] veth0_macvtap: entered promiscuous mode [ 1046.897901][T13525] veth1_macvtap: entered promiscuous mode [ 1046.925172][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.936330][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.948409][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.964528][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.976169][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.988497][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.000929][T13525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.010036][T13525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.019576][T13525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.030576][T13525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.123545][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.136122][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.169422][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.177298][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.196387][T13623] ALSA: mixer_oss: invalid OSS volume '' [ 1049.210001][T13623] Cannot find add_set index 0 as target [ 1052.133372][T13639] xt_hashlimit: size too large, truncated to 1048576 [ 1052.140536][T13639] xt_hashlimit: max too large, truncated to 1048576 [ 1052.147315][T13639] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1053.042356][ T5713] IPVS: starting estimator thread 0... [ 1053.178573][T13645] IPVS: using max 16 ests per chain, 38400 per kthread [ 1053.491029][T13655] tipc: Enabling of bearer rejected, already enabled [ 1053.934824][T13657] bridge_slave_0: left allmulticast mode [ 1053.940755][T13657] bridge_slave_0: left promiscuous mode [ 1053.946650][T13657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.148519][T13657] bridge_slave_1: left allmulticast mode [ 1054.155109][T13657] bridge_slave_1: left promiscuous mode [ 1054.161269][T13657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.429807][T13657] bond0: (slave bond_slave_0): Releasing backup interface [ 1054.493471][T13657] bond0: (slave bond_slave_1): Releasing backup interface [ 1054.669825][T13657] team0: Port device team_slave_0 removed [ 1054.714165][T13657] team0: Port device team_slave_1 removed [ 1054.721304][T13657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.735566][T13657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.744332][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.751417][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.780581][T13657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.788129][T13657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.140913][T13669] Invalid ELF header magic: != ELF [ 1058.793305][T13683] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1982'. [ 1060.633140][T13692] xt_hashlimit: size too large, truncated to 1048576 [ 1060.640256][T13692] xt_hashlimit: max too large, truncated to 1048576 [ 1060.646938][T13692] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1062.591163][T13699] loop4: detected capacity change from 0 to 512 [ 1062.622498][T13699] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1981: corrupted in-inode xattr: invalid ea_ino [ 1062.646503][T13699] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1981: couldn't read orphan inode 15 (err -117) [ 1062.690575][T13699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.746281][T13697] tipc: Enabling of bearer rejected, already enabled [ 1062.882965][T13705] loop5: detected capacity change from 0 to 1024 [ 1063.048995][T13705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.777415][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.026427][T13525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.091267][T13718] loop4: detected capacity change from 0 to 8 [ 1065.142851][T13718] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1065.183522][T13718] SQUASHFS error: Failed to read block 0x9b: -5 [ 1065.212070][T13718] SQUASHFS error: Unable to read metadata cache entry [99] [ 1065.241759][T13718] SQUASHFS error: Unable to read inode 0x127 [ 1065.671202][T13718] loop4: detected capacity change from 0 to 4096 [ 1065.704293][T13720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.976702][T13733] CIFS: Attempting to mount //127.0.0.1/share [ 1067.993748][T13733] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1068.001828][T13733] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1068.121193][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1068.645192][T13739] xt_policy: output policy not valid in PREROUTING and INPUT [ 1069.323152][ T56] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1069.358365][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.438640][ T56] usb 6-1: USB2VGA dongle found at address 2 [ 1069.466236][ T56] usb 6-1: Allocated 8 output buffers [ 1071.338658][ T56] usb 6-1: Failed to early initialize device [ 1071.353355][ T56] usb 6-1: USB disconnect, device number 2 [ 1074.821009][T13770] xt_hashlimit: size too large, truncated to 1048576 [ 1074.827934][T13770] xt_hashlimit: max too large, truncated to 1048576 [ 1074.834796][T13770] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1078.835107][T13784] tipc: Enabling of bearer rejected, already enabled [ 1079.178703][T13791] printk: console [ttyGS0] disabled [ 1079.378215][ T3067] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1080.096189][ T3067] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1080.127948][T13801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.141328][ T3067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.150537][ T3067] usb 1-1: Product: syz [ 1080.154760][ T3067] usb 1-1: Manufacturer: syz [ 1080.159869][ T3067] usb 1-1: SerialNumber: syz [ 1080.436194][ T3067] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1080.450478][ T3067] usb 1-1: unit 4 not found! [ 1080.674641][ T3067] usb 1-1: USB disconnect, device number 7 [ 1081.442314][T13809] pim6reg: entered allmulticast mode [ 1081.561807][T13794] udevd[13794]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.351240][T13817] xt_policy: output policy not valid in PREROUTING and INPUT [ 1082.993086][T13827] kernel profiling enabled (shift: 5) [ 1084.540319][T13830] tipc: Enabling of bearer rejected, already enabled [ 1085.462894][T13842] loop0: detected capacity change from 0 to 128 [ 1088.643543][T13871] netlink: 'syz.5.2027': attribute type 29 has an invalid length. [ 1088.669343][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 1088.725372][T13871] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1090.035893][T13879] tipc: Enabling of bearer rejected, already enabled [ 1090.202416][T13883] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1095.481009][T13905] netlink: 'syz.5.2037': attribute type 4 has an invalid length. [ 1095.488968][T13905] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2037'. [ 1096.925804][T13911] loop5: detected capacity change from 0 to 8 [ 1096.976769][T13911] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1097.024508][T13911] SQUASHFS error: Failed to read block 0x9b: -5 [ 1097.039638][T13911] SQUASHFS error: Unable to read metadata cache entry [99] [ 1097.059273][T13911] SQUASHFS error: Unable to read inode 0x127 [ 1097.375147][T13911] loop5: detected capacity change from 0 to 4096 [ 1097.469146][T13915] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.914648][T13918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1101.549486][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.125108][T13940] loop4: detected capacity change from 0 to 1024 [ 1103.135404][T13940] EXT4-fs (loop4): filesystem is read-only [ 1103.142936][T13940] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 1280 [ 1104.555359][T13950] loop5: detected capacity change from 0 to 2048 [ 1104.591399][T13950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.343029][T13974] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 1109.354149][T13974] netlink: 'syz.4.2053': attribute type 2 has an invalid length. [ 1116.450116][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.463347][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.398379][T14025] loop6: detected capacity change from 0 to 6 [ 1117.509219][T14026] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1117.814206][T14025] Dev loop6: unable to read RDB block 6 [ 1117.819998][T14025] loop6: unable to read partition table [ 1117.825909][T14025] loop6: partition table beyond EOD, truncated [ 1117.832244][T14025] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1120.225544][T14035] loop5: detected capacity change from 0 to 2048 [ 1120.321641][T14035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.618849][T14050] loop5: detected capacity change from 0 to 512 [ 1122.697294][T14050] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.2071: corrupted in-inode xattr: invalid ea_ino [ 1122.737946][T14050] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2071: couldn't read orphan inode 15 (err -117) [ 1122.753770][T14050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.565971][T14060] loop0: detected capacity change from 0 to 256 [ 1123.952763][T14060] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1123.965422][T14060] exFAT-fs (loop0): failed to load alloc-bitmap [ 1123.972112][T14060] exFAT-fs (loop0): failed to recognize exfat type [ 1124.044576][T13525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.693894][T14071] loop5: detected capacity change from 0 to 8 [ 1124.845544][T14071] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1125.947250][T14071] SQUASHFS error: Failed to read block 0x9b: -5 [ 1125.987891][T14071] SQUASHFS error: Unable to read metadata cache entry [99] [ 1126.029283][T14071] SQUASHFS error: Unable to read inode 0x127 [ 1126.363984][T14071] loop5: detected capacity change from 0 to 4096 [ 1126.439521][T14077] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.734495][T14088] loop6: detected capacity change from 0 to 6 [ 1127.761294][T14088] Dev loop6: unable to read RDB block 6 [ 1127.766961][T14088] loop6: unable to read partition table [ 1127.773066][T14088] loop6: partition table beyond EOD, truncated [ 1127.779360][T14088] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.018620][T14083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1134.849969][T14109] loop5: detected capacity change from 0 to 256 [ 1134.939773][T14109] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1134.953809][T14109] exFAT-fs (loop5): failed to load alloc-bitmap [ 1134.960597][T14109] exFAT-fs (loop5): failed to recognize exfat type [ 1135.588547][T13971] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1137.070478][T14115] kAFS: Can only specify source 'none' with -o dyn [ 1137.614373][T14121] i2c i2c-0: new_device: Missing parameters [ 1138.280141][T14123] veth2: entered allmulticast mode [ 1138.500585][T14126] loop5: detected capacity change from 0 to 8 [ 1138.528009][T14126] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1138.552589][T14126] SQUASHFS error: Failed to read block 0x9b: -5 [ 1138.641661][T14126] SQUASHFS error: Unable to read metadata cache entry [99] [ 1138.675255][T14126] SQUASHFS error: Unable to read inode 0x127 [ 1139.225657][T14131] loop0: detected capacity change from 0 to 512 [ 1139.446574][T14126] loop5: detected capacity change from 0 to 4096 [ 1139.602880][T14135] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1139.612517][T14131] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.2084: corrupted in-inode xattr: invalid ea_ino [ 1139.641447][T14131] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2084: couldn't read orphan inode 15 (err -117) [ 1139.675501][T14131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.544913][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.491101][T14149] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1142.600294][T14152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1142.641518][T14152] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 1142.684938][T14152] bond5: (slave gre1): Error -95 calling set_mac_address [ 1142.872594][T14149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1143.580520][T14161] netlink: 34 bytes leftover after parsing attributes in process `syz.5.2096'. [ 1144.530386][T14149] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1145.065177][T14153] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1145.172912][T14153] bond5 (unregistering): Released all slaves [ 1145.218580][T13667] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1145.735185][T13667] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1145.763223][T13667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.783258][T13667] usb 1-1: Product: syz [ 1145.791798][T13667] usb 1-1: Manufacturer: syz [ 1145.810994][T13667] usb 1-1: SerialNumber: syz [ 1146.047077][T14172] loop4: detected capacity change from 0 to 1024 [ 1146.168180][T14172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.249583][T13667] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1146.256786][T13667] usb 1-1: unit 4 not found! [ 1146.285515][T13667] usb 1-1: USB disconnect, device number 8 [ 1147.262789][T14040] udevd[14040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.327683][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.989077][T14194] loop4: detected capacity change from 0 to 256 [ 1150.591202][T14194] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1150.603780][T14194] exFAT-fs (loop4): failed to load alloc-bitmap [ 1150.610234][T14194] exFAT-fs (loop4): failed to recognize exfat type [ 1154.291041][T14223] 9pnet_virtio: no channels available for device syz [ 1155.573604][T14232] IPVS: length: 170 != 24 [ 1155.586078][T14232] infiniband syz2: set active [ 1155.689893][T14227] kAFS: Can only specify source 'none' with -o dyn [ 1156.208411][T14232] team0: Port device xfrm0 removed [ 1156.304352][ T56] wg1 speed is unknown, defaulting to 1000 [ 1156.361937][T10592] tipc: Resetting bearer [ 1161.930530][T14276] loop4: detected capacity change from 0 to 4096 [ 1162.006239][T14276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.877304][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.429792][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'. [ 1165.890937][T14303] loop4: detected capacity change from 0 to 128 [ 1167.968058][T14329] loop5: detected capacity change from 0 to 256 [ 1168.059053][T14329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1168.075455][T14329] exFAT-fs (loop5): failed to load alloc-bitmap [ 1168.082253][T14329] exFAT-fs (loop5): failed to recognize exfat type [ 1168.703708][T14333] loop5: detected capacity change from 0 to 128 [ 1168.725401][T14333] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1168.903443][T14333] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1168.918169][T14333] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.295751][T14333] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1172.967366][T13525] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1173.540464][T14365] binder: 14363:14365 ioctl c00c6211 0 returned -14 [ 1174.295715][T14372] loop4: detected capacity change from 0 to 256 [ 1174.988047][T14372] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 1175.000825][T14372] exFAT-fs (loop4): failed to load alloc-bitmap [ 1175.007209][T14372] exFAT-fs (loop4): failed to recognize exfat type [ 1175.155624][T14377] loop0: detected capacity change from 0 to 2048 [ 1175.353756][T14377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1176.665272][T14390] sctp: [Deprecated]: syz.5.2147 (pid 14390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.665272][T14390] Use struct sctp_sack_info instead [ 1177.629100][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.635706][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.136060][T14401] loop4: detected capacity change from 0 to 128 [ 1180.171596][T14401] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1180.187680][T14401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1180.380170][T14401] ext4 filesystem being mounted at /544/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.108087][T14417] xt_TCPMSS: Only works on TCP SYN packets [ 1184.371497][ T6082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1191.422373][ T5787] Bluetooth: hci0: ACL packet for unknown connection handle 1737 [ 1192.023576][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1193.051051][T14461] loop4: detected capacity change from 0 to 2048 [ 1193.133557][T14463] veth0_vlan: left promiscuous mode [ 1193.309837][T14461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1195.119407][T14469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1196.069597][T14472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1196.106852][T14472] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1196.194909][T14472] bond6: (slave gre1): Error -95 calling set_mac_address [ 1196.249413][T13526] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1196.279278][T13526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1196.298458][T13526] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1196.309273][T13526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1196.319168][T13526] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1196.326619][T13526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1196.428826][T14473] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1196.449627][T14482] wg1 speed is unknown, defaulting to 1000 [ 1198.121436][T14477] bond6 (unregistering): Released all slaves [ 1198.410088][ T5787] Bluetooth: hci3: command tx timeout [ 1199.722730][T14500] binder: 14498:14500 ioctl c0306201 0 returned -14 [ 1199.861170][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.218228][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.518851][ T5787] Bluetooth: hci3: command tx timeout [ 1200.870886][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.903659][T14482] chnl_net:caif_netlink_parms(): no params data found [ 1201.024671][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.092258][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.110735][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.118096][T14482] bridge_slave_0: entered allmulticast mode [ 1201.150151][T14482] bridge_slave_0: entered promiscuous mode [ 1201.165237][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.175045][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.188483][T14482] bridge_slave_1: entered allmulticast mode [ 1201.196504][T14482] bridge_slave_1: entered promiscuous mode [ 1201.792507][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.812440][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.904495][T14482] team0: Port device team_slave_0 added [ 1201.950059][T14482] team0: Port device team_slave_1 added [ 1201.987830][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.995302][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.022338][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.071654][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.088644][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.118272][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.286108][T14482] hsr_slave_0: entered promiscuous mode [ 1202.312832][T14482] hsr_slave_1: entered promiscuous mode [ 1202.339189][T14482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1202.346829][T14482] Cannot create hsr debugfs directory [ 1202.615900][ T5787] Bluetooth: hci3: command tx timeout [ 1204.659739][ T5787] Bluetooth: hci3: command tx timeout [ 1204.757406][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1205.734203][T14482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1207.222919][T14561] loop0: detected capacity change from 0 to 512 [ 1207.313340][T14561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1207.385039][T14561] System zones: 1-12 [ 1207.426027][T14561] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.2184: missing EA_INODE flag [ 1207.458780][T14482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1207.472630][T14561] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2184: error while reading EA inode 12 err=-117 [ 1208.009372][T14561] EXT4-fs (loop0): 1 orphan inode deleted [ 1208.017173][T14561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.208348][T14482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1208.533361][T14482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1209.550123][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.009197][T14593] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1213.053725][T14482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.161507][T14482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.260035][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.267789][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.278118][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.285375][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.541927][ T70] hsr_slave_0: left promiscuous mode [ 1213.549703][ T70] hsr_slave_1: left promiscuous mode [ 1213.592266][ T70] veth1_macvtap: left promiscuous mode [ 1213.597851][ T70] veth0_macvtap: left promiscuous mode [ 1213.689043][ T70] veth1_vlan: left promiscuous mode [ 1213.694499][ T70] veth0_vlan: left promiscuous mode [ 1214.436095][ T70] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1215.585190][ T70] bond0 (unregistering): Released all slaves [ 1215.955975][T14482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.136980][ T70] IPVS: stop unused estimator thread 0... [ 1216.342704][T14482] veth0_vlan: entered promiscuous mode [ 1216.357018][T14482] veth1_vlan: entered promiscuous mode [ 1216.387909][T14482] veth0_macvtap: entered promiscuous mode [ 1216.400245][T14482] veth1_macvtap: entered promiscuous mode [ 1216.419461][T14482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.430208][T14482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.443584][T14482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.455183][T14482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1216.466639][T14482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.479115][T14482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.498923][T14482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.507681][T14482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.516777][T14482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.526810][T14482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.622481][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.636872][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.666178][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.675637][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.767225][T14626] binder: 14625:14626 ioctl 4018620d 0 returned -22 [ 1224.086236][T14673] syz.0.2191: attempt to access beyond end of device [ 1224.086236][T14673] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1229.163738][T14698] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1229.172892][T14698] CPU: 1 PID: 14698 Comm: syz.0.2201 Not tainted syzkaller #0 [ 1229.180496][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1229.190591][T14698] Call Trace: [ 1229.193911][T14698] [ 1229.196969][T14698] dump_stack_lvl+0x18c/0x250 [ 1229.201740][T14698] ? show_regs_print_info+0x20/0x20 [ 1229.206987][T14698] ? load_image+0x420/0x420 [ 1229.211548][T14698] sysfs_create_dir_ns+0x26e/0x2a0 [ 1229.216746][T14698] ? __lock_acquire+0x7d80/0x7d80 [ 1229.221822][T14698] ? sysfs_warn_dup+0xa0/0xa0 [ 1229.226545][T14698] ? rcu_is_watching+0x15/0xb0 [ 1229.231373][T14698] ? do_raw_spin_unlock+0x121/0x230 [ 1229.236630][T14698] kobject_add_internal+0x617/0xc90 [ 1229.241927][T14698] kobject_add+0x164/0x240 [ 1229.246407][T14698] ? kobject_init+0x1d0/0x1d0 [ 1229.251139][T14698] ? get_device_parent+0x366/0x390 [ 1229.256338][T14698] device_add+0x3fa/0xc40 [ 1229.260763][T14698] tty_register_device_attr+0x425/0x950 [ 1229.266444][T14698] ? tty_register_device+0x30/0x30 [ 1229.271617][T14698] ? tty_port_init+0x132/0x1a0 [ 1229.276525][T14698] ? gsm_dlci_alloc+0x32a/0x630 [ 1229.281449][T14698] gsm_activate_mux+0x110/0x2a0 [ 1229.286397][T14698] gsmld_ioctl+0x12ca/0x1900 [ 1229.291065][T14698] ? gsmld_write+0x120/0x120 [ 1229.295721][T14698] ? __init_ldsem+0x150/0x150 [ 1229.300466][T14698] ? __fget_files+0x28/0x460 [ 1229.305128][T14698] ? gsmld_write+0x120/0x120 [ 1229.309776][T14698] tty_ioctl+0x9b5/0xdc0 [ 1229.314074][T14698] ? tty_get_icount+0xb0/0xb0 [ 1229.318807][T14698] __se_sys_ioctl+0xfd/0x170 [ 1229.323490][T14698] do_syscall_64+0x55/0xb0 [ 1229.327959][T14698] ? clear_bhb_loop+0x40/0x90 [ 1229.332870][T14698] ? clear_bhb_loop+0x40/0x90 [ 1229.337600][T14698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1229.343544][T14698] RIP: 0033:0x7f394a79e159 [ 1229.348015][T14698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.367680][T14698] RSP: 002b:00007f394b714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.376158][T14698] RAX: ffffffffffffffda RBX: 00007f394aa26180 RCX: 00007f394a79e159 [ 1229.384352][T14698] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1229.392375][T14698] RBP: 00007f394a83503b R08: 0000000000000000 R09: 0000000000000000 [ 1229.400387][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.408403][T14698] R13: 00007f394aa26218 R14: 00007f394aa26180 R15: 00007ffdf5ba64d8 [ 1229.416437][T14698] [ 1229.420889][T14698] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1232.212168][T14705] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1237.571254][T14749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1239.052849][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.059281][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.543214][T14763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.564379][T14763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.587255][T14763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.602840][T14763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.197199][T14780] sctp: [Deprecated]: syz.4.2214 (pid 14780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.197199][T14780] Use struct sctp_sack_info instead [ 1244.424690][T14806] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1244.433388][T14806] CPU: 0 PID: 14806 Comm: syz.4.2220 Not tainted syzkaller #0 [ 1244.440907][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1244.451013][T14806] Call Trace: [ 1244.454347][T14806] [ 1244.457316][T14806] dump_stack_lvl+0x18c/0x250 [ 1244.462061][T14806] ? show_regs_print_info+0x20/0x20 [ 1244.467330][T14806] ? load_image+0x420/0x420 [ 1244.471903][T14806] sysfs_create_dir_ns+0x26e/0x2a0 [ 1244.477074][T14806] ? __lock_acquire+0x7d80/0x7d80 [ 1244.482160][T14806] ? sysfs_warn_dup+0xa0/0xa0 [ 1244.486885][T14806] ? rcu_is_watching+0x15/0xb0 [ 1244.491713][T14806] ? do_raw_spin_unlock+0x121/0x230 [ 1244.496971][T14806] kobject_add_internal+0x617/0xc90 [ 1244.502238][T14806] kobject_add+0x164/0x240 [ 1244.506721][T14806] ? kobject_init+0x1d0/0x1d0 [ 1244.511462][T14806] ? get_device_parent+0x366/0x390 [ 1244.516638][T14806] device_add+0x3fa/0xc40 [ 1244.521026][T14806] tty_register_device_attr+0x425/0x950 [ 1244.526677][T14806] ? tty_register_device+0x30/0x30 [ 1244.531942][T14806] ? tty_port_init+0x132/0x1a0 [ 1244.536754][T14806] ? gsm_dlci_alloc+0x32a/0x630 [ 1244.541660][T14806] ? __might_fault+0xaa/0x120 [ 1244.546388][T14806] gsm_activate_mux+0x110/0x2a0 [ 1244.551308][T14806] gsmld_ioctl+0x12ca/0x1900 [ 1244.556003][T14806] ? gsmld_write+0x120/0x120 [ 1244.560673][T14806] ? __init_ldsem+0x150/0x150 [ 1244.565411][T14806] ? __fget_files+0x28/0x460 [ 1244.570074][T14806] ? gsmld_write+0x120/0x120 [ 1244.574736][T14806] tty_ioctl+0x9b5/0xdc0 [ 1244.579039][T14806] ? tty_get_icount+0xb0/0xb0 [ 1244.583781][T14806] __se_sys_ioctl+0xfd/0x170 [ 1244.588462][T14806] do_syscall_64+0x55/0xb0 [ 1244.592952][T14806] ? clear_bhb_loop+0x40/0x90 [ 1244.597701][T14806] ? clear_bhb_loop+0x40/0x90 [ 1244.602441][T14806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.608384][T14806] RIP: 0033:0x7fd2dd99e159 [ 1244.612851][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.632520][T14806] RSP: 002b:00007fd2de8ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.641176][T14806] RAX: ffffffffffffffda RBX: 00007fd2ddc26180 RCX: 00007fd2dd99e159 [ 1244.649210][T14806] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1244.657239][T14806] RBP: 00007fd2dda3503b R08: 0000000000000000 R09: 0000000000000000 [ 1244.665264][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.673291][T14806] R13: 00007fd2ddc26218 R14: 00007fd2ddc26180 R15: 00007ffd8b4c4a08 [ 1244.681342][T14806] [ 1244.685177][T14806] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1246.078965][T14807] loop6: detected capacity change from 0 to 512 [ 1246.847427][T14807] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1246.886846][T14807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 1246.895128][T14807] System zones: 1-12 [ 1246.899356][T14807] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1246.914655][T14807] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2219: bg 0: block 361: padding at end of block bitmap is not set [ 1246.942266][T14807] EXT4-fs (loop6): Remounting filesystem read-only [ 1246.949206][T14807] EXT4-fs (loop6): 1 truncate cleaned up [ 1246.956071][T14807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1247.116165][T14482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1248.546551][T14822] loop0: detected capacity change from 0 to 16 [ 1249.246759][T14822] erofs: (device loop0): mounted with root inode @ nid 36. [ 1249.294104][T14821] syz.0.2222: attempt to access beyond end of device [ 1249.294104][T14821] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1249.312622][T14821] trusted_key: syz.0.2222 sent an empty control message without MSG_MORE. [ 1251.836110][T14839] loop0: detected capacity change from 0 to 512 [ 1252.048447][T14839] EXT4-fs error (device loop0): ext4_quota_enable:7144: inode #4: comm syz.0.2224: casefold flag without casefold feature [ 1252.062332][T14839] EXT4-fs (loop0): Remounting filesystem read-only [ 1252.069705][T14839] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1252.086110][T14839] EXT4-fs (loop0): mount failed [ 1252.304091][T14700] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1254.428752][T13526] Bluetooth: hci3: command tx timeout [ 1257.326274][T14878] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1261.681989][T14897] netlink: 'syz.6.2238': attribute type 4 has an invalid length. [ 1268.455886][T14933] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 1268.455886][T14933] program syz.0.2237 not setting count and/or reply_len properly [ 1269.015899][T14930] syz.3.2239: attempt to access beyond end of device [ 1269.015899][T14930] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1269.073514][T14930] EXT4-fs (loop7): unable to read superblock [ 1271.171911][T14940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2248'. [ 1271.272600][T14940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2248'. [ 1272.467342][T14948] loop4: detected capacity change from 0 to 8 [ 1272.480132][T14948] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1272.488124][T14948] SQUASHFS error: Failed to read block 0x9b: -5 [ 1272.494506][T14948] SQUASHFS error: Unable to read metadata cache entry [99] [ 1272.501870][T14948] SQUASHFS error: Unable to read inode 0x127 [ 1272.808495][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 1278.335310][T14986] wg1 speed is unknown, defaulting to 1000 [ 1283.200840][T15017] kvm: kvm [15014]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1283.245161][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2249'. [ 1283.278614][T15020] loop4: detected capacity change from 0 to 164 [ 1284.049223][T15028] loop4: detected capacity change from 0 to 16 [ 1284.087608][T15028] erofs: (device loop4): mounted with root inode @ nid 36. [ 1284.122536][T15028] syz.4.2268: attempt to access beyond end of device [ 1284.122536][T15028] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1291.366261][T15059] netlink: 'syz.3.2276': attribute type 2 has an invalid length. [ 1291.414025][T15059] tipc: Enabling of bearer rejected, already enabled [ 1293.552925][T15072] loop4: detected capacity change from 0 to 2048 [ 1293.577328][T15072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.794974][T15079] bridge0: port 3(syz_tun) entered blocking state [ 1293.801869][T15079] bridge0: port 3(syz_tun) entered disabled state [ 1293.809077][T15079] syz_tun: entered allmulticast mode [ 1293.816099][T15079] syz_tun: entered promiscuous mode [ 1293.822223][T15079] bridge0: port 3(syz_tun) entered blocking state [ 1293.828846][T15079] bridge0: port 3(syz_tun) entered forwarding state [ 1293.969619][T15082] overlayfs: failed to clone upperpath [ 1296.096447][T15079] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1298.390857][ T27] audit: type=1326 audit(1789189606.392:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.434260][ T27] audit: type=1326 audit(1789189606.392:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.591907][ T27] audit: type=1326 audit(1789189606.422:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.642232][ T27] audit: type=1326 audit(1789189606.422:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.672723][ T27] audit: type=1326 audit(1789189606.422:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.702203][ T27] audit: type=1326 audit(1789189606.432:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.730853][ T27] audit: type=1326 audit(1789189606.432:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.765494][ T27] audit: type=1326 audit(1789189606.532:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.796070][ T27] audit: type=1326 audit(1789189606.532:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1298.824371][ T27] audit: type=1326 audit(1789189606.532:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.2290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2dd99e159 code=0x7ffc0000 [ 1300.730641][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.737642][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.394363][T15117] tipc: Resetting bearer [ 1303.401685][T15117] infiniband syz2: set active [ 1304.344088][ T9] wg1 speed is unknown, defaulting to 1000 [ 1304.476411][T15122] netlink: 'syz.6.2285': attribute type 1 has an invalid length. [ 1305.656851][T15122] tipc: Started in network mode [ 1305.666817][T15122] tipc: Node identity ac14140f, cluster identity 4711 [ 1305.688820][T15122] tipc: New replicast peer: 255.255.255.255 [ 1305.695760][T15122] tipc: Enabled bearer , priority 10 [ 1306.810710][ T5713] tipc: Node number set to 2886997007 [ 1309.662552][T15142] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1312.210685][T15155] loop6: detected capacity change from 0 to 128 [ 1314.135939][T15169] ip_tables: iptables: counters copy to user failed while replacing table [ 1315.383569][T15168] configfs-gadget.g1 gadget.0: HOST MAC 96:16:46:d0:49:19 [ 1315.420351][T15168] configfs-gadget.g1 gadget.0: MAC ae:4a:6e:30:0f:c2 [ 1316.167754][T15190] netlink: 'syz.0.2303': attribute type 4 has an invalid length. [ 1316.176018][T15190] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2303'. [ 1319.220375][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1319.923180][T15222] netlink: 'syz.6.2302': attribute type 1 has an invalid length. [ 1319.945742][T15222] tipc: Enabling of bearer rejected, already enabled [ 1321.408907][T15231] loop0: detected capacity change from 0 to 2048 [ 1322.959004][T15231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.059604][T15247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1323.116240][T15235] kvm: kvm [15234]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1323.128613][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 1323.185115][T15244] loop6: detected capacity change from 0 to 164 [ 1323.741337][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'. [ 1323.833599][T15252] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 1323.888484][T15252] tipc: Enabling of bearer rejected, already enabled [ 1323.905668][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.166587][T15257] loop6: detected capacity change from 0 to 4096 [ 1326.747008][T15274] lo: entered allmulticast mode [ 1326.765168][T15274] tunl0: entered allmulticast mode [ 1326.798103][T15274] gre0: entered allmulticast mode [ 1326.807651][T15274] gretap0: entered allmulticast mode [ 1326.839385][T15274] erspan0: entered allmulticast mode [ 1326.865691][T15274] ip_vti0: entered allmulticast mode [ 1326.874122][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2327'. [ 1326.885743][T15274] ip6_vti0: entered allmulticast mode [ 1326.915224][T15274] sit0: entered allmulticast mode [ 1326.936366][T15274] ip6tnl0: entered allmulticast mode [ 1326.965215][T15274] ip6gre0: entered allmulticast mode [ 1327.022005][T15274] syz_tun: left promiscuous mode [ 1327.400255][T15274] bridge0: port 3(syz_tun) entered disabled state [ 1327.559105][T15274] ip6gretap0: entered allmulticast mode [ 1329.182182][T15274] bridge0: entered allmulticast mode [ 1329.198397][T15274] vcan0: entered allmulticast mode [ 1329.204560][T15274] bond0: entered allmulticast mode [ 1329.210919][T15274] bond_slave_0: entered allmulticast mode [ 1329.216699][T15274] bond_slave_1: entered allmulticast mode [ 1329.223958][T15274] team0: entered allmulticast mode [ 1329.231855][T15274] team_slave_0: entered allmulticast mode [ 1329.237640][T15274] team_slave_1: entered allmulticast mode [ 1329.250006][T15274] dummy0: entered allmulticast mode [ 1329.256162][T15274] nlmon0: entered allmulticast mode [ 1329.263758][T15274] caif0: entered allmulticast mode [ 1329.270124][T15274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1329.602842][T15294] fuse: Bad value for 'fd' [ 1330.222665][T15298] netlink: 'syz.6.2332': attribute type 1 has an invalid length. [ 1330.234227][T15298] netlink: 'syz.6.2332': attribute type 2 has an invalid length. [ 1330.255257][T15298] tipc: Enabling of bearer rejected, already enabled [ 1332.177012][T15307] netlink: 'syz.6.2341': attribute type 1 has an invalid length. [ 1332.187943][T15307] netlink: 'syz.6.2341': attribute type 2 has an invalid length. [ 1332.203916][T15307] tipc: Enabling of bearer rejected, already enabled [ 1338.038890][T15335] 9pnet_fd: Insufficient options for proto=fd [ 1338.741450][T15340] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 1338.781834][T15340] netlink: 'syz.3.2345': attribute type 2 has an invalid length. [ 1338.826272][T15340] tipc: Enabling of bearer rejected, already enabled [ 1339.067628][T15348] tipc: Enabling of bearer rejected, already enabled [ 1344.097939][T15375] wg1 speed is unknown, defaulting to 1000 [ 1346.262001][T15387] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 1346.281405][T15387] netlink: 'syz.4.2355': attribute type 2 has an invalid length. [ 1346.319422][T15387] tipc: Enabling of bearer rejected, already enabled [ 1346.802639][T15389] loop4: detected capacity change from 0 to 32768 [ 1346.930047][T15389] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1347.186363][T15389] XFS (loop4): Ending clean mount [ 1347.216087][T15389] XFS (loop4): Quotacheck needed: Please wait. [ 1349.102980][T15389] XFS (loop4): Quotacheck: Done. [ 1349.361661][T15404] netlink: 'syz.0.2357': attribute type 1 has an invalid length. [ 1349.369608][T15404] netlink: 'syz.0.2357': attribute type 2 has an invalid length. [ 1349.384210][T15404] tipc: Enabling of bearer rejected, already enabled [ 1349.623867][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 1349.623909][ T27] audit: type=1800 audit(1789189658.862:510): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1350.041976][ T6082] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1352.525611][T15436] xt_policy: output policy not valid in PREROUTING and INPUT [ 1352.603832][T15431] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1358.218537][T15455] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 1359.468236][T15455] netlink: 'syz.3.2365': attribute type 2 has an invalid length. [ 1359.486797][T15458] tipc: Enabling of bearer rejected, already enabled [ 1359.784616][T15462] trusted_key: encrypted_key: insufficient parameters specified [ 1362.010071][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.016493][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.058853][T15479] sctp: [Deprecated]: syz.4.2375 (pid 15479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1362.058853][T15479] Use struct sctp_sack_info instead [ 1362.330835][T15483] 9pnet_virtio: no channels available for device syz [ 1362.448382][T13526] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1362.826146][T15492] tipc: Enabling of bearer rejected, already enabled [ 1363.854906][T15501] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 1363.862818][T15501] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 1369.848949][T15532] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 1369.877620][T15532] netlink: 'syz.4.2390': attribute type 2 has an invalid length. [ 1369.917503][T15532] tipc: Enabling of bearer rejected, already enabled [ 1372.058989][T15546] wg1 speed is unknown, defaulting to 1000 [ 1372.838979][T15562] md0: can't set backlog, no write mostly device available [ 1373.068384][T15565] wg1 speed is unknown, defaulting to 1000 [ 1374.240643][T15570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1376.167680][T15576] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 1376.175940][T15576] netlink: 'syz.0.2402': attribute type 2 has an invalid length. [ 1376.196250][T15576] tipc: Enabling of bearer rejected, already enabled [ 1380.330772][T15616] xt_policy: output policy not valid in PREROUTING and INPUT [ 1381.135691][T15618] netlink: 'syz.0.2413': attribute type 1 has an invalid length. [ 1381.144154][T15618] netlink: 'syz.0.2413': attribute type 2 has an invalid length. [ 1381.160363][T15618] tipc: Enabling of bearer rejected, already enabled [ 1383.931968][T15644] loop4: detected capacity change from 0 to 256 [ 1384.493426][T15644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1384.647394][T15644] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1384.806082][T15653] netlink: 'syz.6.2424': attribute type 1 has an invalid length. [ 1384.956940][T15653] netlink: 'syz.6.2424': attribute type 2 has an invalid length. [ 1385.267953][T15661] No such timeout policy "syz1" [ 1385.714480][T15663] xt_policy: output policy not valid in PREROUTING and INPUT [ 1386.074037][T15653] tipc: Enabling of bearer rejected, already enabled [ 1388.179264][T15675] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1392.645443][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 1393.293985][T15697] netlink: 'syz.6.2436': attribute type 1 has an invalid length. [ 1393.335105][T15697] netlink: 'syz.6.2436': attribute type 2 has an invalid length. [ 1393.694556][T15697] tipc: Enabling of bearer rejected, already enabled [ 1397.389225][T15719] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 1398.105771][T15730] loop4: detected capacity change from 0 to 1024 [ 1398.202875][T15730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.831492][ T27] audit: type=1800 audit(1789189707.852:511): pid=15738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2443" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1399.139394][ T27] audit: type=1800 audit(1789189707.862:512): pid=15738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2443" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1399.177187][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.199575][T15741] overlayfs: failed to clone upperpath [ 1400.551698][T15747] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 1400.578568][T15747] netlink: 'syz.4.2447': attribute type 2 has an invalid length. [ 1400.721709][T15747] tipc: Enabling of bearer rejected, already enabled [ 1401.347407][T15751] wg1 speed is unknown, defaulting to 1000 [ 1402.021310][T15762] xt_policy: output policy not valid in PREROUTING and INPUT [ 1404.006085][T15773] loop4: detected capacity change from 0 to 128 [ 1404.439473][T15777] xt_connbytes: Forcing CT accounting to be enabled [ 1404.446276][T15777] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1404.458618][T15777] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1407.017348][T15790] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 1407.035443][T15790] netlink: 'syz.3.2459': attribute type 2 has an invalid length. [ 1408.738590][T15790] tipc: Enabling of bearer rejected, already enabled [ 1410.567909][T15811] CIFS mount error: No usable UNC path provided in device string! [ 1410.567909][T15811] [ 1410.578569][T15811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1419.590764][T15858] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2473'. [ 1424.647018][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.669285][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.429232][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1426.696541][T15897] kAFS: No cell specified [ 1427.999694][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1428.018428][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1428.031767][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1428.039933][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1428.047646][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1428.061141][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1428.122005][T15899] wg1 speed is unknown, defaulting to 1000 [ 1428.482011][T15899] chnl_net:caif_netlink_parms(): no params data found [ 1428.622323][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.632321][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.641710][T15899] bridge_slave_0: entered allmulticast mode [ 1428.652599][T15899] bridge_slave_0: entered promiscuous mode [ 1428.663702][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.671483][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.680138][T15899] bridge_slave_1: entered allmulticast mode [ 1428.691091][T15899] bridge_slave_1: entered promiscuous mode [ 1428.734244][T15899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.764010][T15899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.835727][T15899] team0: Port device team_slave_0 added [ 1428.859925][T15899] team0: Port device team_slave_1 added [ 1428.941538][T15899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.948825][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.975308][T15899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.989043][T15899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.998253][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.028592][T15899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.173912][T15899] hsr_slave_0: entered promiscuous mode [ 1429.180519][T15899] hsr_slave_1: entered promiscuous mode [ 1429.380649][T15899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1429.392520][T15899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1429.402580][T15899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1429.412961][T15899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1429.444984][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.452304][T15899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.459882][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.467062][T15899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.479676][ T2886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.490725][ T2886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.564292][T15899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.587247][T15899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.601861][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.609137][ T8300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.625885][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.633134][ T8300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.859861][T15899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.114596][T15899] veth0_vlan: entered promiscuous mode [ 1430.126984][T15899] veth1_vlan: entered promiscuous mode [ 1430.161338][T15899] veth0_macvtap: entered promiscuous mode [ 1430.170200][T13526] Bluetooth: hci4: command tx timeout [ 1430.181423][T15899] veth1_macvtap: entered promiscuous mode [ 1430.201719][T15899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.212435][T15899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.224417][T15899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.240405][T15899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1430.251611][T15899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.263430][T15899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.278474][T15899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.287230][T15899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.296200][T15899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.305325][T15899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.401165][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.410463][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.450744][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.459968][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.341592][T13526] Bluetooth: hci4: command tx timeout [ 1434.209928][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1434.711082][T15950] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1434.720830][T15950] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1434.731284][T15950] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 1434.752137][T15950] syz.3.2489 (15950) used greatest stack depth: 16536 bytes left [ 1434.914737][T13526] Bluetooth: hci4: command tx timeout [ 1435.113695][ T27] audit: type=1800 audit(1789189743.942:513): pid=15950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2489" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 1435.301163][T15955] nvmet: adding nsid 1 to subsystem testsubsys [ 1435.322651][T15955] [ 1435.325059][T15955] ====================================================== [ 1435.332117][T15955] WARNING: possible circular locking dependency detected [ 1435.339185][T15955] syzkaller #0 Not tainted [ 1435.343641][T15955] ------------------------------------------------------ [ 1435.350692][T15955] syz.7.2486/15955 is trying to acquire lock: [ 1435.356792][T15955] ffff8880241b6418 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1435.365582][T15955] [ 1435.365582][T15955] but task is already holding lock: [ 1435.372975][T15955] ffff8880677c1870 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 1435.382050][T15955] [ 1435.382050][T15955] which lock already depends on the new lock. [ 1435.382050][T15955] [ 1435.392489][T15955] [ 1435.392489][T15955] the existing dependency chain (in reverse order) is: [ 1435.402094][T15955] [ 1435.402094][T15955] -> #6 (&subsys->lock){+.+.}-{3:3}: [ 1435.409620][T15955] __mutex_lock+0x135/0xc80 [ 1435.414706][T15955] nvmet_ns_buffered_io_store+0xe2/0x200 [ 1435.420906][T15955] configfs_write_iter+0x312/0x400 [ 1435.426586][T15955] vfs_write+0x474/0x9a0 [ 1435.431397][T15955] ksys_write+0x151/0x260 [ 1435.436309][T15955] do_syscall_64+0x55/0xb0 [ 1435.441309][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.447793][T15955] [ 1435.447793][T15955] -> #5 (&p->frag_sem){++++}-{3:3}: [ 1435.455230][T15955] down_read+0x46/0x2e0 [ 1435.459954][T15955] configfs_read_iter+0x1a5/0x570 [ 1435.465536][T15955] __kernel_read+0x2e5/0x730 [ 1435.470702][T15955] integrity_kernel_read+0x8a/0xd0 [ 1435.476381][T15955] ima_calc_file_hash+0xb1f/0x1960 [ 1435.482036][T15955] ima_collect_measurement+0x4d4/0xa30 [ 1435.488024][T15955] process_measurement+0x123a/0x1d50 [ 1435.493840][T15955] ima_file_check+0xcc/0x110 [ 1435.498974][T15955] path_openat+0x2910/0x3270 [ 1435.504094][T15955] do_filp_open+0x1f2/0x430 [ 1435.509137][T15955] do_sys_openat2+0x134/0x1d0 [ 1435.514359][T15955] __x64_sys_openat+0x139/0x160 [ 1435.519740][T15955] do_syscall_64+0x55/0xb0 [ 1435.524699][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.531204][T15955] [ 1435.531204][T15955] -> #4 (&buffer->mutex){+.+.}-{3:3}: [ 1435.538776][T15955] __mutex_lock+0x135/0xc80 [ 1435.543815][T15955] configfs_read_iter+0x72/0x570 [ 1435.549306][T15955] __kernel_read+0x2e5/0x730 [ 1435.554427][T15955] integrity_kernel_read+0x8a/0xd0 [ 1435.560077][T15955] ima_calc_file_hash+0xb1f/0x1960 [ 1435.565718][T15955] ima_collect_measurement+0x4d4/0xa30 [ 1435.571724][T15955] process_measurement+0x123a/0x1d50 [ 1435.577537][T15955] ima_file_check+0xcc/0x110 [ 1435.582658][T15955] path_openat+0x2910/0x3270 [ 1435.587776][T15955] do_filp_open+0x1f2/0x430 [ 1435.592804][T15955] do_sys_openat2+0x134/0x1d0 [ 1435.598117][T15955] __x64_sys_openat+0x139/0x160 [ 1435.603526][T15955] do_syscall_64+0x55/0xb0 [ 1435.608474][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.614898][T15955] [ 1435.614898][T15955] -> #3 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 1435.623193][T15955] __mutex_lock+0x135/0xc80 [ 1435.628251][T15955] process_measurement+0x739/0x1d50 [ 1435.634013][T15955] ima_file_check+0xcc/0x110 [ 1435.639230][T15955] path_openat+0x2910/0x3270 [ 1435.644366][T15955] do_file_open_root+0x2f3/0x5a0 [ 1435.649857][T15955] file_open_root+0x167/0x1c0 [ 1435.655101][T15955] kernel_read_file_from_path_initns+0x151/0x230 [ 1435.661994][T15955] _request_firmware+0xb43/0x1520 [ 1435.667571][T15955] request_firmware+0x36/0x50 [ 1435.672794][T15955] reg_reload_regdb+0x9a/0x490 [ 1435.678217][T15955] genl_family_rcv_msg_doit+0x21a/0x310 [ 1435.684385][T15955] genl_rcv_msg+0x611/0x7a0 [ 1435.689430][T15955] netlink_rcv_skb+0x235/0x4c0 [ 1435.694836][T15955] genl_rcv+0x28/0x40 [ 1435.699369][T15955] netlink_unicast+0x7b1/0x930 [ 1435.704668][T15955] netlink_sendmsg+0x8d0/0xbf0 [ 1435.709966][T15955] ____sys_sendmsg+0x61b/0x980 [ 1435.715267][T15955] ___sys_sendmsg+0x2a6/0x360 [ 1435.720492][T15955] __se_sys_sendmsg+0x1d0/0x2c0 [ 1435.725899][T15955] do_syscall_64+0x55/0xb0 [ 1435.730860][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.737307][T15955] [ 1435.737307][T15955] -> #2 (cb_lock){++++}-{3:3}: [ 1435.744277][T15955] down_read+0x46/0x2e0 [ 1435.748980][T15955] genl_rcv+0x19/0x40 [ 1435.753497][T15955] netlink_unicast+0x7b1/0x930 [ 1435.758798][T15955] netlink_sendmsg+0x8d0/0xbf0 [ 1435.764099][T15955] sock_sendmsg+0x23b/0x3a0 [ 1435.769136][T15955] splice_to_socket+0xb92/0x1270 [ 1435.774611][T15955] do_splice+0xe45/0x1b20 [ 1435.779483][T15955] __se_sys_splice+0x398/0x4a0 [ 1435.784818][T15955] do_syscall_64+0x55/0xb0 [ 1435.789778][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.796211][T15955] [ 1435.796211][T15955] -> #1 (&pipe->mutex/1){+.+.}-{3:3}: [ 1435.803793][T15955] __mutex_lock+0x135/0xc80 [ 1435.808863][T15955] iter_file_splice_write+0x1ba/0xcf0 [ 1435.814763][T15955] do_splice+0xe45/0x1b20 [ 1435.819618][T15955] __se_sys_splice+0x398/0x4a0 [ 1435.824906][T15955] do_syscall_64+0x55/0xb0 [ 1435.829857][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.836315][T15955] [ 1435.836315][T15955] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 1435.843710][T15955] __lock_acquire+0x37ef/0x7d80 [ 1435.849096][T15955] lock_acquire+0x19e/0x420 [ 1435.854128][T15955] sb_start_write+0x4d/0x1c0 [ 1435.859254][T15955] mnt_want_write+0x41/0x90 [ 1435.864295][T15955] path_openat+0x768/0x3270 [ 1435.869329][T15955] do_filp_open+0x1f2/0x430 [ 1435.874356][T15955] filp_open+0x180/0x1e0 [ 1435.879140][T15955] nvmet_file_ns_enable+0x74/0x330 [ 1435.884810][T15955] nvmet_ns_enable+0xf4/0x8c0 [ 1435.890029][T15955] nvmet_ns_enable_store+0xd8/0x170 [ 1435.895757][T15955] configfs_write_iter+0x312/0x400 [ 1435.901399][T15955] vfs_write+0x474/0x9a0 [ 1435.906178][T15955] ksys_write+0x151/0x260 [ 1435.911041][T15955] do_syscall_64+0x55/0xb0 [ 1435.915989][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.922414][T15955] [ 1435.922414][T15955] other info that might help us debug this: [ 1435.922414][T15955] [ 1435.932663][T15955] Chain exists of: [ 1435.932663][T15955] sb_writers#5 --> &p->frag_sem --> &subsys->lock [ 1435.932663][T15955] [ 1435.945071][T15955] Possible unsafe locking scenario: [ 1435.945071][T15955] [ 1435.952521][T15955] CPU0 CPU1 [ 1435.957888][T15955] ---- ---- [ 1435.963252][T15955] lock(&subsys->lock); [ 1435.967511][T15955] lock(&p->frag_sem); [ 1435.974189][T15955] lock(&subsys->lock); [ 1435.980960][T15955] rlock(sb_writers#5); [ 1435.985222][T15955] [ 1435.985222][T15955] *** DEADLOCK *** [ 1435.985222][T15955] [ 1435.993378][T15955] 6 locks held by syz.7.2486/15955: [ 1435.998578][T15955] #0: ffff88806c4a3248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 1436.007823][T15955] #1: ffff8881432b8418 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1436.016809][T15955] #2: ffff88807ad61c88 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x81/0x400 [ 1436.026926][T15955] #3: ffff88814ccb0878 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x215/0x400 [ 1436.036691][T15955] #4: ffffffff8daeecb0 (nvmet_config_sem){+.+.}-{3:3}, at: nvmet_ns_enable_store+0xc9/0x170 [ 1436.046890][T15955] #5: ffff8880677c1870 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 1436.056312][T15955] [ 1436.056312][T15955] stack backtrace: [ 1436.062200][T15955] CPU: 0 PID: 15955 Comm: syz.7.2486 Not tainted syzkaller #0 [ 1436.069674][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1436.079736][T15955] Call Trace: [ 1436.083024][T15955] [ 1436.085966][T15955] dump_stack_lvl+0x18c/0x250 [ 1436.090661][T15955] ? load_image+0x420/0x420 [ 1436.095175][T15955] ? show_regs_print_info+0x20/0x20 [ 1436.100387][T15955] ? print_circular_bug+0x12b/0x1a0 [ 1436.105611][T15955] check_noncircular+0x2fc/0x400 [ 1436.110567][T15955] ? print_deadlock_bug+0x5d0/0x5d0 [ 1436.115776][T15955] ? lockdep_lock+0xf5/0x230 [ 1436.120376][T15955] ? __lock_acquire+0x357f/0x7d80 [ 1436.125408][T15955] ? _find_first_zero_bit+0xd6/0x100 [ 1436.130736][T15955] __lock_acquire+0x37ef/0x7d80 [ 1436.135612][T15955] ? verify_lock_unused+0x140/0x140 [ 1436.140839][T15955] ? mark_lock+0x94/0x320 [ 1436.145184][T15955] lock_acquire+0x19e/0x420 [ 1436.149708][T15955] ? mnt_want_write+0x41/0x90 [ 1436.154400][T15955] ? leave_rcu+0xf4/0x160 [ 1436.158740][T15955] ? __might_sleep+0xe0/0xe0 [ 1436.163339][T15955] ? read_lock_is_recursive+0x20/0x20 [ 1436.168730][T15955] sb_start_write+0x4d/0x1c0 [ 1436.173342][T15955] ? mnt_want_write+0x41/0x90 [ 1436.178030][T15955] mnt_want_write+0x41/0x90 [ 1436.182566][T15955] path_openat+0x768/0x3270 [ 1436.187090][T15955] ? kmem_cache_alloc+0x17e/0x2c0 [ 1436.192129][T15955] ? getname_kernel+0x5a/0x2f0 [ 1436.196908][T15955] ? vfs_write+0x474/0x9a0 [ 1436.201353][T15955] ? do_filp_open+0x430/0x430 [ 1436.206050][T15955] do_filp_open+0x1f2/0x430 [ 1436.210561][T15955] ? vfs_tmpfile+0x620/0x620 [ 1436.215169][T15955] ? rcu_is_watching+0x15/0xb0 [ 1436.219947][T15955] ? getname_kernel+0x146/0x2f0 [ 1436.224815][T15955] filp_open+0x180/0x1e0 [ 1436.229086][T15955] ? file_open_name+0x1c0/0x1c0 [ 1436.233952][T15955] ? lockdep_hardirqs_on+0x98/0x150 [ 1436.239167][T15955] nvmet_file_ns_enable+0x74/0x330 [ 1436.244290][T15955] nvmet_ns_enable+0xf4/0x8c0 [ 1436.248986][T15955] nvmet_ns_enable_store+0xd8/0x170 [ 1436.254207][T15955] ? nvmet_ns_enable_show+0x60/0x60 [ 1436.259410][T15955] ? down_read+0x1ac/0x2e0 [ 1436.263840][T15955] configfs_write_iter+0x312/0x400 [ 1436.268971][T15955] ? nvmet_ns_enable_show+0x60/0x60 [ 1436.274197][T15955] vfs_write+0x474/0x9a0 [ 1436.278485][T15955] ? file_end_write+0x250/0x250 [ 1436.283381][T15955] ? __fget_files+0x3fc/0x460 [ 1436.288102][T15955] ? __fdget_pos+0x2a3/0x330 [ 1436.292728][T15955] ? ksys_write+0x74/0x260 [ 1436.297169][T15955] ksys_write+0x151/0x260 [ 1436.301519][T15955] ? __ia32_sys_read+0x90/0x90 [ 1436.306297][T15955] ? lockdep_hardirqs_on+0x98/0x150 [ 1436.311603][T15955] do_syscall_64+0x55/0xb0 [ 1436.316138][T15955] ? clear_bhb_loop+0x40/0x90 [ 1436.320860][T15955] ? clear_bhb_loop+0x40/0x90 [ 1436.325650][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1436.331558][T15955] RIP: 0033:0x7fe16719e159 [ 1436.335983][T15955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.355602][T15955] RSP: 002b:00007fe16814c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1436.364029][T15955] RAX: ffffffffffffffda RBX: 00007fe167425fa0 RCX: 00007fe16719e159 [ 1436.372007][T15955] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1436.379984][T15955] RBP: 00007fe16723503b R08: 0000000000000000 R09: 0000000000000000 [ 1436.387973][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.395948][T15955] R13: 00007fe167426038 R14: 00007fe167425fa0 R15: 00007ffc0605a728 [ 1436.403937][T15955] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1436.464046][T15955] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 1436.970065][T13526] Bluetooth: hci4: command tx timeout [ 1437.564454][ T1005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.700390][ T1005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.776619][ T1005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.914179][ T1005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.055244][ T1005] tipc: Disabling bearer [ 1438.061567][ T1005] tipc: Left network mode [ 1439.060998][ T1005] hsr_slave_0: left promiscuous mode [ 1439.066889][ T1005] hsr_slave_1: left promiscuous mode [ 1439.074172][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.081840][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.091405][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.099182][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.106960][ T1005] bridge_slave_1: left allmulticast mode [ 1439.112933][ T1005] bridge_slave_1: left promiscuous mode [ 1439.125001][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.136538][ T1005] bridge_slave_0: left allmulticast mode [ 1439.142439][ T1005] bridge_slave_0: left promiscuous mode [ 1439.149398][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.160886][ T1005] veth1_macvtap: left promiscuous mode [ 1439.166414][ T1005] veth0_macvtap: left promiscuous mode [ 1439.172185][ T1005] veth1_vlan: left promiscuous mode [ 1439.177531][ T1005] veth0_vlan: left promiscuous mode [ 1439.421833][ T1005] team_slave_1 (unregistering): left allmulticast mode [ 1439.430090][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 1439.466340][ T1005] team_slave_0 (unregistering): left allmulticast mode [ 1439.474063][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 1439.521308][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.532388][ T1005] bond_slave_1 (unregistering): left allmulticast mode [ 1439.570931][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.582005][ T1005] bond_slave_0 (unregistering): left allmulticast mode [ 1439.671707][ T1005] bond0 (unregistering): Released all slaves [ 1440.093986][ T1005] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.154374][ T1005] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.194744][ T1005] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.234655][ T1005] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.016332][ T1005] hsr_slave_0: left promiscuous mode [ 1441.026149][ T1005] hsr_slave_1: left promiscuous mode [ 1441.051381][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.059086][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.066815][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.074481][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.082685][ T1005] bridge_slave_1: left allmulticast mode [ 1441.088476][ T1005] bridge_slave_1: left promiscuous mode [ 1441.094207][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.103077][ T1005] bridge_slave_0: left allmulticast mode [ 1441.109003][ T1005] bridge_slave_0: left promiscuous mode [ 1441.114731][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.126136][ T1005] veth1_macvtap: left promiscuous mode [ 1441.132546][ T1005] veth0_macvtap: left promiscuous mode [ 1441.138323][ T1005] veth1_vlan: left promiscuous mode [ 1441.143676][ T1005] veth0_vlan: left promiscuous mode [ 1441.401668][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 1441.442947][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 1441.478728][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.520820][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.676069][ T1005] bond0 (unregistering): Released all slaves