last executing test programs: 8m5.11658243s ago: executing program 3 (id=72): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x19) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 8m1.016484567s ago: executing program 3 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7m54.82574592s ago: executing program 3 (id=86): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) capset(0x0, &(0x7f0000001080)={0x200000, 0x200000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1) shutdown(r1, 0x1) 7m53.576435671s ago: executing program 3 (id=91): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 7m49.44827583s ago: executing program 3 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 7m44.179484963s ago: executing program 3 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000210000/0x4000)=nil, 0x4000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 7m43.937730148s ago: executing program 32 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000210000/0x4000)=nil, 0x4000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3m55.64292186s ago: executing program 0 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) 3m49.701063137s ago: executing program 0 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd0000000021946aff1e7154519cc275d04f6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13000000000000f90900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3m48.819996924s ago: executing program 0 (id=668): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x80, 0x55) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r7, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 3m46.994306793s ago: executing program 0 (id=672): open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 3m45.96399005s ago: executing program 0 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000000)=""/34) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r3, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) 3m38.765889408s ago: executing program 0 (id=695): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ustat(0x800005, 0x0) ustat(0x7, &(0x7f00000001c0)) 3m22.110514043s ago: executing program 33 (id=695): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ustat(0x800005, 0x0) ustat(0x7, &(0x7f00000001c0)) 25.753418118s ago: executing program 4 (id=1119): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ustat(0x800005, 0x0) ustat(0x7, &(0x7f00000001c0)) 23.85549107s ago: executing program 4 (id=1111): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) shutdown(0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) 19.324240756s ago: executing program 4 (id=1123): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ustat(0x800005, 0x0) ustat(0x7, &(0x7f00000001c0)) 15.441658083s ago: executing program 5 (id=1132): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 14.701086787s ago: executing program 4 (id=1135): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 14.700561007s ago: executing program 5 (id=1136): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) accept$alg(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) keyctl$assume_authority(0x10, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 13.259155431s ago: executing program 5 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) 13.039579914s ago: executing program 4 (id=1141): semctl$IPC_RMID(0x0, 0x0, 0x0) 10.775902947s ago: executing program 5 (id=1144): r0 = syz_io_uring_setup(0x55e, &(0x7f0000000100)={0x0, 0xf8b3, 0x7800, 0x1, 0x315}, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x110, 0x6, 0x0, 0xfffffffffffffdcb) fchownat(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9c30062c14ea77b0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x86c}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f00000000c0)={r8, 0x4}, 0x8) 10.691004992s ago: executing program 4 (id=1145): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ustat(0x800005, 0x0) ustat(0x7, &(0x7f00000001c0)) 10.083319928s ago: executing program 1 (id=1146): creat(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000240)={0x6, @output={0x0, 0x1, {0xff, 0x3}, 0x3, 0x881}}) r6 = accept4(r4, 0x0, 0x0, 0x800) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 7.925570094s ago: executing program 1 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x2, 0x2, 0x0, r0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 6.905257834s ago: executing program 1 (id=1151): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) 6.336784008s ago: executing program 1 (id=1152): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.336106397s ago: executing program 2 (id=1153): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @empty=0xe0000000}}, {{0x2, 0x4e25, @private=0xa010102}}}, 0x108) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)={[{@nobarrier}, {@nls={'nls', 0x3d, 'cp861'}}, {@creator={'creator', 0x3d, "cf44eee4"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid}, {@nodecompose}]}, 0x1, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000a80)=ANY=[@ANYBLOB="63726561746f723da8fa40b32c6465636f6d706f73652c63726561746f723dbd1c66f52c6e6c733d63703836392c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c666f7263652c00f2d2d783dca321ca066f379066a92598376c0a6fb6ebb186b9be7a1d0debd4c2ce3408ded03a80e9839d59c9e7ee798f53e0387168295df851a241c8ce5a7094002fc55c1a66f9e609ea2409393aeb7f8902fcfb60db30dde50ac8f677ad022ab20fcf35644f0090f1861caf534652a239e63533b1a1d4251af75bb0ab1e3bffcf118f464e5f296a5e488bc804019abdcd6deed70d74ab439ff1b9839c7a8666aefe533565f6c6146cfd6ee47347c7dd230d2bfddd5b171026823367db7821b2c9b936b83cd77a9374bfba82530c6b3267130c"], 0x3, 0x6b4, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040), &(0x7f0000000900)={'U+', 0xab8}, 0x16, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0xfff}, 0x1c, &(0x7f0000001740)}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x86, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000200)="5c0ae90ef0da44387271", 0xa}], 0x1}}], 0x2, 0x24008041) 6.240222903s ago: executing program 1 (id=1155): semctl$IPC_RMID(0x0, 0x0, 0x0) 5.917884102s ago: executing program 1 (id=1156): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0], 0x20}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={0x0}) 5.210936024s ago: executing program 2 (id=1157): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, 0x0) 4.867632204s ago: executing program 6 (id=1158): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001b80), 0x0, 0x40848d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x3923]}, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r6, 0xffffffffffffffff, 0x0, 0x2) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 3.617615517s ago: executing program 6 (id=1159): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sched_getparam(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.548294111s ago: executing program 2 (id=1160): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4c1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x30a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x4, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000f40)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) 3.420026019s ago: executing program 6 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x0, 0xacf0165) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x2, 0x2, 0x0, r0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 2.247864758s ago: executing program 5 (id=1162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 2.146744084s ago: executing program 2 (id=1163): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x101, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000), 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 1.946490286s ago: executing program 6 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x50, 0x0, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa, 0x0, 0xac88, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x0, 0x40000000000, 0xc4, 0xffffffeffffffffe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000001, 0x3, 0x0, 0x0, 0x4, 0x0, 0x8000000000000006, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x7ff, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x10000, 0x801000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x6, 0x4, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7ff, 0x0, 0xfffffffffffffffe, 0xb, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xd, 0x0, 0x4, 0x0, 0x9, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0xc28, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x420000000, 0x0, 0x80]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x5453, 0x0) 840.00797ms ago: executing program 6 (id=1165): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 687.106299ms ago: executing program 2 (id=1166): semctl$IPC_RMID(0x0, 0x0, 0x0) 302.385472ms ago: executing program 6 (id=1167): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, 0x0}, 0x20) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000180)={0x65f5, 0x0, 0xff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 302.197442ms ago: executing program 2 (id=1168): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, 0xffffffffffffffff, 0xffffd000) r4 = syz_open_procfs(0x0, &(0x7f0000006100)='environ\x00') read$FUSE(r4, &(0x7f00000102c0)={0x2020}, 0x2020) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000100)={0x0}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x5) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000055c0), 0x0, 0x4001c00) 0s ago: executing program 5 (id=1169): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x2003}], 0x1, 0x40010002, 0x0) kernel console output (not intermixed with test programs): eth1_to_team: link becomes ready [ 59.885663][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.897373][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.905696][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.918012][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.927818][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.937221][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.947375][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.958008][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.965378][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.973442][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.985982][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.995480][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.008761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.017033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.047627][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.055787][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.065578][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.075662][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.084881][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.093872][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.102181][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.110679][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.121249][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.129781][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.139205][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.148214][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.159441][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.168750][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.177164][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.185722][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.200575][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.230800][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.243283][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.252849][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.261240][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.273655][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.282937][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.291645][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.301045][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.308194][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.317244][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.327026][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.336610][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.343754][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.353470][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.364951][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.380182][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.391422][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.414541][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.430569][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.439707][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.450962][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.460572][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.469411][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.503540][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.513029][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.528557][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.541239][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.568534][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.582267][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 60.589920][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 60.596361][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 60.610076][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.644461][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.654822][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.663998][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.673742][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 60.683139][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 60.694500][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.737988][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.760321][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.770773][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.785869][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.794510][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.801978][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.835870][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.862983][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.870608][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.954419][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.970975][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.029387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.044380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.069015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.095434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.118193][ T4193] device veth0_vlan entered promiscuous mode [ 61.132009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.153159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.160792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.171861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.183910][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.197407][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.209195][ T4193] device veth1_vlan entered promiscuous mode [ 61.254851][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.264011][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.272500][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.281209][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.290632][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.300106][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.310009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.317643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.338474][ T4193] device veth0_macvtap entered promiscuous mode [ 61.350074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.359279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.368455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.377801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.386811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.406930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.415838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.426071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.434267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.462933][ T4193] device veth1_macvtap entered promiscuous mode [ 61.472372][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.479451][ T4184] device veth0_vlan entered promiscuous mode [ 61.487188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.495577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.504433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.516847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.525690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.536581][ T4189] device veth0_vlan entered promiscuous mode [ 61.544097][ T4190] device veth0_vlan entered promiscuous mode [ 61.560144][ T4190] device veth1_vlan entered promiscuous mode [ 61.567116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.576338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.584699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.592772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.600423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.613033][ T4189] device veth1_vlan entered promiscuous mode [ 61.628997][ T4184] device veth1_vlan entered promiscuous mode [ 61.657633][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.668938][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.683381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.691358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.699743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.709038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.717671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.727283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.736944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.748069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.768238][ T4190] device veth0_macvtap entered promiscuous mode [ 61.780936][ T4190] device veth1_macvtap entered promiscuous mode [ 61.789236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.797517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.806539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.815329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.823340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.831888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.841013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.852478][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.861320][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873359][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.882429][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.901630][ T4189] device veth0_macvtap entered promiscuous mode [ 61.925758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.935039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.947114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.956407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.965065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.973402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.981129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.992987][ T4189] device veth1_macvtap entered promiscuous mode [ 62.008842][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.020425][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.032641][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.041920][ T4188] device veth0_vlan entered promiscuous mode [ 62.057574][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.066728][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.078799][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.091483][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.108023][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.146563][ T4184] device veth0_macvtap entered promiscuous mode [ 62.155065][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.166249][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.175121][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.184648][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.197078][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.206354][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.216795][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.225783][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.248467][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.258181][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.270433][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.281679][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.292803][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.305501][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.316073][ T4188] device veth1_vlan entered promiscuous mode [ 62.327646][ T4184] device veth1_macvtap entered promiscuous mode [ 62.337701][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.350942][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.359709][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.369870][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.381455][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.391480][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.402466][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.415030][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.454281][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.465678][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.481910][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.491431][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.500205][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.510630][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.533461][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.545397][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.555607][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.570357][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.580434][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.591514][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.603980][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.625349][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.638103][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.653309][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.665617][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.673822][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 62.678660][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.683712][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 62.693599][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.707920][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.711135][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 62.718855][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.736463][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.752894][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 62.760646][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 62.785813][ T4188] device veth0_macvtap entered promiscuous mode [ 62.793094][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.801706][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.810823][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.819557][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.829100][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.847174][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.857435][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.868683][ T4188] device veth1_macvtap entered promiscuous mode [ 62.890708][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.905411][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.917969][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.926934][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.936468][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.945897][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.976303][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.989971][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.000440][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.011188][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.021268][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.032017][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.042317][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.053343][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.065665][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.097224][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.108540][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.128722][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.137366][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.148853][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.162942][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.173017][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.184965][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.195198][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.207330][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.217442][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.229546][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.241081][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.264784][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.274440][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.283793][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.293074][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.305163][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.314644][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.323677][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.342585][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.351321][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.398442][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.408545][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.418839][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.431019][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.477413][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.492447][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.522596][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.530455][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.557832][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.580340][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.609424][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.625128][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.642558][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.650396][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.667930][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.688804][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.722709][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.730545][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.758303][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.835402][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.870688][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.913734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.971111][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.011705][ T4301] loop0: detected capacity change from 0 to 1024 [ 64.135520][ T4301] ======================================================= [ 64.135520][ T4301] WARNING: The mand mount option has been deprecated and [ 64.135520][ T4301] and is ignored by this kernel. Remove the mand [ 64.135520][ T4301] option from the mount to silence this warning. [ 64.135520][ T4301] ======================================================= [ 65.192614][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 65.200131][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 65.207411][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 65.213908][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 65.219976][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 65.374784][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7'. [ 65.388394][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.542342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.712817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.721908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.730960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 65.792568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.801797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.811386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.952392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.961558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.102588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.134166][ T4326] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.1: Allocating blocks 385-513 which overlap fs metadata [ 68.427614][ T4296] EXT4-fs (loop0): pa ffff888076b6a7e0: logic 16, phys. 129, len 24 [ 68.435985][ T4296] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 68.570782][ T4358] loop1: detected capacity change from 0 to 512 [ 68.683039][ T26] audit: type=1326 audit(1770434451.246:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 68.890954][ T26] audit: type=1326 audit(1770434451.366:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 68.935231][ T26] audit: type=1326 audit(1770434451.366:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.052473][ T4371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.637125][ T4372] device syzkaller0 entered promiscuous mode [ 69.674495][ T26] audit: type=1326 audit(1770434451.366:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.696762][ T26] audit: type=1326 audit(1770434451.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.737148][ T26] audit: type=1326 audit(1770434451.486:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.861331][ T26] audit: type=1326 audit(1770434451.526:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.917719][ T4381] loop0: detected capacity change from 0 to 512 [ 69.924417][ T26] audit: type=1326 audit(1770434451.526:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 69.972215][ T26] audit: type=1326 audit(1770434451.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 70.000542][ T26] audit: type=1326 audit(1770434451.526:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 70.288505][ T4381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 70.534524][ T4381] UDF-fs: Scanning with blocksize 512 failed [ 70.694078][ T4381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 70.701498][ T4381] UDF-fs: Scanning with blocksize 1024 failed [ 70.769958][ T4381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 70.778900][ T4381] UDF-fs: Scanning with blocksize 2048 failed [ 70.796913][ T4381] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.808321][ T4391] loop4: detected capacity change from 0 to 256 [ 70.822465][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.877165][ T4381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.078949][ T4397] device syzkaller0 entered promiscuous mode [ 71.501167][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.516230][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.624227][ T4391] FAT-fs (loop4): Directory bread(block 64) failed [ 71.639735][ T4391] FAT-fs (loop4): Directory bread(block 65) failed [ 71.749507][ T4391] FAT-fs (loop4): Directory bread(block 66) failed [ 71.758497][ T4391] FAT-fs (loop4): Directory bread(block 67) failed [ 71.765410][ T4391] FAT-fs (loop4): Directory bread(block 68) failed [ 71.771972][ T4391] FAT-fs (loop4): Directory bread(block 69) failed [ 71.778895][ T4391] FAT-fs (loop4): Directory bread(block 70) failed [ 71.800204][ T4391] FAT-fs (loop4): Directory bread(block 71) failed [ 71.827012][ T4391] FAT-fs (loop4): Directory bread(block 72) failed [ 71.952463][ T4391] FAT-fs (loop4): Directory bread(block 73) failed [ 73.442229][ T4173] Bluetooth: hci0: command 0x0406 tx timeout [ 73.952100][ C0] sched: RT throttling activated [ 74.953468][ T2856] cfg80211: failed to load regulatory.db [ 80.851804][ T4458] syz.3.40 (4458) used greatest stack depth: 21144 bytes left [ 84.493303][ T4492] loop1: detected capacity change from 0 to 512 [ 85.104435][ T4498] loop0: detected capacity change from 0 to 512 [ 85.458029][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 85.814564][ T4498] EXT4-fs (loop0): Ignoring removed nobh option [ 86.492927][ T4498] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.53: iget: bad i_size value: 38620345925642 [ 86.534234][ T4498] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.53: couldn't read orphan inode 15 (err -117) [ 86.562620][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 86.603408][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 86.603461][ T26] audit: type=1326 audit(1770434469.166:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 87.523419][ T26] audit: type=1326 audit(1770434469.206:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 88.456377][ T26] audit: type=1326 audit(1770434469.206:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 88.935325][ T26] audit: type=1326 audit(1770434469.206:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 88.958840][ T26] audit: type=1326 audit(1770434469.206:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 88.982459][ T26] audit: type=1326 audit(1770434469.206:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 89.005315][ T26] audit: type=1326 audit(1770434469.206:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 89.061402][ T26] audit: type=1326 audit(1770434469.206:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 89.377316][ T26] audit: type=1326 audit(1770434469.206:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 89.473169][ T4537] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 89.531394][ T26] audit: type=1326 audit(1770434469.206:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f350deb9 code=0x7ffc0000 [ 90.478191][ T4546] loop1: detected capacity change from 0 to 4096 [ 90.772431][ T4557] loop4: detected capacity change from 0 to 32768 [ 91.089776][ T4557] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.67 (4557) [ 91.152729][ T4557] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 91.161633][ T4557] BTRFS info (device loop4): setting nodatacow, compression disabled [ 91.169789][ T4557] BTRFS info (device loop4): force clearing of disk cache [ 91.176954][ T4557] BTRFS info (device loop4): enabling ssd optimizations [ 91.183907][ T4557] BTRFS info (device loop4): using spread ssd allocation scheme [ 91.191550][ T4557] BTRFS info (device loop4): turning off barriers [ 91.198044][ T4557] BTRFS info (device loop4): disabling free space tree [ 91.204955][ T4557] BTRFS info (device loop4): not using ssd optimizations [ 91.212259][ T4557] BTRFS info (device loop4): not using spread ssd allocation scheme [ 91.220242][ T4557] BTRFS info (device loop4): has skinny extents [ 92.105363][ T4591] loop3: detected capacity change from 0 to 512 [ 92.194963][ T4591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.267394][ T4591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.567147][ T4546] fscrypt: Error allocating hmac(sha512): -2 [ 93.625064][ T4546] EXT4-fs (loop1): Error processing option "test_dummy_encryption" [-2] [ 93.887919][ T4591] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.272847][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 94.273936][ T4591] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 94.521004][ T4618] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 94.793963][ T4557] BTRFS error (device loop4): open_ctree failed: -22 [ 99.125339][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 104.230657][ T4683] loop3: detected capacity change from 0 to 2048 [ 104.266145][ T4683] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 104.365010][ T4683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.104527][ T4708] device syzkaller0 entered promiscuous mode [ 107.407210][ T4193] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 107.457445][ T4193] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 108.158594][ T4723] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 109.483567][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 109.483699][ T26] audit: type=1326 audit(1770434491.936:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 109.831042][ T26] audit: type=1326 audit(1770434491.936:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 109.865694][ T4742] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.106'. [ 110.017586][ T26] audit: type=1326 audit(1770434491.936:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.040107][ T26] audit: type=1326 audit(1770434491.946:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.140437][ T26] audit: type=1326 audit(1770434491.946:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.232707][ T26] audit: type=1326 audit(1770434491.946:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.338075][ T26] audit: type=1326 audit(1770434491.946:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.403086][ T26] audit: type=1326 audit(1770434491.946:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.479027][ T26] audit: type=1326 audit(1770434491.946:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 110.524726][ T4744] device syzkaller0 entered promiscuous mode [ 110.545405][ T26] audit: type=1326 audit(1770434491.946:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 112.848861][ T4330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.059545][ T4769] device syzkaller0 entered promiscuous mode [ 113.195769][ T4330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.086327][ T4783] batman_adv: batadv0: Adding interface: gretap1 [ 114.092797][ T4783] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.118435][ T4783] batman_adv: batadv0: Interface activated: gretap1 [ 114.269593][ T4330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.361586][ T4783] syz.4.120 (4783) used greatest stack depth: 20944 bytes left [ 114.424954][ T4330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.624155][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 114.643078][ T4791] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.652159][ T4791] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.661033][ T4791] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.669793][ T4791] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.162101][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 116.205183][ T4791] Zero length message leads to an empty skb [ 116.224353][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 116.240603][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 116.278471][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 116.292966][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 116.378185][ T4807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 116.392987][ T4807] unsupported nlmsg_type 40 [ 116.419155][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 117.930992][ T4807] device dummy0 entered promiscuous mode [ 118.045199][ T4807] device macsec1 entered promiscuous mode [ 118.121199][ T4816] fuse: Bad value for 'fd' [ 118.845689][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 118.858003][ T4822] netlink: 'syz.0.132': attribute type 12 has an invalid length. [ 118.980552][ T4827] netlink: 'syz.0.132': attribute type 12 has an invalid length. [ 119.780640][ T4781] chnl_net:caif_netlink_parms(): no params data found [ 120.753189][ T4862] capability: warning: `syz.4.138' uses deprecated v2 capabilities in a way that may be insecure [ 120.948475][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.017744][ T4866] sctp: [Deprecated]: syz.0.140 (pid 4866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.017744][ T4866] Use struct sctp_sack_info instead [ 121.036028][ T4173] Bluetooth: hci4: command 0x040f tx timeout [ 121.651579][ T4862] binder: BC_ATTEMPT_ACQUIRE not supported [ 121.761586][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.770331][ T4781] device bridge_slave_0 entered promiscuous mode [ 121.816584][ T4862] binder: 4857:4862 ioctl c0306201 2000000001c0 returned -22 [ 123.306972][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.324138][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.348034][ T4781] device bridge_slave_1 entered promiscuous mode [ 123.358980][ T4875] Cannot find add_set index 0 as target [ 123.369140][ T4870] netlink: 37 bytes leftover after parsing attributes in process `syz.0.141'. [ 123.537054][ T4781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.579753][ T4781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.640510][ T4781] team0: Port device team_slave_0 added [ 124.262271][ T4884] tipc: Started in network mode [ 124.267613][ T4884] tipc: Node identity e20e0592deb5, cluster identity 4711 [ 124.319284][ T4884] tipc: Enabled bearer , priority 0 [ 124.358006][ T4879] device syzkaller0 entered promiscuous mode [ 124.768364][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 124.819323][ T4781] team0: Port device team_slave_1 added [ 124.871636][ T4878] tipc: Resetting bearer [ 125.657725][ T4878] tipc: Disabling bearer [ 125.789881][ T4781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.824626][ T4781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.962823][ T4781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.012247][ T4781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.060687][ T4781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.134015][ T4781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.379018][ T4907] netlink: 277 bytes leftover after parsing attributes in process `syz.4.149'. [ 126.462675][ T4781] device hsr_slave_0 entered promiscuous mode [ 126.476380][ T4781] device hsr_slave_1 entered promiscuous mode [ 126.484507][ T4781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.542433][ T4781] Cannot create hsr debugfs directory [ 127.805530][ T4912] loop4: detected capacity change from 0 to 1024 [ 128.018132][ T4919] ODEBUG: Out of memory. ODEBUG disabled [ 130.858125][ T4330] device hsr_slave_0 left promiscuous mode [ 130.940970][ T4330] device hsr_slave_1 left promiscuous mode [ 132.473821][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.483758][ T1269] hfsplus: b-tree write err: -5, ino 4 [ 132.488560][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.221516][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.233642][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.246174][ T4330] device bridge_slave_1 left promiscuous mode [ 133.490851][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.529666][ T4330] device bridge_slave_0 left promiscuous mode [ 133.579103][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.875849][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.897694][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.685721][ T4330] device veth1_macvtap left promiscuous mode [ 135.693858][ T4330] device veth0_macvtap left promiscuous mode [ 135.699997][ T4330] device veth1_vlan left promiscuous mode [ 135.725329][ T4330] device veth0_vlan left promiscuous mode [ 137.471044][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 137.486522][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 137.952702][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.320160][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.518659][ T4330] bond0 (unregistering): Released all slaves [ 138.556197][ T5002] loop4: detected capacity change from 0 to 512 [ 138.722620][ T5002] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.803514][ T5002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 138.812147][ T5002] System zones: 1-12 [ 139.214419][ T5002] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.170: corrupted in-inode xattr [ 139.228887][ T5002] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.170: couldn't read orphan inode 15 (err -117) [ 139.243152][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 139.429787][ T5003] device team0 entered promiscuous mode [ 139.440909][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 139.440921][ T26] audit: type=1800 audit(1770434520.064:47): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.161" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 139.441808][ T4960] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 139.448010][ T5003] device team_slave_0 entered promiscuous mode [ 139.467389][ T4960] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 139.492419][ T4960] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 139.492469][ T5003] device team_slave_1 entered promiscuous mode [ 139.532274][ T4960] syz.0.161 (4960) used greatest stack depth: 20664 bytes left [ 139.608157][ T5003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.621781][ T5003] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 139.633914][ T5010] process 'syz.0.173' launched '/dev/fd/3' with NULL argv: empty string added [ 139.654428][ T5005] bridge0: port 3(vlan2) entered blocking state [ 139.671843][ T5005] bridge0: port 3(vlan2) entered disabled state [ 139.679511][ T5005] device vlan2 entered promiscuous mode [ 139.685102][ T5005] device bond0 entered promiscuous mode [ 139.691339][ T5005] device bond_slave_0 entered promiscuous mode [ 139.697629][ T5005] device bond_slave_1 entered promiscuous mode [ 139.704686][ T5005] device macvlan2 entered promiscuous mode [ 139.784936][ T4781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.801163][ T4781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.828558][ T5005] syz.2.172 (5005) used greatest stack depth: 20368 bytes left [ 139.847822][ T4781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.892658][ T4781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.610514][ T5020] 9pnet: p9_fd_create_tcp (5020): problem connecting socket to 127.0.0.1 [ 142.697984][ T5053] device syzkaller0 entered promiscuous mode [ 143.610809][ T5068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.227508][ T4781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.242419][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.251054][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.278574][ T4781] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.338030][ T5074] loop4: detected capacity change from 0 to 1024 [ 146.388913][ T5074] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 147.933744][ T5074] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 147.974423][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.997460][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.031994][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.039201][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.193503][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.032191][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.063500][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.070648][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.099953][ T5099] loop1: detected capacity change from 0 to 512 [ 149.167942][ T5099] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.199747][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.147320][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.157362][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.197281][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.262398][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.329617][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.465949][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.881138][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.724574][ T4781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.765349][ T4781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.916440][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.817959][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.842595][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.018785][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.183789][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.359301][ T26] audit: type=1326 audit(1770434534.947:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 155.484931][ T26] audit: type=1326 audit(1770434535.012:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 155.561606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.575210][ T26] audit: type=1326 audit(1770434535.012:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 155.689614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.734596][ T26] audit: type=1326 audit(1770434535.012:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 156.434457][ T5173] loop4: detected capacity change from 0 to 1024 [ 156.857202][ T5173] EXT4-fs (loop4): Ignoring removed bh option [ 156.863506][ T5173] EXT4-fs (loop4): inline encryption not supported [ 157.181832][ T5173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 157.190052][ T5173] System zones: 0-1, 3-12 [ 157.213083][ T4781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.244213][ T26] audit: type=1326 audit(1770434535.012:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f078ec9ceb9 code=0x7ffc0000 [ 157.295484][ T5173] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 6: comm syz.4.205: lblock 6 mapped to illegal pblock 6 (length 1) [ 157.312092][ T5173] Quota error (device loop4): write_blk: dquota write failed [ 157.319630][ T5173] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 157.329609][ T5173] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.205: Failed to acquire dquot type 0 [ 157.341516][ T5173] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 6: comm syz.4.205: lblock 6 mapped to illegal pblock 6 (length 1) [ 157.355934][ T5173] Quota error (device loop4): write_blk: dquota write failed [ 157.363611][ T5173] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 157.373613][ T5173] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.205: Failed to acquire dquot type 0 [ 157.388513][ T5173] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.205: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.413478][ T5173] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 6: comm syz.4.205: lblock 6 mapped to illegal pblock 6 (length 1) [ 157.428936][ T5173] Quota error (device loop4): write_blk: dquota write failed [ 157.436403][ T5173] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.205: Failed to acquire dquot type 0 [ 157.449477][ T5173] EXT4-fs (loop4): 1 orphan inode deleted [ 157.455228][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,inode_readahead_blks=0x0000000000400000,bh,min_batch_time=0x0000000000000006,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 158.718080][ T5195] delete_channel: no stack [ 159.177042][ T5211] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.211'. [ 159.196074][ T5211] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 160.315611][ T5221] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.386198][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.601336][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.759262][ T4781] device veth0_vlan entered promiscuous mode [ 161.542762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.576186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.610008][ T4781] device veth1_vlan entered promiscuous mode [ 161.628749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.637081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.898118][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.953347][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.164979][ T4781] device veth0_macvtap entered promiscuous mode [ 162.412914][ T4781] device veth1_macvtap entered promiscuous mode [ 162.519455][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.530074][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.562618][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.608455][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.642855][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.653334][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.706964][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.717544][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.785809][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.808000][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.851252][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.908624][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.974384][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.984253][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.994831][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.005684][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.017012][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.028251][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.036810][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.045606][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.592465][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.901285][ T5261] loop1: detected capacity change from 0 to 40427 [ 164.033448][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.054465][ T5261] F2FS-fs (loop1): invalid crc value [ 164.107136][ T5261] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.158974][ T5261] F2FS-fs (loop1): Start checkpoint disabled! [ 164.187989][ T5261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 164.215886][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.284433][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.319695][ T4781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.350919][ T4781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.403054][ T4781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.441045][ T4781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.494089][ T1269] attempt to access beyond end of device [ 166.494089][ T1269] loop1: rw=2049, want=40984, limit=40427 [ 168.040519][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.053189][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.070217][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.086686][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.116138][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.537836][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.847733][ T5310] loop0: detected capacity change from 0 to 1024 [ 168.961621][ T5310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.453619][ T5310] cgroup: fork rejected by pids controller in /syz0 [ 169.637234][ T5439] netlink: 856 bytes leftover after parsing attributes in process `syz.2.233'. [ 177.952710][ T5646] tipc: Enabled bearer , priority 0 [ 177.971744][ T5646] device syzkaller0 entered promiscuous mode [ 178.138133][ T5644] tipc: Resetting bearer [ 178.237382][ T5644] tipc: Disabling bearer [ 178.257749][ T5652] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.278833][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 178.656981][ T5657] bridge1: port 1(veth0_to_bond) entered blocking state [ 178.701072][ T5657] bridge1: port 1(veth0_to_bond) entered disabled state [ 178.739500][ T5657] device veth0_to_bond entered promiscuous mode [ 179.691855][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 179.691871][ T26] audit: type=1800 audit(1770434557.714:89): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.255" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 179.692150][ T5666] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 179.732678][ T5666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 179.742252][ T5666] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.938561][ T26] audit: type=1326 audit(1770434557.939:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.2.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x0 [ 180.114446][ T5672] loop4: detected capacity change from 0 to 40427 [ 180.183286][ T5672] F2FS-fs (loop4): invalid crc value [ 180.213243][ T5672] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.246570][ T5672] F2FS-fs (loop4): Start checkpoint disabled! [ 180.261062][ T5672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 182.607867][ T154] attempt to access beyond end of device [ 182.607867][ T154] loop4: rw=2049, want=40984, limit=40427 [ 186.413640][ T5719] tipc: Started in network mode [ 186.418575][ T5719] tipc: Node identity ba1fd0ea539a, cluster identity 4711 [ 187.917838][ T5719] tipc: Enabled bearer , priority 0 [ 188.023823][ T5727] device syzkaller0 entered promiscuous mode [ 188.237110][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 188.243195][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 188.369437][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 189.227218][ T5746] syz.1.270 (5746) used greatest stack depth: 17872 bytes left [ 189.246489][ T4173] tipc: Node number set to 3917861098 [ 189.366307][ T5751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.129541][ T5727] tipc: Resetting bearer [ 192.502039][ T5727] tipc: Disabling bearer [ 192.658283][ T5751] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 192.727950][ T5751] bond1: (slave macvlan3): making interface the new active one [ 192.774409][ T5751] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 192.930663][ T5790] loop1: detected capacity change from 0 to 32768 [ 192.996853][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.281 (5790) [ 193.025938][ T5756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.274'. [ 193.036727][ T5718] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 193.118740][ T5789] xt_recent: Unsupported userspace flags (000000de) [ 193.456144][ T5790] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 193.464966][ T5790] BTRFS info (device loop1): enabling ssd optimizations [ 193.471967][ T5790] BTRFS info (device loop1): using spread ssd allocation scheme [ 193.479843][ T5790] BTRFS info (device loop1): use zlib compression, level 3 [ 193.487122][ T5790] BTRFS info (device loop1): metadata ratio 0 [ 193.493219][ T5790] BTRFS error (device loop1): unrecognized commit_interval value 0x0000000080000040 [ 193.504750][ T5790] BTRFS error (device loop1): open_ctree failed: -22 [ 193.771404][ T5812] loop5: detected capacity change from 0 to 128 [ 194.844165][ T5812] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.350702][ T5824] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.186278][ T5812] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.202600][ T5722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5722) [ 196.517593][ T5833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 200.370811][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.384161][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.811580][ T4290] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.123277][ T4290] usb 1-1: Using ep0 maxpacket: 8 [ 203.481128][ T4290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.173105][ T4290] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 204.295412][ T4290] usb 1-1: can't read configurations, error -71 [ 209.080207][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.4.309'. [ 209.161682][ T5930] loop0: detected capacity change from 0 to 256 [ 210.317563][ T5930] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 210.609385][ T5937] loop5: detected capacity change from 0 to 128 [ 210.777039][ T5941] attempt to access beyond end of device [ 210.777039][ T5941] loop5: rw=2049, want=865, limit=128 [ 210.886584][ T5940] netlink: 14 bytes leftover after parsing attributes in process `syz.4.311'. [ 210.976218][ T5937] attempt to access beyond end of device [ 210.976218][ T5937] loop5: rw=524288, want=369, limit=128 [ 211.055094][ T5937] attempt to access beyond end of device [ 211.055094][ T5937] loop5: rw=0, want=153, limit=128 [ 211.144896][ T5937] attempt to access beyond end of device [ 211.144896][ T5937] loop5: rw=0, want=153, limit=128 [ 211.242456][ T5937] attempt to access beyond end of device [ 211.242456][ T5937] loop5: rw=0, want=153, limit=128 [ 211.287811][ T5951] loop4: detected capacity change from 0 to 64 [ 211.337744][ T5937] attempt to access beyond end of device [ 211.337744][ T5937] loop5: rw=0, want=153, limit=128 [ 211.426943][ T5937] attempt to access beyond end of device [ 211.426943][ T5937] loop5: rw=0, want=153, limit=128 [ 211.440613][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 213.636713][ T5965] netlink: 'syz.5.315': attribute type 2 has an invalid length. [ 213.645766][ T5965] netlink: 'syz.5.315': attribute type 1 has an invalid length. [ 214.340922][ T5979] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.316'. [ 214.351400][ T5979] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 214.351482][ T5979] CPU: 0 PID: 5979 Comm: syz.1.316 Not tainted syzkaller #0 [ 214.351506][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 214.351523][ T5979] Call Trace: [ 214.351530][ T5979] [ 214.351540][ T5979] dump_stack_lvl+0x188/0x250 [ 214.351575][ T5979] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 214.351603][ T5979] ? show_regs_print_info+0x20/0x20 [ 214.351627][ T5979] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 214.351665][ T5979] sysfs_warn_dup+0x8a/0xa0 [ 214.351687][ T5979] sysfs_do_create_link_sd+0xc0/0x110 [ 214.351712][ T5979] device_add+0x7ed/0xfb0 [ 214.351746][ T5979] wiphy_register+0x1e81/0x2c30 [ 214.351789][ T5979] ? cfg80211_event_work+0x40/0x40 [ 214.351812][ T5979] ? minstrel_ht_alloc+0x808/0x980 [ 214.351842][ T5979] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 214.351873][ T5979] ieee80211_register_hw+0x2aa1/0x3af0 [ 214.351916][ T5979] ? ieee80211_tasklet_handler+0x20/0x20 [ 214.351938][ T5979] ? debug_init+0x1/0x1d0 [ 214.351971][ T5979] ? kasan_check_range+0x92/0x290 [ 214.352002][ T5979] ? memset+0x1e/0x40 [ 214.352026][ T5979] ? hrtimer_init+0x10c/0x220 [ 214.352053][ T5979] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 214.352099][ T5979] hwsim_new_radio_nl+0xa6f/0xc40 [ 214.352139][ T5979] genl_rcv_msg+0xcea/0xf90 [ 214.352161][ T5979] ? lock_chain_count+0x20/0x20 [ 214.352196][ T5979] ? genl_bind+0x380/0x380 [ 214.352230][ T5979] ? verify_lock_unused+0x140/0x140 [ 214.352257][ T5979] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 214.352297][ T5979] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 214.352341][ T5979] netlink_rcv_skb+0x1f5/0x440 [ 214.352366][ T5979] ? genl_bind+0x380/0x380 [ 214.352389][ T5979] ? netlink_ack+0xb50/0xb50 [ 214.352413][ T5979] ? __lock_acquire+0x7d10/0x7d10 [ 214.352444][ T5979] ? down_read+0x1aa/0x2e0 [ 214.352470][ T5979] genl_rcv+0x24/0x40 [ 214.352489][ T5979] netlink_unicast+0x774/0x920 [ 214.352525][ T5979] netlink_sendmsg+0x8ba/0xbe0 [ 214.352555][ T5979] ? netlink_getsockopt+0x570/0x570 [ 214.352579][ T5979] ? aa_sock_msg_perm+0x94/0x150 [ 214.352604][ T5979] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.352627][ T5979] ? security_socket_sendmsg+0x7c/0xa0 [ 214.352650][ T5979] ? netlink_getsockopt+0x570/0x570 [ 214.352671][ T5979] ____sys_sendmsg+0x5b7/0x8f0 [ 214.352704][ T5979] ? __sys_sendmsg_sock+0x30/0x30 [ 214.352738][ T5979] ? import_iovec+0x6f/0xa0 [ 214.352767][ T5979] ___sys_sendmsg+0x236/0x2e0 [ 214.352800][ T5979] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.352866][ T5979] __se_sys_sendmsg+0x1af/0x290 [ 214.352893][ T5979] ? __x64_sys_sendmsg+0x80/0x80 [ 214.352915][ T5979] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.352960][ T5979] ? lockdep_hardirqs_on+0x94/0x140 [ 214.352988][ T5979] do_syscall_64+0x4c/0xa0 [ 214.353008][ T5979] ? clear_bhb_loop+0x30/0x80 [ 214.353028][ T5979] ? clear_bhb_loop+0x30/0x80 [ 214.353051][ T5979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.353077][ T5979] RIP: 0033:0x7f67f350deb9 [ 214.353097][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.353115][ T5979] RSP: 002b:00007f67f1727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.353141][ T5979] RAX: ffffffffffffffda RBX: 00007f67f3789180 RCX: 00007f67f350deb9 [ 214.353158][ T5979] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.353173][ T5979] RBP: 00007f67f357bc1f R08: 0000000000000000 R09: 0000000000000000 [ 214.353188][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.353201][ T5979] R13: 00007f67f3789218 R14: 00007f67f3789180 R15: 00007ffc5f909a18 [ 214.353234][ T5979] [ 216.482095][ T6001] loop5: detected capacity change from 0 to 256 [ 219.525200][ T6017] loop5: detected capacity change from 0 to 1024 [ 219.617669][ T6017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.846709][ T6017] cgroup: fork rejected by pids controller in /syz5 [ 230.113742][ T6224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.212233][ T6224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.314507][ T4621] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 230.504701][ T6224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.592513][ T4621] usb 1-1: Using ep0 maxpacket: 8 [ 230.991863][ T6224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.030719][ T4621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 231.096532][ T6224] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.108998][ T6224] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.120826][ T6224] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.134550][ T6224] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.415720][ T4621] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 232.100876][ T4621] usb 1-1: can't read configurations, error -71 [ 232.301717][ T6250] sctp: failed to load transform for md5: -2 [ 232.308078][ T6260] sctp: failed to load transform for md5: -2 [ 232.656523][ T6255] sctp: failed to load transform for md5: -2 [ 234.529959][ T6314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.273703][ T6342] device syzkaller0 entered promiscuous mode [ 237.287494][ T6342] TC_ACT_REPEAT abuse ? [ 242.096474][ T6408] device syzkaller0 entered promiscuous mode [ 244.375006][ T6426] Illegal XDP return value 4294967274, expect packet loss! [ 246.123413][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 246.770148][ T6448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.355684][ T6471] Cannot find del_set index 286 as target [ 256.203141][ T6525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.979945][ T6553] netlink: 220 bytes leftover after parsing attributes in process `syz.5.414'. [ 262.876577][ T6582] loop0: detected capacity change from 0 to 512 [ 263.062557][ T6600] overlayfs: failed to clone upperpath [ 263.640765][ T6582] EXT4-fs (loop0): Ignoring removed nobh option [ 263.703058][ T6611] ubi31: attaching mtd0 [ 263.717815][ T6611] ubi31: scanning is finished [ 263.722605][ T6611] ubi31: empty MTD device detected [ 264.009923][ T6611] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 264.018535][ T6611] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 264.026094][ T6611] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 264.033303][ T6611] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 264.040892][ T6611] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 264.047945][ T6611] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 264.056156][ T6611] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 147777823 [ 264.066293][ T6611] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 264.122743][ T6612] ubi31: background thread "ubi_bgt31d" started, PID 6612 [ 264.416845][ T6609] loop5: detected capacity change from 0 to 512 [ 264.447538][ T6609] EXT4-fs (loop5): Ignoring removed nobh option [ 264.474251][ T6582] EXT4-fs: failed to create workqueue [ 264.508894][ T6582] EXT4-fs (loop0): mount failed [ 265.490607][ T6609] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.428: iget: bad i_size value: 38620345925642 [ 265.566694][ T6609] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.428: couldn't read orphan inode 15 (err -117) [ 265.580783][ T6609] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 265.649951][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.656834][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.090213][ T6641] tipc: Started in network mode [ 268.133621][ T6641] tipc: Node identity 4, cluster identity 4711 [ 268.158316][ T6641] tipc: Node number set to 4 [ 269.223263][ T6683] ipt_REJECT: ECHOREPLY no longer supported. [ 271.381807][ T6725] loop0: detected capacity change from 0 to 64 [ 274.551113][ T26] audit: type=1326 audit(1770434646.437:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 274.573372][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.635542][ T26] audit: type=1326 audit(1770434646.493:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 274.674505][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 276.010190][ T6782] loop0: detected capacity change from 0 to 40427 [ 276.037848][ T26] audit: type=1326 audit(1770434646.493:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.069084][ T26] audit: type=1326 audit(1770434646.493:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.123204][ T26] audit: type=1326 audit(1770434646.493:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.130307][ T6782] F2FS-fs (loop0): invalid crc value [ 276.151976][ T26] audit: type=1326 audit(1770434646.493:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.174116][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.200166][ T6782] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.242956][ T6782] F2FS-fs (loop0): Start checkpoint disabled! [ 276.255164][ T6782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 276.288533][ T26] audit: type=1326 audit(1770434646.493:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.314000][ T26] audit: type=1326 audit(1770434646.493:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.553363][ T26] audit: type=1326 audit(1770434646.493:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 276.614729][ T26] audit: type=1326 audit(1770434646.493:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 277.862361][ T6818] delete_channel: no stack [ 277.899586][ T6816] device syzkaller0 entered promiscuous mode [ 278.145089][ T4271] attempt to access beyond end of device [ 278.145089][ T4271] loop0: rw=2049, want=40984, limit=40427 [ 278.640070][ T6844] TC_ACT_REPEAT abuse ? [ 281.898364][ T6880] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 281.939138][ T6875] loop1: detected capacity change from 0 to 4096 [ 282.009678][ T6885] netlink: 'syz.5.492': attribute type 1 has an invalid length. [ 282.529699][ T6875] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.553107][ T6875] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002] [ 283.478701][ T6875] System zones: 0-5 [ 283.501633][ T6875] EXT4-fs: error -4 creating inode table initialization thread [ 283.535447][ T6875] EXT4-fs (loop1): mount failed [ 283.803137][ T6928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 287.087648][ T6946] device wlan0 entered promiscuous mode [ 287.315684][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 287.344451][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.386768][ T6970] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 287.468275][ T6284] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 287.517054][ T6983] loop5: detected capacity change from 0 to 512 [ 287.616142][ T5308] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.618822][ T6983] EXT4-fs (loop5): Ignoring removed nobh option [ 288.643606][ T6970] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 288.909774][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 289.263267][ T6983] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.510: iget: bad i_size value: 38620345925642 [ 289.514864][ T6983] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.510: couldn't read orphan inode 15 (err -117) [ 289.605831][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 289.690297][ T6983] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 289.738572][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 295.877854][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 295.924589][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 296.169535][ T7078] loop5: detected capacity change from 0 to 2048 [ 296.210907][ T7078] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 296.273273][ T7078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.005669][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.015190][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.022767][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.343503][ T7107] device syzkaller0 entered promiscuous mode [ 297.648198][ T7108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.983984][ T7139] device syzkaller0 entered promiscuous mode [ 303.380690][ T7174] bond0: (slave macvlan2): Error: Slave device does not support XDP [ 306.298415][ T7199] loop4: detected capacity change from 0 to 512 [ 306.636124][ T7199] EXT4-fs (loop4): Ignoring removed nobh option [ 307.065081][ T7199] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.567: iget: bad i_size value: 38620345925642 [ 307.105463][ T7199] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.567: couldn't read orphan inode 15 (err -117) [ 307.191096][ T7199] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 307.227142][ T7206] kAFS: unable to lookup cell '' [ 310.688142][ T7238] loop4: detected capacity change from 0 to 4096 [ 310.792470][ T7238] __ntfs_warning: 29 callbacks suppressed [ 310.792487][ T7238] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 310.979714][ T7238] ntfs: volume version 3.1. [ 313.062894][ T7273] device syzkaller0 entered promiscuous mode [ 322.570639][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 322.871922][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 323.792065][ T7361] device syzkaller0 entered promiscuous mode [ 324.260535][ T7367] netlink: 116 bytes leftover after parsing attributes in process `syz.4.611'. [ 324.938432][ T7378] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.615' resets device [ 325.238584][ T7378] loop1: detected capacity change from 0 to 4096 [ 325.286622][ T7378] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 325.351684][ T7378] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 325.471653][ T7378] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 325.480487][ T7378] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 325.507414][ T7378] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 325.520035][ T7378] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 325.561879][ T7378] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 325.572188][ T7378] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 325.603287][ T7378] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 325.621195][ T7378] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 325.653143][ T7378] ntfs: volume version 3.1. [ 327.066752][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 327.138214][ T7408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.255420][ T7416] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 327.278492][ T144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.400452][ T7408] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 327.438815][ T144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.490170][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 327.510102][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 328.415469][ T7431] loop1: detected capacity change from 0 to 1024 [ 328.524762][ T7431] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 328.556264][ T7431] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.474264][ T144] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 329.534359][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 329.587382][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 329.587382][ T144] [ 329.609117][ T144] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 329.641240][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 329.683581][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 329.683581][ T144] [ 329.932269][ T7446] tmpfs: Unknown parameter 'grpquota' [ 332.458774][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.470203][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.886063][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.639'. [ 334.035442][ T7476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.903742][ T7474] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 334.969647][ T7492] loop4: detected capacity change from 0 to 1024 [ 337.053069][ T4330] hfsplus: b-tree write err: -5, ino 4 [ 342.953672][ T7547] sd 0:0:1:0: device reset [ 344.767248][ T7562] loop4: detected capacity change from 0 to 256 [ 344.876471][ T7562] UDF-fs: bad mount option "d FUf" or missing value [ 345.289838][ T7567] sctp: failed to load transform for md5: -2 [ 353.846606][ T7632] loop0: detected capacity change from 0 to 1024 [ 354.810862][ T7651] loop4: detected capacity change from 0 to 256 [ 355.239907][ T7632] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 355.327007][ T7661] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 358.054547][ T7684] loop4: detected capacity change from 0 to 512 [ 361.277028][ T7684] EXT4-fs: failed to create workqueue [ 361.294429][ T7684] EXT4-fs (loop4): mount failed [ 362.481524][ T7705] loop1: detected capacity change from 0 to 32768 [ 363.081822][ T7710] tipc: Enabled bearer , priority 0 [ 363.163692][ T7711] device syzkaller0 entered promiscuous mode [ 364.007803][ T7711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.700'. [ 364.173292][ T7712] tipc: Resetting bearer [ 364.510842][ T7709] tipc: Resetting bearer [ 364.559889][ T7709] tipc: Disabling bearer [ 364.608961][ T4173] tipc: Node number set to 1018889618 [ 373.606184][ T7766] tipc: Enabling of bearer rejected, failed to enable media [ 377.762526][ T7799] device bridge2 entered promiscuous mode [ 378.591840][ T4621] Bluetooth: hci5: command 0x0409 tx timeout [ 379.209686][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.041291][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.061537][ T7822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.647462][ T7835] Device name cannot be null; rc = [-22] [ 381.306365][ T4621] Bluetooth: hci5: command 0x041b tx timeout [ 382.245658][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 382.376307][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.414437][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.547975][ T7792] device bridge_slave_0 entered promiscuous mode [ 382.564265][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.598741][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.634824][ T7792] device bridge_slave_1 entered promiscuous mode [ 382.716698][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.734728][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.781806][ T7792] team0: Port device team_slave_0 added [ 382.799867][ T7792] team0: Port device team_slave_1 added [ 382.835103][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.843258][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.876774][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.890837][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.899521][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.933630][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.027024][ T7792] device hsr_slave_0 entered promiscuous mode [ 383.271684][ T7792] device hsr_slave_1 entered promiscuous mode [ 383.306620][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.638418][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 383.725739][ T7792] Cannot create hsr debugfs directory [ 384.995533][ T7882] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 385.003327][ T7882] netlink: 17 bytes leftover after parsing attributes in process `syz.1.748'. [ 386.731130][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 386.770425][ T7792] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.809852][ T7792] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.839447][ T7792] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.851900][ T7792] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.125145][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.142181][ T5718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.151203][ T5718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.164673][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.223309][ T7920] netlink: 68 bytes leftover after parsing attributes in process `syz.5.750'. [ 389.664180][ T7792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.679406][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.194475][ T7928] syz.5.752 sent an empty control message without MSG_MORE. [ 390.985435][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.015506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.037225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.045732][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.052882][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.060868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.090872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.104783][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.111933][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.123299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.211845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.430496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.209433][ T7960] Cannot find del_set index 4 as target [ 394.168769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.217029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.277483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.326313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.354220][ T7967] loop5: detected capacity change from 0 to 256 [ 394.368137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.392624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.419551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.457304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.480804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.504827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.530725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.587302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.382183][ T7977] netlink: 'syz.5.761': attribute type 3 has an invalid length. [ 395.389910][ T7977] netlink: 'syz.5.761': attribute type 1 has an invalid length. [ 397.018284][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.029994][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.515398][ T7994] loop1: detected capacity change from 0 to 2048 [ 397.547676][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.568494][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.431249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.459162][ T7994] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 398.461951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.500223][ T7994] UDF-fs: Scanning with blocksize 512 failed [ 398.501555][ T7792] device veth0_vlan entered promiscuous mode [ 398.537739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.549732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.566040][ T7994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.602044][ T7792] device veth1_vlan entered promiscuous mode [ 398.639335][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.714580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.756117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.779566][ T7792] device veth0_macvtap entered promiscuous mode [ 398.910573][ T7792] device veth1_macvtap entered promiscuous mode [ 399.484997][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.756229][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.023643][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.067110][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.097846][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.307377][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.558729][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.727850][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.878367][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.143271][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.357795][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.487902][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.544326][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.669945][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.762437][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.933910][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.995342][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.027284][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.048801][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.080714][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.705486][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.769518][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.843337][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.888180][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.898728][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.909911][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.922102][ T7792] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.931211][ T7792] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.939939][ T7792] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.948695][ T7792] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.981990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.030014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.255678][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.263530][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.314916][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.324168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 405.378236][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.432545][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.695858][ T8081] loop4: detected capacity change from 0 to 256 [ 408.953923][ T8069] ceph: No mds server is up or the cluster is laggy [ 408.998263][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 409.033187][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 409.378560][ T21] libceph: connect (1)[c::]:6789 error -101 [ 409.397345][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 409.512431][ T8081] FAT-fs (loop4): Directory bread(block 64) failed [ 409.519080][ T8081] FAT-fs (loop4): Directory bread(block 65) failed [ 409.525852][ T8081] FAT-fs (loop4): Directory bread(block 66) failed [ 409.532576][ T8081] FAT-fs (loop4): Directory bread(block 67) failed [ 409.539267][ T8081] FAT-fs (loop4): Directory bread(block 68) failed [ 409.545929][ T8081] FAT-fs (loop4): Directory bread(block 69) failed [ 409.552610][ T8081] FAT-fs (loop4): Directory bread(block 70) failed [ 409.559246][ T8081] FAT-fs (loop4): Directory bread(block 71) failed [ 409.566008][ T8081] FAT-fs (loop4): Directory bread(block 72) failed [ 409.572631][ T8081] FAT-fs (loop4): Directory bread(block 73) failed [ 409.868347][ T8081] attempt to access beyond end of device [ 409.868347][ T8081] loop4: rw=2049, want=1832, limit=256 [ 409.882271][ T8081] attempt to access beyond end of device [ 409.882271][ T8081] loop4: rw=2049, want=2288, limit=256 [ 410.776252][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 415.047411][ T8128] delete_channel: no stack [ 415.052836][ T8128] delete_channel: no stack [ 415.615443][ T8140] fuse: Unknown parameter '0x0000000000000003' [ 415.847428][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 423.794224][ T8229] device syzkaller0 entered promiscuous mode [ 424.323262][ T8233] loop5: detected capacity change from 0 to 4096 [ 424.995570][ T4621] Bluetooth: hci4: command 0x0406 tx timeout [ 427.407712][ T8251] tipc: Started in network mode [ 427.417185][ T8251] tipc: Node identity b24f9be01b16, cluster identity 4711 [ 427.446194][ T8251] tipc: Enabled bearer , priority 0 [ 428.407597][ T8253] device syzkaller0 entered promiscuous mode [ 428.656894][ T21] tipc: Node number set to 2841222112 [ 429.980375][ T8251] tipc: Resetting bearer [ 430.837381][ T8251] tipc: Disabling bearer [ 437.128463][ T8301] loop6: detected capacity change from 0 to 4096 [ 437.181267][ T8301] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 437.558179][ T8301] loop6: detected capacity change from 0 to 2048 [ 440.404823][ T8301] EXT4-fs warning (device loop6): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop6. [ 440.949937][ T8329] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 443.486906][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.859'. [ 444.372635][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 444.372653][ T26] audit: type=1800 audit(1770434804.099:130): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.858" name="SYSV798dd818" dev="hugetlbfs" ino=0 res=0 errno=0 [ 444.648631][ T8371] loop1: detected capacity change from 0 to 1024 [ 445.157361][ T8384] loop5: detected capacity change from 0 to 512 [ 445.454927][ T8387] loop6: detected capacity change from 0 to 16 [ 445.661758][ T8387] erofs: (device loop6): mounted with root inode @ nid 36. [ 445.673900][ T8387] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 445.684151][ T8387] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 445.692969][ T8387] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 445.703274][ T8387] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 445.713115][ T8387] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 445.719710][ T8384] EXT4-fs (loop5): inline encryption not supported [ 445.721702][ T8387] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 445.728100][ T8384] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 445.841370][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 446.810139][ T8384] EXT4-fs (loop5): Ignoring removed bh option [ 446.816792][ T8384] EXT4-fs (loop5): Test dummy encryption mode enabled [ 446.849007][ T8384] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.945005][ T8384] EXT4-fs (loop5): 1 truncate cleaned up [ 446.965115][ T8384] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 447.147723][ T8390] netlink: 34 bytes leftover after parsing attributes in process `syz.4.868'. [ 447.153884][ C0] hrtimer: interrupt took 210734 ns [ 447.319974][ T8382] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 448.360366][ T5921] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 449.601590][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.697477][ T4280] hfsplus: b-tree write err: -5, ino 4 [ 450.986206][ T5921] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 450.995281][ T5921] usb 5-1: can't read configurations, error -71 [ 454.551399][ T8499] loop4: detected capacity change from 0 to 64 [ 457.532017][ T8517] binder: 8513:8517 ioctl c0306201 0 returned -14 [ 457.540469][ T8517] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 460.456548][ T8545] delete_channel: no stack [ 460.469382][ T8545] delete_channel: no stack [ 462.707076][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.713452][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.790630][ T8590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.341951][ T26] audit: type=1326 audit(1770434823.938:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 465.223854][ T26] audit: type=1326 audit(1770434823.938:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 466.185691][ T26] audit: type=1326 audit(1770434823.948:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 466.284540][ T26] audit: type=1326 audit(1770434823.948:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 466.308350][ T26] audit: type=1326 audit(1770434823.948:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 466.352853][ T26] audit: type=1326 audit(1770434823.948:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 466.561737][ T8620] mmap: syz.2.922 (8620) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 468.502499][ T26] audit: type=1326 audit(1770434823.948:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 468.573501][ T8624] loop5: detected capacity change from 0 to 764 [ 468.694843][ T26] audit: type=1326 audit(1770434823.948:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 468.731519][ T26] audit: type=1326 audit(1770434823.948:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 469.016068][ T26] audit: type=1326 audit(1770434823.948:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ce902eb9 code=0x7ffc0000 [ 470.069810][ T8638] loop6: detected capacity change from 0 to 512 [ 470.443359][ T8645] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 471.268206][ T8638] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 471.285323][ T8638] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.577167][ T8681] loop1: detected capacity change from 0 to 512 [ 473.639363][ T8681] EXT4-fs (loop1): inline encryption not supported [ 474.709656][ T8681] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 474.791796][ T8681] EXT4-fs (loop1): inline encryption not supported [ 475.020406][ T8698] loop6: detected capacity change from 0 to 7 [ 475.305556][ T8698] Dev loop6: unable to read RDB block 7 [ 476.295058][ T8698] loop6: unable to read partition table [ 476.300994][ T8698] loop6: partition table beyond EOD, truncated [ 476.316078][ T8698] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 481.936921][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 481.936971][ T26] audit: type=1326 audit(1770434840.430:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67f350deb9 code=0x0 [ 482.217931][ T8730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.949'. [ 482.227138][ T8730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.949'. [ 486.032069][ T8778] loop6: detected capacity change from 0 to 256 [ 486.065242][ T8776] loop5: detected capacity change from 0 to 256 [ 486.122063][ T8776] FAT-fs (loop5): Unrecognized mount option ">}G(NwgԗT@S'[9_=Th?WJ%I?9 &^>0l!;M" or missing value [ 486.219868][ T8783] loop1: detected capacity change from 0 to 1024 [ 486.567328][ T8788] netlink: 'syz.6.964': attribute type 1 has an invalid length. [ 486.905583][ T8790] overlayfs: missing 'lowerdir' [ 487.521922][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.658269][ T8816] ipt_CLUSTERIP: Please specify destination IP [ 492.547627][ T8827] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 493.043083][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 494.957866][ T8851] loop6: detected capacity change from 0 to 512 [ 496.036436][ T8851] EXT4-fs (loop6): Test dummy encryption mode enabled [ 497.153478][ T8851] EXT4-fs (loop6): 1 truncate cleaned up [ 497.159222][ T8851] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,test_dummy_encryption=v1,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none. [ 497.181934][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.323652][ T8867] loop5: detected capacity change from 0 to 512 [ 497.779559][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.989'. [ 498.123395][ T8867] EXT4-fs (loop5): inline encryption not supported [ 498.196731][ T8867] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 498.444959][ T8867] EXT4-fs (loop5): Ignoring removed bh option [ 498.568815][ T8867] EXT4-fs (loop5): Test dummy encryption mode enabled [ 498.575988][ T8867] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 498.826243][ T8867] EXT4-fs (loop5): 1 truncate cleaned up [ 498.856135][ T8867] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 499.720758][ T8867] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 504.011920][ T26] audit: type=1326 audit(1770434860.335:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.104589][ T8918] loop6: detected capacity change from 0 to 512 [ 504.114522][ T26] audit: type=1326 audit(1770434860.335:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.138840][ T26] audit: type=1326 audit(1770434860.344:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.218799][ T26] audit: type=1326 audit(1770434860.344:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.243761][ T8921] loop5: detected capacity change from 0 to 512 [ 504.276255][ T8921] EXT4-fs (loop5): inline encryption not supported [ 504.297046][ T8921] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 504.314764][ T8921] EXT4-fs (loop5): Ignoring removed bh option [ 504.325986][ T8921] EXT4-fs (loop5): Test dummy encryption mode enabled [ 504.348332][ T8921] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 504.443497][ T8918] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 504.475457][ T26] audit: type=1326 audit(1770434860.344:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.618484][ T26] audit: type=1326 audit(1770434860.344:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 504.983488][ T26] audit: type=1326 audit(1770434860.344:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 505.027716][ T26] audit: type=1326 audit(1770434860.344:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 505.068551][ T26] audit: type=1326 audit(1770434860.344:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 505.128556][ T8921] EXT4-fs (loop5): 1 truncate cleaned up [ 505.344799][ T8918] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 505.363879][ T8921] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 505.408580][ T8936] loop4: detected capacity change from 0 to 764 [ 505.507352][ T8918] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.639286][ T26] audit: type=1326 audit(1770434860.344:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.2.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009e3c1eb9 code=0x7ffc0000 [ 506.918252][ T8951] loop1: detected capacity change from 0 to 512 [ 506.936452][ T8921] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 507.101093][ T8960] netlink: 'syz.2.1005': attribute type 3 has an invalid length. [ 507.109106][ T8960] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 507.635270][ T8951] EXT4-fs (loop1): inline encryption not supported [ 507.705637][ T8951] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 508.190997][ T8951] EXT4-fs (loop1): Ignoring removed bh option [ 508.687660][ T8951] EXT4-fs (loop1): Test dummy encryption mode enabled [ 508.695039][ T8951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 508.771336][ T8951] EXT4-fs (loop1): 1 truncate cleaned up [ 508.779590][ T8951] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 508.798247][ T4173] Bluetooth: hci5: command 0x0406 tx timeout [ 509.051825][ T8951] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 511.272272][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.295235][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.328559][ T9002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.445304][ T9012] loop4: detected capacity change from 0 to 512 [ 512.575540][ T9012] EXT4-fs (loop4): inline encryption not supported [ 512.735963][ T9012] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 512.752315][ T9012] EXT4-fs (loop4): Ignoring removed bh option [ 512.789806][ T9012] EXT4-fs (loop4): Test dummy encryption mode enabled [ 512.820736][ T9012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 513.617493][ T9012] EXT4-fs (loop4): 1 truncate cleaned up [ 513.623306][ T9012] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 513.938505][ T9012] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 515.171629][ T9035] loop6: detected capacity change from 0 to 4096 [ 515.188028][ T9035] ntfs3: Unknown parameter '0xffffffffffffffff' [ 517.814224][ T9065] loop6: detected capacity change from 0 to 2048 [ 518.804881][ T9065] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 518.871900][ T9065] UDF-fs: Scanning with blocksize 512 failed [ 518.931911][ T9065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.125450][ T9078] loop4: detected capacity change from 0 to 256 [ 521.569096][ T9106] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 521.786271][ T9109] loop5: detected capacity change from 0 to 1024 [ 521.909801][ T9109] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 521.920962][ T9109] hfsplus: xattr search failed [ 522.402729][ T5718] hfsplus: b-tree write err: -5, ino 4 [ 523.131000][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1048'. [ 523.771478][ T9134] loop5: detected capacity change from 0 to 256 [ 524.352626][ T9139] loop1: detected capacity change from 0 to 40427 [ 525.005526][ T9139] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 525.013948][ T9139] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 525.028248][ T9139] F2FS-fs (loop1): invalid crc value [ 525.064735][ T9139] F2FS-fs (loop1): Found nat_bits in checkpoint [ 525.144950][ T9139] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 525.152559][ T9139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.412740][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.434469][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.749633][ T9191] syz.6.1065 (9191): /proc/9188/oom_adj is deprecated, please use /proc/9188/oom_score_adj instead. [ 533.214271][ T9200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1066'. [ 535.865658][ T9222] loop4: detected capacity change from 0 to 512 [ 536.898207][ T9222] EXT4-fs (loop4): inline encryption not supported [ 536.918896][ T9222] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 536.941177][ T9222] EXT4-fs (loop4): Ignoring removed bh option [ 536.984498][ T9222] EXT4-fs (loop4): Test dummy encryption mode enabled [ 537.021729][ T9222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 537.082795][ T9222] EXT4-fs (loop4): 1 truncate cleaned up [ 537.280731][ T9222] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 537.783134][ T9222] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 538.551166][ T9261] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 541.158137][ T9280] loop5: detected capacity change from 0 to 1024 [ 541.192327][ T9283] loop6: detected capacity change from 0 to 764 [ 541.335672][ T9285] loop1: detected capacity change from 0 to 1024 [ 541.376973][ T9280] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 541.609289][ T9280] hfsplus: xattr search failed [ 542.401656][ T9285] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 542.478205][ T9285] hfsplus: xattr search failed [ 542.640935][ T5308] hfsplus: b-tree write err: -5, ino 4 [ 542.722759][ T9298] loop4: detected capacity change from 0 to 256 [ 542.736361][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 543.486931][ T9309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.149082][ T9318] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 549.325246][ T9350] delete_channel: no stack [ 551.484214][ T9375] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 553.408568][ T9392] input: syz1 as /devices/virtual/input/input6 [ 556.798043][ T9399] IPVS: length: 528 != 8 [ 561.018090][ T9454] loop1: detected capacity change from 0 to 2048 [ 561.144147][ T9454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.047827][ T9484] loop1: detected capacity change from 0 to 256 [ 565.075812][ T9488] ubi31: detaching mtd0 [ 565.972903][ T9488] ubi31: mtd0 is detached [ 566.065666][ T9484] UDF-fs: bad mount option "d FUf" or missing value [ 566.517126][ T9499] sctp: failed to load transform for md5: -2 [ 567.528696][ T9516] "syz.1.1146" (9516) uses obsolete ecb(arc4) skcipher [ 569.930019][ T9521] delete_channel: no stack [ 570.209617][ T9521] delete_channel: no stack [ 573.133978][ T9554] block device autoloading is deprecated and will be removed. [ 574.706047][ T9574] loop5: detected capacity change from 0 to 512 [ 574.882192][ T9574] EXT4-fs (loop5): Ignoring removed nobh option [ 574.988255][ T9574] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1162: iget: bad i_size value: 38620345925642 [ 575.033909][ T9574] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1162: couldn't read orphan inode 15 (err -117) [ 575.046680][ T9574] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 575.922912][ T9581] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 576.970003][ T4781] [ 576.972392][ T4781] ====================================================== [ 576.979692][ T4781] WARNING: possible circular locking dependency detected [ 576.986751][ T4781] syzkaller #0 Not tainted [ 576.991236][ T4781] ------------------------------------------------------ [ 576.998276][ T4781] syz-executor/4781 is trying to acquire lock: [ 577.004450][ T4781] ffff888020668938 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 577.014249][ T4781] [ 577.014249][ T4781] but task is already holding lock: [ 577.021639][ T4781] ffff8881476eb468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 577.030499][ T4781] [ 577.030499][ T4781] which lock already depends on the new lock. [ 577.030499][ T4781] [ 577.041534][ T4781] [ 577.041534][ T4781] the existing dependency chain (in reverse order) is: [ 577.050570][ T4781] [ 577.050570][ T4781] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 577.058098][ T4781] __mutex_lock_common+0x1e3/0x2400 [ 577.063853][ T4781] mutex_lock_killable_nested+0x17/0x20 [ 577.069942][ T4781] lo_open+0x6a/0x100 [ 577.074469][ T4781] blkdev_get_whole+0x90/0x390 [ 577.079780][ T4781] blkdev_get_by_dev+0x2d0/0xa60 [ 577.085264][ T4781] blkdev_open+0x12d/0x2c0 [ 577.090222][ T4781] do_dentry_open+0x7ff/0xf80 [ 577.095440][ T4781] path_openat+0x26f5/0x2fa0 [ 577.100581][ T4781] do_filp_open+0x1e2/0x410 [ 577.105634][ T4781] do_sys_openat2+0x150/0x4b0 [ 577.110849][ T4781] __x64_sys_openat+0x135/0x160 [ 577.116241][ T4781] do_syscall_64+0x4c/0xa0 [ 577.121203][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.127654][ T4781] [ 577.127654][ T4781] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 577.135546][ T4781] __mutex_lock_common+0x1e3/0x2400 [ 577.141385][ T4781] mutex_lock_nested+0x17/0x20 [ 577.146727][ T4781] blkdev_get_by_dev+0x157/0xa60 [ 577.152207][ T4781] swsusp_check+0xa1/0x2b0 [ 577.157171][ T4781] software_resume+0xc6/0x3b0 [ 577.162392][ T4781] resume_store+0xe4/0x130 [ 577.167350][ T4781] kernfs_fop_write_iter+0x379/0x4c0 [ 577.173184][ T4781] vfs_write+0x745/0xd60 [ 577.177969][ T4781] ksys_write+0x152/0x260 [ 577.182837][ T4781] do_syscall_64+0x4c/0xa0 [ 577.187793][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.194233][ T4781] [ 577.194233][ T4781] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 577.202778][ T4781] __mutex_lock_common+0x1e3/0x2400 [ 577.208524][ T4781] mutex_lock_nested+0x17/0x20 [ 577.213850][ T4781] software_resume+0x7c/0x3b0 [ 577.219086][ T4781] resume_store+0xe4/0x130 [ 577.224047][ T4781] kernfs_fop_write_iter+0x379/0x4c0 [ 577.229880][ T4781] vfs_write+0x745/0xd60 [ 577.234669][ T4781] ksys_write+0x152/0x260 [ 577.239538][ T4781] do_syscall_64+0x4c/0xa0 [ 577.244502][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.250944][ T4781] [ 577.250944][ T4781] -> #3 (&of->mutex){+.+.}-{3:3}: [ 577.258211][ T4781] __mutex_lock_common+0x1e3/0x2400 [ 577.263964][ T4781] mutex_lock_nested+0x17/0x20 [ 577.269283][ T4781] kernfs_seq_start+0x51/0x3c0 [ 577.274608][ T4781] seq_read_iter+0x3c4/0xd50 [ 577.279759][ T4781] vfs_read+0x759/0xd60 [ 577.284467][ T4781] ksys_read+0x152/0x260 [ 577.289253][ T4781] do_syscall_64+0x4c/0xa0 [ 577.294218][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.300661][ T4781] [ 577.300661][ T4781] -> #2 (&p->lock){+.+.}-{3:3}: [ 577.307723][ T4781] __mutex_lock_common+0x1e3/0x2400 [ 577.313480][ T4781] mutex_lock_nested+0x17/0x20 [ 577.318795][ T4781] seq_read_iter+0xad/0xd50 [ 577.323843][ T4781] do_iter_readv_writev+0x47e/0x5f0 [ 577.329589][ T4781] do_iter_read+0x20b/0x7c0 [ 577.334639][ T4781] loop_process_work+0x16dd/0x24a0 [ 577.340298][ T4781] process_one_work+0x85f/0x1010 [ 577.345790][ T4781] worker_thread+0xaa6/0x1290 [ 577.351017][ T4781] kthread+0x436/0x520 [ 577.355635][ T4781] ret_from_fork+0x1f/0x30 [ 577.360602][ T4781] [ 577.360602][ T4781] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 577.369756][ T4781] process_one_work+0x7bb/0x1010 [ 577.375249][ T4781] worker_thread+0xaa6/0x1290 [ 577.380480][ T4781] kthread+0x436/0x520 [ 577.385125][ T4781] ret_from_fork+0x1f/0x30 [ 577.390098][ T4781] [ 577.390098][ T4781] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 577.398292][ T4781] __lock_acquire+0x2c42/0x7d10 [ 577.403695][ T4781] lock_acquire+0x19e/0x400 [ 577.408744][ T4781] flush_workqueue+0x16c/0x13d0 [ 577.414143][ T4781] drain_workqueue+0xcf/0x380 [ 577.419365][ T4781] destroy_workqueue+0x7b/0xb20 [ 577.424763][ T4781] __loop_clr_fd+0x234/0xb90 [ 577.429907][ T4781] blkdev_put+0x53f/0x7d0 [ 577.434784][ T4781] deactivate_locked_super+0x93/0xf0 [ 577.440619][ T4781] cleanup_mnt+0x42d/0x4e0 [ 577.445581][ T4781] task_work_run+0x125/0x1a0 [ 577.450733][ T4781] exit_to_user_mode_loop+0x10f/0x130 [ 577.456662][ T4781] exit_to_user_mode_prepare+0xee/0x180 [ 577.462756][ T4781] syscall_exit_to_user_mode+0x16/0x40 [ 577.468764][ T4781] do_syscall_64+0x58/0xa0 [ 577.473726][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.480166][ T4781] [ 577.480166][ T4781] other info that might help us debug this: [ 577.480166][ T4781] [ 577.490424][ T4781] Chain exists of: [ 577.490424][ T4781] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 577.490424][ T4781] [ 577.503920][ T4781] Possible unsafe locking scenario: [ 577.503920][ T4781] [ 577.511392][ T4781] CPU0 CPU1 [ 577.516778][ T4781] ---- ---- [ 577.522162][ T4781] lock(&lo->lo_mutex); [ 577.526516][ T4781] lock(&disk->open_mutex); [ 577.533647][ T4781] lock(&lo->lo_mutex); [ 577.540438][ T4781] lock((wq_completion)loop5); [ 577.545313][ T4781] [ 577.545313][ T4781] *** DEADLOCK *** [ 577.545313][ T4781] [ 577.553560][ T4781] 2 locks held by syz-executor/4781: [ 577.558865][ T4781] #0: ffff8880201f8518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 577.568230][ T4781] #1: ffff8881476eb468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 577.577497][ T4781] [ 577.577497][ T4781] stack backtrace: [ 577.583404][ T4781] CPU: 0 PID: 4781 Comm: syz-executor Not tainted syzkaller #0 [ 577.591008][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 577.601189][ T4781] Call Trace: [ 577.604493][ T4781] [ 577.607449][ T4781] dump_stack_lvl+0x188/0x250 [ 577.612165][ T4781] ? load_image+0x400/0x400 [ 577.616708][ T4781] ? show_regs_print_info+0x20/0x20 [ 577.622029][ T4781] ? print_circular_bug+0x12b/0x1a0 [ 577.627263][ T4781] check_noncircular+0x296/0x330 [ 577.632353][ T4781] ? add_chain_block+0x940/0x940 [ 577.637331][ T4781] ? lockdep_lock+0xf1/0x1f0 [ 577.642137][ T4781] ? mark_lock+0x94/0x320 [ 577.646508][ T4781] __lock_acquire+0x2c42/0x7d10 [ 577.651412][ T4781] ? verify_lock_unused+0x140/0x140 [ 577.656652][ T4781] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 577.662680][ T4781] ? verify_lock_unused+0x140/0x140 [ 577.667915][ T4781] ? __perf_event_task_sched_in+0x4e6/0x560 [ 577.673839][ T4781] ? verify_lock_unused+0x140/0x140 [ 577.679074][ T4781] ? memset+0x1e/0x40 [ 577.683156][ T4781] lock_acquire+0x19e/0x400 [ 577.687698][ T4781] ? flush_workqueue+0x150/0x13d0 [ 577.692759][ T4781] ? __mutex_trylock_common+0x155/0x260 [ 577.698337][ T4781] ? read_lock_is_recursive+0x10/0x10 [ 577.703753][ T4781] ? __init_swait_queue_head+0xa5/0x150 [ 577.709335][ T4781] flush_workqueue+0x16c/0x13d0 [ 577.714224][ T4781] ? flush_workqueue+0x150/0x13d0 [ 577.719295][ T4781] ? __lock_acquire+0x7d10/0x7d10 [ 577.724439][ T4781] ? lock_chain_count+0x20/0x20 [ 577.729317][ T4781] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 577.734807][ T4781] ? lockdep_hardirqs_off+0x70/0x100 [ 577.740127][ T4781] ? rcu_work_rcufn+0x120/0x120 [ 577.745007][ T4781] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 577.750684][ T4781] ? finish_wait+0xc0/0x1d0 [ 577.755227][ T4781] drain_workqueue+0xcf/0x380 [ 577.759943][ T4781] destroy_workqueue+0x7b/0xb20 [ 577.764829][ T4781] __loop_clr_fd+0x234/0xb90 [ 577.769452][ T4781] ? lo_release+0x172/0x1f0 [ 577.773979][ T4781] ? lo_open+0x100/0x100 [ 577.778269][ T4781] blkdev_put+0x53f/0x7d0 [ 577.782625][ T4781] deactivate_locked_super+0x93/0xf0 [ 577.787944][ T4781] cleanup_mnt+0x42d/0x4e0 [ 577.792394][ T4781] ? lockdep_hardirqs_on+0x94/0x140 [ 577.797628][ T4781] task_work_run+0x125/0x1a0 [ 577.802254][ T4781] exit_to_user_mode_loop+0x10f/0x130 [ 577.807659][ T4781] exit_to_user_mode_prepare+0xee/0x180 [ 577.813369][ T4781] syscall_exit_to_user_mode+0x16/0x40 [ 577.818953][ T4781] do_syscall_64+0x58/0xa0 [ 577.823412][ T4781] ? clear_bhb_loop+0x30/0x80 [ 577.828208][ T4781] ? clear_bhb_loop+0x30/0x80 [ 577.832917][ T4781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.838858][ T4781] RIP: 0033:0x7f15ce904117 [ 577.843313][ T4781] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 577.862960][ T4781] RSP: 002b:00007fffd9cfc888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 577.871415][ T4781] RAX: 0000000000000000 RBX: 00007f15ce96c71f RCX: 00007f15ce904117 [ 577.879422][ T4781] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd9cfc940 [ 577.887433][ T4781] RBP: 00007fffd9cfc940 R08: 00007fffd9cfd940 R09: 00000000ffffffff [ 577.895447][ T4781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd9cfd9d0 [ 577.903449][ T4781] R13: 00007f15ce96c71f R14: 0000000000085565 R15: 00007fffd9cfda10 [ 577.911453][ T4781]