last executing test programs: 12.548077774s ago: executing program 2 (id=4950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x8001, 0xf292) 11.893766946s ago: executing program 2 (id=4954): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0xa04000, &(0x7f0000000540)={[{@usrjquota_path={'usrjquota', 0x3d, './bus'}}]}, 0x1, 0x244, &(0x7f0000000680)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) unshare(0x62040200) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @random="7a28cd07effe", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 11.601886877s ago: executing program 0 (id=4955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="beba20a0c1e0ebebba36f9976f4534e406482dfcd42c0c15c5f860b9f0f210ab397fc037f4bae4d2492d041dcc130dddd97fef9ad9e9be51238c0ce5b63776383b9d57a67e81bed665925a1432d6dce425efc13c7143fe0a02a74ba06e7c29c5", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) 9.925001912s ago: executing program 0 (id=4956): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r7}, 0x8) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 8.800421165s ago: executing program 0 (id=4962): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001800000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.568031789s ago: executing program 4 (id=4963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 7.502607789s ago: executing program 0 (id=4964): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000280)={'bond_slave_1\x00'}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfb36b7c5eda090f7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mp']) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 7.434568329s ago: executing program 2 (id=4965): socket(0x10, 0x803, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 7.434235079s ago: executing program 3 (id=4966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="beba20a0c1e0ebebba36f9976f4534e406482dfcd42c0c15c5f860b9f0f210ab397fc037f4bae4d2492d041dcc130dddd97fef9ad9e9be51238c0ce5b63776383b9d57a67e81bed665925a1432d6dce425efc13c7143fe0a02a74ba06e7c29c5", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) 7.343373019s ago: executing program 4 (id=4967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x3, 0x100, 0x0, 0x0, 0x6}) clock_adjtime(0x0, &(0x7f0000000600)={0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffffffff, 0x0, 0x1}) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 4.394433507s ago: executing program 2 (id=4968): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x48261, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1134, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="605a6d6579df487d4293c9558330d6110d67eb8995f82ad8c235235237a8b405b5cfbca38592310393b3d1fce758ffb5f6d577ecd428a8f6a4f3fe6d8b2d2d947428326098e25730b5877857d1f4746f1fa01e494e31f055f04710dec872439217acae95e899342607813bb6afacfcd70e17426d18ad17a40c34974682c640460d4ef4b0afdfcd67d1fbe95c537a19409d338697263ad7afcda900e68ee02e03d147207d8cbd4be77df1a4f105149c061a8b5c8cf9ff64dcf96de0d78256ebd6152e3bdf1af715e58898c9b2b145b1af43acfae7ba204bbf6cca16c90d68cc05539e32359a166eb660a6f53a62dbf2b255639cc9e50abae8c8e49d1141805ee3e6d766f7e749051132bd156e4ed5d6544ae2caa4da2e721cb46c06a178440919bef7a1a3868c6779f506180950f64de1ca70ebb9ca1a7c91860e3ba1ed5d7221ae6089c61c1043da8c4e845784338877031326928341ba9adb58236d132532b013e94dffa06cedefdf6320cff3f791a6595677ab6658695ef7176c0e0d2afb7076f582b5d523971433a92c5d68369bdde3ec3e363e0e2eb8b53bd3b13bac5b7d6d3f502bdea08617c61f022ae73e56c57d602ed8307dc82637bd620b8c510b0192da2de099f61935ac7a58bc22d9c01c0152b62245f3197769e6d3b5b27f9de0565a81e1e3dec0589b61025c431ce3a76238f92eef5d775b5d0fe97dd9929f3c9c3af393a234cc77461c7889f087ebcb6a4d74a18402e640536f3be81800b9af952886e9c99f0e00d1ccaffd988cac9377adb182d4a76965f9e74bd5fd52a353e9bcc30f792b1a2c8776adc94f22661ee719871229688c187c3ff462e44573e9d171799f72ccbefc2ea4aea79de9363f17fe72e3f7ca45b02503b65777a7fc477515fafd3e975bfc11c81354670de0f245ede257dd7d193b073217b88b95ca0f06154dd719953fe4402e93a5a6af1b7b1e8c889f5ccff6765ed7fecb9d2bd16d712bf5177165a3cfa8737312b888281918d548458eb19b266944c0db82621fcd6af5026502135bea7353432730cbbf3b13ddf2a81bba8e8e029b47913c7120b4ee83b685eb3b44f54d0100ef927698b9c7f8c6ed920610c6e526f4fbe0dc5e00faa52d8e989ae76ed91d21ed2ecaaffd5b900f410a145e7acae795bd6565920031a9e34c99425dc90cee22aeb1f005f8b68585a81a3414e2102588ee49ad054cf64d116e5c2e7abfd692ae4338ba9abecb9c1654cee4e97369344627eca702f536b8a2f96f5f433bb63d0d074dc489c7b860cec418ba29e10a4d6a01b1d92e8e53cfb3ff672158a68a8b899bec140dcd232ca8d118d3301a3c639ba6cbd85f2f656c8b290c4abed5da7fa6f2c22fd12ac3e9d75b6fdac39be71582813db4f89e0f9b8a1d6825c5cecf96a128111e4003baa92b417331cc112547047fd48c492d7a6409d048a2d254ae04c62fcf92369d141d5be603b4617cb2b00d8c409d772b93f4d960e3ab3cbd403de317d5a0f85f52b0c87282b1125155add3d36cccab0658dd72f31fca6dfadbcd44d8d9480cf5382ad8d3a9119ebad8f66bfb40502da133aa1827dde6ab5aff89ae787634796f9a6bef9670426fce2e117bc743f16a30e65286dff3dce4ba401931dfb3983b79a3e83b77a0d8c43c2202130b5af11872837b7048f032e6b158b716b92318f816a8dae2dd68f43ad4e67eee6de160fdde3f9ccc1a9dd7d05ebfeb0b39900217772ed84f83f351fae4d991d71e99be77473fbde616f3cbd7d564fb69e98e1da63e8bf1f2679b8261cd00e74e2dbedb2d4619078044d7b2150c3fb9edaa2fef0767b90303669f3f19312badcf645aa0ffa8c90a34cc4ba68409ef26c2c51469b79000dc3967117ed1a6010118667af56d63545516cb86de9c85a499d4039f2b07bee44a858eadad596f95235e804afafdfa78efb0c40eee07ecbcd8e5fd72d909f49af997ab2eedad9181f3858f55d5357315c8f9873058b149eb50ffa992f3efc6c0f59390f35257afa2d5d6974446996c238734d5bafea2d02a44b0c4fc5feacff808248a7c0415f6d6e0a660672965ee63ba483e0be2b3106794c227287c1ec97a55f09afe874a39920612f7e093f84d30d1d1bfe2378cb121e69825e222862fa80e82fed01dade222cefd1bc3bdacf90d3ff05a88f429eb598a833b41cba95073c1d9991807cd5270da5fb8838e1f6dd3452c0fb05e14f3b0d29f92932ccbc391a165a4a70f426c1e71a7ff7a0d08c72b8bfaa28dd74da13ca32a2984baf8280d809689fc52efc2cda919a88fe8588122ed1bce30800207745c532d1380971218d3d6b378706bb99cc965269be9049de8735a7b576babeece640b5a2f4d348724dd3a7c3943aa07f6be246b753df947a333e9b35b614c337ce6aeb0df513bd197fb5adee658b97ac69640f11429011d7911300171285f148085591d95e099005a5350b9817bb1e222e25b051892ac041b0035e477e3418a52c4e5c6901b0d9b356b487297a774afb435f1f216fb9509ab18567231b6ce059939882133bbd355d4ef1d584fc3c80f6a47f8659b3eaae9ec40db7670e8668c3d7b14efbb9a064d4523c82061ab42ee8587f038510a730a8078b7596f7ee4a667885b351d204c94b91ef39525eea44e898bd0e805b101122f8dc56d3c115f2e7bba544898975012852653bb0d49b12db444c0adce1228601c4ca0215afc7a5be05f8f7a8f537a057a22da6bf92911acf0e6cb85509db189dc3aa8c15ad5c84ea1cbc2c3977dfbdd9229c19761b4d0e257da67f8aadd4bb4c147bf69cded457553ab93b3ca1e1d9b1710bc5fef1eb9e0080514aef2ca54aec853da811133c49d32218bedf808586dfaaf912836cf92e460295b2a0d298830226a40027139779ff465f9ed5100ca8e12d0a3d37746ada5e6409aef4a99aa370f1c2e293b02d330a42d6e20e1b908253edddad9fdba21f9925073f583b3e7361e17e2ab57ee5c64d41dacd35bd73a1b18027687761c60067464a31ef3c91a59d4aa787c8a4edafdd80dc611b4ae0174d30926dd750963cf09db73d7d7b8042357b236041a223d610054d654d999d5ba0282f048319c6898cd875f0988981aa59074c4674347cb4e501a104f4049c5be0973c4a5144a9895f8bb7451abf0ff1ecaaef8f21763bc443faa087a7942ef648797fb38d939a7e13fb9d22f9ccfbc050e718c13ca9b0d8845135f44fc2652798c03d014c4bb3bba5b568d012bf24ffca1e362ec8a83020fca0eda3b7b48fb202c7d49265b2ab43e3535560e16521e449f43d214fcd65a2d2b3f5d2fd0e399048a60d5b0a4ede5f512003387b38ebd232673c152bd3f4574bd78160310904e1da167897a52cc9d1099c60fc3cef1e0e5346f75a83e4522fa40fc85d7dac61eee49f103c83f535e4545d07261505e97eeb4ae8097c5db96a14b1dcb2e72dd054a4620d297af5d11c2e9f08c275f4da45632b9db60c71543d02028bd7c2ad42cd4c3840aea56e79554d920031500415bf54bcfe100b6737813504c030de9fb0284441e69063bc89171890057d68ca2a30cb028b9563553948741ce33618217d53627e9dd853ddc47fd6e1098b0e2adaf2fb334c42ae98d0add861e1a257e26cfe125627ac4a05a6559e931078419c7fcbc68ece61614a09f08eac9e8212d33ed35555ba2c133b5b762333fee4ffa2591615864e1e7e3688a18179eed2c900cfbb8d3b79cf8214f23a69e19a3232d99c17188e269fab4ca6b927593b461c4997ff3b5d742edeeecea083bdaeccf7084fd2e0b781a3fca12830272b4f1541a5883d6cb8f887e52e7d429f2be124ee15913246129cc2a860bc1e6df95c4e8fe9a69bd59a940527d281cb735c447b046452e017e3c00943931e56e62a032b7c402b52efe72ac560a1a4382efc324dac5ee1f5a367b228328782a91c55f543170625ca58ea170eaf29eec610fa0d8bbfa9dbc66abec5020cd082a97187e5fd9f9a86bb9a278d9d87582230298fa70c5157d449a8f1d5591275c9fa403f2ac80c7082b84546324c04fbb82dfc1bcf985f1ea39fca7e16f6c5d403dfc769384eb764d9e1d642878a6a21e23e66fa49f181edf089d9c36a3267b245eeeb578541f6c28b9edefd109c4246808a1c7cca2cbb4e2de1e3687eb3ec3481a16489809bdb30989878ee028bf2cb0089502a53ca5e2d87caa4a8de245bd975b92a208c223de3077b58beaa31ef6231c5bacef5893d9df7f9d2cce517f979f225cb4ba9b2276643478f281043fe797772a3fd40182165cf16add7e0a7132a0bc8ea0baf196b8cb38667a0913d1e0393b13825186b47e15b98f5e6a023700356e0d8acd1d028f277280eab5d6a708635d04b81b94601a549db7888478904bed96734f9b0759c1180289b8f924905ab8ce28a45bc939236a15dcac0db95914e443c3adf41e7b9cc62161e58467ac49a43eac0c0f436698267c525229536233adfba90489c91e3feec12eff16fa4481e07e4820bcfd6de769e521dad6e81d65c470f26bb0eecfffa217337ad8491ff47aab4d5537e804e2446be1ec70c70b27b6c81f33f0d1ccb1de914f61e7850495e13ef9ab452cefbd9fa2ff97f4e557e962b692ee61511c2c58d235756fbb3f6b82a75e37a18a0ca674923ff00dc0cf526a9ae9de31291cdb9a32bcfa66fd5c5906c9ae4db308d3f0cbef9990463399dda2201aa8463a854ee7d212389fbc7f5f1ceda3d1d27d6348bd28f0bdea490fd9edd1bfa4ead35863d0829c2a34da82ab8e7085377476cc47e1723804db7d4c09844a9387f98c399b7f0fa37e1df7acf80146526485af1819592dcc4d36a534b5733c562b6be83c0e04df1fca2c01c8e557b094a3744fdf9c8488514c55a821a02185823acc3dc47613ee3985fe9638d8e7a331ae6435dfba389ebf15e945a65f327621e0da225f518162cf0a64166a2a4b9c37c4d309f0acb97b2d85050e0028f4d0f37200659918778d91d1a0b90ac0f2047d5e902c05fe0b7608bd61ae7f888598eff7405e3d1530fb211f19cced805a009d8f1ad60cf557447d4adcacbaf4b4996bb710d7e60467807b8433652abdfafdcc0a01d91364ce85ffe18a1f541e8279a25e6df4f4c87c361b72c22a30a750171194a56deab4543a601b34a60c22671d113f290a2e977f48ec4217ad5e864597cce50eae0b4f550f6e0e8055f7e2660ed01f81883f3f8bda178124dead971277f571bfcc0290acbb68a343bc4db67bcaff30abce11f79e0d414a70e503da6e4929dd0305602f8bf09b463f58ab1c1cab5125cce0d2a6db9a84437c968e4b9dde83312341bb85cdd4b4f85ec74a1726f4a1c18ef149de6de77b44804990e1a73cf0af6f6e4d03fd986767b9bd1ecf30e46f2e4c602ba7163ef0e10680a3fa34d3ee27df4540828112e791e725f4a3497a338d61e787ea86a7a665cfe0419c32ae44b1e3ff9486a6671770698b4e8d738cec2d5b1d066b3603fa6f9dc98ad6c6e0b043e8799b685bbb262833927c9b413af643bdc24885e71035c618910013ec166bc447fcfbf98719d83276b18b00a65f3f131f93fcf22268480eca00b414d00ae0a39de5d0fd687c9702cb33b79b69d21bdf45182fd21349e69d7dc668dc27000273a67816f269d7121cc7bcef872402d1236a3da1e03e2f6eb83eeb50ad626e0fd7d5e5f92bd3a8e7bae9b14b0288f30aee196050bf65ed9fe1fa27aca1c8bb9816106e8dcd66bf33d0eda1e9b1662977bded33e560f1371e66fef19605736293d3632c1b6446d554da26addfd57156b3c9493e96c1e4501c4ca7514f4040813f079751934166b42dab73d009366c252045177d180b143838b829744c4191f1ea7d5a601c11e23fc15b1d1d52106fb6d7f1a1268fcb647cdb40f52012d79bdeca1119c9b8a0c9645a1173d385b4ac58cd7b9b2e01627a029d0b98a06e85fe736a40ed32f8cb782149d22d1f1e378d72684e9792ad4c3383ef592dfbda08b27b66c14d2fcc830d74641a448ae9d0fa38402b7ed510953a55192aca2543341ef0e7e0d1758df7efad3def0e36ceb7bc338e915f15248505eb2a0b9896495e797d65c9bb1cf1fc7bcd90e29e47de276cc7eb44e421652cdba809a3b6f07b58fb90067bc34e6371508c7e5dbfaa0eb2b1c48860b336d2f7feca19d071b5f87db4f487d70a04c4649699497b14f1697634e242cef9e02f0128e2f9adf403b1b0735dd590b3648016a47b9ff27547437c25001f37de85083350d320c7dcc01786e35eddb736e2a911dd4b0dc265eac45b52cf6c2bf8a0b43f4770c92af2b56fb863f10ab17b30b5a8ca92720797e62ee111eaa1c55ef49e2fcf7391e79cb8f6e4183db651c832fb08075aac22ebaa961b43a8be248495b4b394423a7dab449dd5e665fd882879ce97af12888fdb5526ea945e040674ce68af5f37bb08efc34a9ec19dd62c7730128c029deef53f5031b330955daae2eaef0445616a0ea8062405286e3b91bcfa14cf03edc5d160a6789f5bcdb371b9642ea2a0bf45bc4910577021c09b5e45ad62a69fe5850282bdb78171bee3a0385ac42952357a44a2c0933131cdf8523c87ad96c05cb2e64fdeb418d9eb1ac2c499c5714dc3e29ee30c4db6dfb9d38263f9e94f09a5ae4774bc9689dc972726f6cda48e62fa97b514b52a05dc91d6037d8be21bf3741b3dfafbebdcdd8436212e933cc9e0034a9c7be328bfd2fc68fb267b06816e90cfae04eec8659bf02f577858fe5f85e29aa243fe8131fa0db9d7ee3c367e18ef54ad5031f94a2eb3e099b629dc499a4c1e203049da245eff9ff1396c99e0d1a80ae8280efad8112aeb6ebe247c4610f1f71bf01958e42e9756aadaae6dfc78aa7cae9991d61e3e6899ba66cc904e241d178ff7a4db979042ad85e6465b1e4fdeaf54f217c713a4af52fb736a336891caf11d99cb1b31ffd7889ebc29573ff6e217188b81e8fff91c11dc74a1b3893ec90069d7ca37b0a8e066dd10270a16fecb21a148f1bffe7b681a87b935f0e71a23761ffd6d394a7e636f312bba323a27ab75aba67e2b5fe71f5fd0e4ac8c0afdec221040acac5e39b314ea86aea9e1457ff5c0e3bf604ec0f13346802faf57558f58ab6f1c75acc378a7653a2169dbaa92a5ff8c0859d3016638b278a37b7deee2194663c0e95c3b38645bca6cd1a7db0d53b6075f2aec0fffc4fee5d89b6954628fa6a01ef31316c77cb4a1b92d84a1bc14e3c587359c8decbbda408f62013fb32828f23667bc833cf0c13435643f61adacf2e51e8f70f5944922534ff6ba560be79e173db689b07bdbc92b86f7350580bf306ecb7e4cc65c826a89ab2e9da061f1c01faf87116d35aecdd78870b776039b600f4f6a927d5c5120423fc9aad544876ab19f62e0bf17c660351bdc90cd9f26f8dcb5efab096204a78cefe3846fa2ef186c39b05d2ddf719b5792434c67b0d371eef5c4854a5476d9834b20f6a4271dd9cc31764007947497406a7eb8fc03d7cc6705a65244eb9f9e33deafcbd64247b9b4b70d3665d769b63d5abe6ff20a2014424e9dc7e1725993ef0636b1aa25a9cf992f1efde978fbeb79eb5a09f92311949569848e03451ff40c9f18b2673b5e58e147b92fa947c4a917770d7bf093617959eb81957064d5a7eb107efe8c80cedd3cc042ed6f9586838eed30c76360f30fac1115c8b39cea9aeea7cd0726fd9cb049c7b0ade31d075c19f6a8a6481c0f8a52f6cec57a06f0149a67d795d48e939305ebe6fbd42be138669e5d188984987a8279b2079012123aca68836e5abebdbfc4f8e6ee829201c1d0e32eda6787bb7b995539a97a3ebce63d0a1b82166719aa3c26a66c66b03286008d611ec2c5c966cb8c30f1a8221b2ecd305199db7222d43aa15024b5b31cca586518d7774beeee37e017f555c4a74e63ca65bb5b151a61c0eeadd77bf65de04198e87b31a0e68d8efa7ddfef1cbe7c1a2842af9951ce80b10a164806abaa5915767bc2450c3bea603b1aba95e2f93d4c92f5fc5e0adac43a4348bdced5bf9f14bcb75a0be036d63c67ac52ed34946b5b29578429f307942e9f242b8f30508b531c2c6ec33be061377f633e999ef748ec7cf8e85a704402c1bab251026bc8244afea73843818078b1945bdc901e4d35875d59b4247123afb8390263826cdc3ec0c29d89ee19ee2b8b4344ac4b04fd8a6dfe80cf3b5848db2b2166a6df280c936eaec29186b2c729f9a6b823c9b8d075c6ca3837634a307a052d6cf0096e825049a9c01f38016aff89294c5a86ba5ba8ba3cea887a67645b28e83e44d4c760ffe0a617cc6b2e8609578474f72bf1cfe12b628f8ca34f79b3be053a857364b3fee699e13fb2701e3686575c5b33a649de37c54151058dc6f0a26e718092ff9837970b01e7077e1e1c13d70b29302869afa64a6e6280b4afd0065b6495cae81f0e57b63350a73a889cfeb22e2870af245d2b6ccf93aa2293c2a9f1ae0c855e480ebffaf7e87cbce99eee424f23b5d713b335c9fc33b8125fbc38f481ca7116a1db23b824bc141781d0c1ce01b6ff6c06cae68dc9c4868ac938f23bf027c95261178016a5c8ec4ae29ad1f9e7e1add03da6fb4543961f1945cc15dfa28d4fabf1371324e3c2bbfcc5b2f3b835fd021ca84db9cd171bddf5c12ff77018cfec877c2c8ce816510f35e3feb06191b88391ad9e0afb292d3385d9c22ffdf1dba85e78d06f8c8151526db5453feef7e2a78f92802f3832bdb1d54559d7d77b120f4f70a243509db99df37cfed1b963c7443a4dfb02fdc75dfd22dfde0bc1ae86208d08aa478ec69f0366413eca843b54b2896439379a65cda276bb39a715fa34d31b083ad3a62f15a0e50df3fdc4ac44ef7f9b95a1b4f755f2568123e236ff1df975772770ec240714efe89b23e5466efe0582fd057a3c4eb01cacaf70e5fa90e650f85ae712fc8dff66ec01b755798ac6c19b4d9378fe0039304da354844be94c76f488a5a37e8717a091f76170bb32ab9ce179956dd80733dfab7debf61cb769de5a690f56560634cc214d723b1d63d3ea12e92b0db851a957100e1f170871e18f241c4ccc8dafe0fbafd269e821ba9379d33e9aa7c3e49c83e8bb72abdf00502ae0dc2af0576abf1bd4cf83243102cd6af82bde2ed81720014fa4e60ffd388ea5392da219c9338c832c36627fb9da78ef6e330dd71b6aef7c1900440409afb866884bd218d9183ec1ac429004702ddb1df9400015f834a267d6af626f443e4387b733a0a39cfed4107394fbed60304562241d72de4fa4bcc3bfeef7887a11571e13dab339cbe48938b8ab619e0e6a400bad23c6b6a6a6af922895f36661ffe80ed05b478a617abc23cf3be6a4a701c05f2a2951a1d73799765dcaebe23b2d494c780431b92aed1fb4af6c4bedac1b246fa940f6d81adc91fe0413886362e7b6340192ffd0d5a49c8cf2e20806f8b5411e3620629062adc825c8c4b10b75706584b1e7627d6a7fe06135db73a8a9e11cf97799a9420b3560804bcb3f9bf31e8a49968514f480e74d0300ff0678c780c93c434429cb47fdb865455c33535a6138f0bfddc08e286ed7a4c259ef3be7b13e4be7b88405d58bed831a84190c177f7d4bbf3d919dce95281f66a768c63689799183b93067009921b3ef7f55a97480bd4e0d6cab397e520bfe02897333dc2d9abc574a7518076e5b447160c05bd3e186494580caf5cb478bbc86265a9faa507e83a372103ee054d13d46b172e6c2a17738869a1676a9eb26811281af32513a32cb497e7f6e07da09cb631f52457e936b1dc99052f2661a437d00bc6802ed28a85182940bfed10fd5e92f476654f0442b36a6dbc3e0177a4d5a1d29356d3e210c46fe46543a849d5f8cde21d28f5f12c0766286f0ff48400181cdbd075dffc6099c33c192cc462a3f5e121f160eeaa810ee589010b67a28f86838af44540eeedb0c2e5a858472c5f1bf5f3505ce3c38db1f2711a8dc6f94a6c2529ea84b0fe4ea75779e6c69b4ef9777c44db666fec52eb2be25d3fa9a8d1d4de951fe0e84ed6f2c811a43c7a36dcf25fe468e7ce2959323072a634f30452f078702643188aeff80894696c3296eaf616be8959eddeed836b64415ac3db46545d2429fd21608039b55f979651a66aee5700a092a43a85846a6fcb74a529113c177c5be60b0be9e19419047f99915ac6c13f323ca02d63779acc91f6d798e32a42515eb0e55b1a3555ff87d9a17b0f1ab25080c709a876e854b2f007e28a3520ef82a0f7eab848269b7595f0bdcd93e069556206a44b5fb0a2f33926870e2b631401b260fc32cc7470fbb207363434dc12ceabbbac473738cf491d7ef045226279bd3ddaeaf583152b9d053b411d015f28e923a9b69992e80fb8b92ec5101f29876cac57de7c80272f7e8f11bf753f263aa1da55970bddd2f0a42a86c357b12917eed81752e20e07bdb8c2f39da1ec84a8ca00e7cb006fabebe1ae36459528d1509d4aecc27567f5cefe7ac16465e6854c428ec1453d35610080132f7b82664b16fe33de658de65af911b15beb8add58522372091423707e4990b85124024d133936e92cd1b815adbebbc0800c14bcb795697fcaeafcce92af0766e27853e32042cd43b5eaacd53b803ca9e0759316fb62e4b708d1117a14bfa094cc52520573fc3fd590e93ed067d9f3a31647746cbe678a66f1753ef626e22d39b37eeb19e6bea6157f9dcd1ba71d349cc5c8d63df04496d633dc070cf94d9a9d09cf41252e2af95ef3962723561428d57d916905f05b78dd9b026f7b75b02089e6c43f0bb2a12ef71b3484bca0c8990c61a31263b71c683bcbdae0a40088d83689fce80e11be834eb1d609a7c715c2a849753f1c95162bf3bad9256093d82c2e147a364ab52a5c3377001c300d82b4bc8d665884b63f7fe60207cec026ddaf56a4603e8b55d878768a94041b7902a2fcfae80ef863d1c290c70bcf4b71020016945b526909ebbf66a12b6b2683e2469dc898d3424a30e36ff7e070214f9b5bb15f0986cf3e67bedac214bb030e3db4102e5dad28d6b32e6c85be4ca67b347bfa8aaf2a9eaf1fc64b4c4c8f745c167a06db3e8df5cc373f7d2f2814a5606a1d3c8f4ffe072d82f58ec0ec142da86ee38b4ad753318e739d0ff34ee5e7d6494d5f5c8bbccc2a020de9c9ddcee3ec616227b02af90b1e814cda93627bbd8be9d6180ca6d574dd745a3326c16df5df9d9e1387970e3736fae23d055b78e1b77fcef16d5994689401c283d227694c8012673ddd99a96c7566f4b1da72ddef20a1ad3b8fe51771aca5179748f415c67ddf9092e4465cc3241fd960319af3b0076ab0d9428010e058f11caf534c63b50a7f8cc17b0a31d7a55c6a70bbde60dc37140566194aff2e693864c1c575d6cb2a614ca79ce9e6ef1151e9c7fee585294caef6154430aac0520d9c4b4e4dd3fa653704fbf6af5be224188f8136391b1223537d6c8f3f11be38998ae557cbfd40259d03fda21256f97a1239fe5fe26638ed4903afddacdcd72dbe592df9221f5dc1c9fc5396d0e87b33b468ff5f08c3e5c6199b15a6ab44dfb9c4a", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}}, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0xce0e193097f7666d}}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) 4.394207247s ago: executing program 3 (id=4969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = dup(r3) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) socket$can_j1939(0x1d, 0x2, 0x7) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) 4.389719077s ago: executing program 4 (id=4970): write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x29, 0x6, 0x0, {0x1, 0x0, 0x0, 0x2, '', 0x8}}, 0x29) r0 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f0000000500)=""/242, 0xf2, &(0x7f0000000000)={0x0}) 4.303504207s ago: executing program 0 (id=4971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.711202089s ago: executing program 0 (id=4973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000006380)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)}}], 0x1, 0x0) 3.44334802s ago: executing program 4 (id=4974): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001800000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.38996336s ago: executing program 3 (id=4976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 3.235712421s ago: executing program 4 (id=4977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = mq_open(&(0x7f0000000040)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0xfffffffffffffffb, 0x0) 2.439330143s ago: executing program 3 (id=4978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2.278720743s ago: executing program 1 (id=4979): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2.101302944s ago: executing program 4 (id=4980): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="beba20a0c1e0ebebba36f9976f4534e406482dfcd42c0c15c5f860b9f0f210ab397fc037f4bae4d2492d041dcc130dddd97fef9ad9e9be51238c0ce5b63776383b9d57a67e81bed665925a1432d6dce425efc13c7143fe0a02a74ba06e7c29c5", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) 1.995452614s ago: executing program 1 (id=4981): socket$packet(0x11, 0x3, 0x300) socket(0x40000000002, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfff, 0xcd27}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.909873004s ago: executing program 3 (id=4982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = eventfd2(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.887833454s ago: executing program 1 (id=4983): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 1.621090685s ago: executing program 1 (id=4984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) personality(0x60000a) 1.459393046s ago: executing program 1 (id=4985): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 433.764438ms ago: executing program 3 (id=4986): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000003bc0)={{0x12, 0x1, 0x110, 0xc0, 0x6a, 0x16, 0x20, 0xf92, 0x1, 0x9d1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3a, 0xff, 0x80, 0x6, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0xc6, 0xcd, 0x43, 0x0, [], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xa2, 0x7, 0x80}}, {{0x9, 0x5, 0x8a, 0x3, 0x20, 0x1, 0x6, 0x99}}]}}]}}]}}, 0x0) 375.854759ms ago: executing program 1 (id=4987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = dup(r2) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) socket$can_j1939(0x1d, 0x2, 0x7) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) 163.657799ms ago: executing program 2 (id=4988): syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @random="7a28cd07effe", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 0s ago: executing program 2 (id=4989): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)={0x1c, 0x1e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") kernel console output (not intermixed with test programs): .2584'. [ 364.150613][T11328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2596'. [ 364.545334][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2595'. [ 364.548742][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.550286][T11324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.576019][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.577570][T11324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.671438][T11359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2612'. [ 365.015449][T11390] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2627'. [ 365.121054][T11399] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 365.150224][T11399] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 365.155511][ T4434] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.156442][T11399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.159975][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 365.267884][ T4349] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.636578][T11436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 365.781361][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2651'. [ 366.071784][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 367.362942][T11513] tipc: New replicast peer: 172.30.0.2 [ 367.364253][T11513] tipc: Enabled bearer , priority 10 [ 367.483256][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 368.691514][T11570] lo speed is unknown, defaulting to 1000 [ 368.692918][T11570] lo speed is unknown, defaulting to 1000 [ 368.711406][T11570] lo speed is unknown, defaulting to 1000 [ 368.715485][T11570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 368.732025][ T4306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.736188][ T4306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.739257][T11570] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 368.743327][ T4306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.745605][ T4306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.753482][ T4306] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 368.756543][ T4306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.798443][T11570] lo speed is unknown, defaulting to 1000 [ 368.807888][T11570] lo speed is unknown, defaulting to 1000 [ 368.870547][T11570] lo speed is unknown, defaulting to 1000 [ 368.872894][T11570] lo speed is unknown, defaulting to 1000 [ 368.874460][T11570] lo speed is unknown, defaulting to 1000 [ 368.876769][T11570] lo speed is unknown, defaulting to 1000 [ 368.887475][T11573] lo speed is unknown, defaulting to 1000 [ 368.900535][T11577] lo speed is unknown, defaulting to 1000 [ 369.155019][T11573] chnl_net:caif_netlink_parms(): no params data found [ 369.219884][T11589] device syzkaller0 entered promiscuous mode [ 370.805878][ T4306] Bluetooth: hci5: command 0x0409 tx timeout [ 371.687144][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.688525][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.885915][ T4306] Bluetooth: hci5: command 0x041b tx timeout [ 374.965849][ T4297] Bluetooth: hci5: command 0x040f tx timeout [ 377.045892][ T4297] Bluetooth: hci5: command 0x0419 tx timeout [ 380.333734][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 380.415114][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.423980][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.426677][T11573] device bridge_slave_0 entered promiscuous mode [ 380.436378][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.437903][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.440056][T11573] device bridge_slave_1 entered promiscuous mode [ 380.561305][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.607970][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.645949][ T4435] tipc: Disabling bearer [ 380.647533][ T4435] tipc: Disabling bearer [ 380.654419][ T4435] tipc: Left network mode [ 380.678384][T11573] team0: Port device team_slave_0 added [ 380.684966][T11573] team0: Port device team_slave_1 added [ 380.701336][T11635] bridge0: port 1(vlan3) entered blocking state [ 380.710511][T11635] bridge0: port 1(vlan3) entered disabled state [ 380.717560][T11635] device vlan3 entered promiscuous mode [ 380.721033][T11635] device team0 entered promiscuous mode [ 380.859048][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.860475][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.880120][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.883954][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.885089][T11655] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2737'. [ 380.885415][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.900976][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.073855][T11573] device hsr_slave_0 entered promiscuous mode [ 381.106370][T11573] device hsr_slave_1 entered promiscuous mode [ 381.461169][T11696] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2748'. [ 381.558191][T11702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 381.869015][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 381.870947][T11719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2754'. [ 382.180924][T11731] bridge0: port 4(vlan2) entered blocking state [ 382.186024][T11731] bridge0: port 4(vlan2) entered disabled state [ 382.188136][T11731] device vlan2 entered promiscuous mode [ 382.189576][T11731] bridge0: port 4(vlan2) entered blocking state [ 382.190850][T11731] bridge0: port 4(vlan2) entered forwarding state [ 382.641390][T11573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.690840][T11573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.711726][T11573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.769724][ T4435] device bond0 left promiscuous mode [ 382.806299][ T4435] device bridge0 left promiscuous mode [ 382.881971][ T4435] device hsr_slave_0 left promiscuous mode [ 382.917340][ T4435] device hsr_slave_1 left promiscuous mode [ 383.126118][ T4306] Bluetooth: hci5: command 0x0405 tx timeout [ 387.518305][ T4435] bond0 (unregistering): Released all slaves [ 387.790236][T11573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.033435][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.086706][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.088715][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.102880][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.121311][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.123591][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.125580][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.127092][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.162093][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.164418][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.178074][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.187120][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.188510][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.194715][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.221856][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.227094][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.234467][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.237274][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.247189][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.249720][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.259447][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.261644][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.321129][T11573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.323843][T11573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.365331][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.367587][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.389191][T11880] lo speed is unknown, defaulting to 1000 [ 388.676636][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.692858][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.698876][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.743649][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.752469][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.774207][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.776946][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.779004][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.780820][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.784341][T11573] device veth0_vlan entered promiscuous mode [ 388.804100][T11573] device veth1_vlan entered promiscuous mode [ 388.852846][T11573] device veth0_macvtap entered promiscuous mode [ 388.861625][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 388.863888][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 388.873832][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.882331][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.884412][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 388.889121][T11573] device veth1_macvtap entered promiscuous mode [ 388.899622][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.901727][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.910695][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.918564][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.922955][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.929908][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.948898][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.952788][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.954930][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.964599][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.974615][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.982769][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.988037][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.997940][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.019401][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.021722][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.027554][T11573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.029253][T11573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.030967][T11573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.032708][T11573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.080788][T11924] lo speed is unknown, defaulting to 1000 [ 389.233813][ T367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.235553][ T367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.246362][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.295024][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.297003][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.300647][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.380359][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2840'. [ 389.574762][T11959] device wlan1 entered promiscuous mode [ 389.576640][T11959] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 390.475566][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 390.898143][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2866'. [ 391.345862][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2883'. [ 391.357004][T12044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2882'. [ 391.675243][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2894'. [ 391.781131][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2895'. [ 391.861359][ T4342] hid-generic 0005:15C2:0010.0002: item fetching failed at offset 0/1 [ 391.864545][ T4342] hid-generic: probe of 0005:15C2:0010.0002 failed with error -22 [ 392.010658][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 392.116030][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'. [ 392.295123][T12115] Dead loop on virtual device ipvlan1, fix it urgently! [ 392.304159][T12115] tipc: Enabled bearer , priority 10 [ 392.405492][T12123] device syzkaller1 entered promiscuous mode [ 392.426402][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 392.696071][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 393.226045][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 393.254596][T12185] sctp: [Deprecated]: syz.3.2948 (pid 12185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.254596][T12185] Use struct sctp_sack_info instead [ 394.246060][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 394.271440][T12209] __nla_validate_parse: 6 callbacks suppressed [ 394.271454][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2960'. [ 394.288052][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2958'. [ 395.348942][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2972'. [ 395.357332][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 395.401670][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2974'. [ 395.603980][T12263] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2983'. [ 396.406145][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 396.629866][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 396.927563][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 396.954614][T12309] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3003'. [ 397.001615][T12314] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3006'. [ 397.214902][T12333] Bluetooth: MGMT ver 1.22 [ 397.288228][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 397.446148][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 397.605968][ T4297] Bluetooth: hci5: command 0x0407 tx timeout [ 398.486141][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 398.907981][T12451] netlink: 'syz.2.3070': attribute type 7 has an invalid length. [ 399.363423][T12486] __nla_validate_parse: 19 callbacks suppressed [ 399.363441][T12486] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3084'. [ 399.424822][T12492] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3089'. [ 399.526269][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 399.642694][T12505] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3098'. [ 399.856134][ T4297] Bluetooth: hci5: command 0x0411 tx timeout [ 399.970022][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 399.971931][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 400.091145][T12537] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3110'. [ 400.164782][T12541] bridge0: port 3(vlan2) entered blocking state [ 400.172023][T12541] bridge0: port 3(vlan2) entered disabled state [ 400.174443][T12541] device vlan2 entered promiscuous mode [ 400.175642][T12541] device bond0 entered promiscuous mode [ 400.186059][T12541] device bond_slave_0 entered promiscuous mode [ 400.187461][T12541] device bond_slave_1 entered promiscuous mode [ 400.189079][T12541] bridge0: port 3(vlan2) entered blocking state [ 400.190466][T12541] bridge0: port 3(vlan2) entered forwarding state [ 400.566146][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 400.784814][T12556] bridge0: port 3(vlan2) entered disabled state [ 400.786224][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.787818][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.830246][T12556] device bond0 left promiscuous mode [ 400.831409][T12556] device bond_slave_0 left promiscuous mode [ 400.832663][T12556] device bond_slave_1 left promiscuous mode [ 401.003544][T12571] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3124'. [ 401.433172][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.467772][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.606133][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 401.931695][T12556] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.933669][T12556] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.935431][T12556] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.938177][T12556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.656072][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 402.786875][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'. [ 402.810596][T12622] device macvtap1 entered promiscuous mode [ 402.812087][T12622] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.303964][T12663] Dead loop on virtual device ipvlan1, fix it urgently! [ 403.696151][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 403.814116][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3185'. [ 404.230191][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3196'. [ 404.387739][T12739] __nla_validate_parse: 1 callbacks suppressed [ 404.387755][T12739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3202'. [ 404.390867][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 404.460051][T12739] bridge0: port 1(syz_tun) entered blocking state [ 404.461581][T12739] bridge0: port 1(syz_tun) entered disabled state [ 404.465284][T12739] device syz_tun entered promiscuous mode [ 404.626790][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3208'. [ 404.736072][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 404.944550][T12776] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3219'. [ 405.023222][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3222'. [ 405.083219][T12790] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3226'. [ 405.535736][T12813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3236'. [ 405.766450][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 405.810202][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3248'. [ 406.154076][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 406.266380][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 406.601657][T12893] netlink: 'syz.1.3274': attribute type 12 has an invalid length. [ 406.806097][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 407.846116][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 408.463213][T13022] device bridge1 entered promiscuous mode [ 408.886293][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 409.121915][T13045] device syzkaller0 entered promiscuous mode [ 409.932691][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 410.966198][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 412.017312][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 413.046560][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 414.086287][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 415.126440][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 416.176275][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 417.206369][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 418.246439][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 419.286349][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 420.300297][T13059] __nla_validate_parse: 9 callbacks suppressed [ 420.300312][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3348'. [ 420.303437][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3348'. [ 420.326312][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 420.434156][T13078] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3356'. [ 420.540461][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 420.542310][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 420.577870][T13088] device team0 entered promiscuous mode [ 420.579018][T13088] device team_slave_0 entered promiscuous mode [ 420.580724][T13088] device team_slave_1 entered promiscuous mode [ 420.602782][T13088] device gretap0 entered promiscuous mode [ 420.657903][T13088] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 420.662055][T13088] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 420.929399][T13113] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3371'. [ 420.982322][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3373'. [ 420.984701][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 421.007129][T13119] netlink: 'syz.4.3374': attribute type 12 has an invalid length. [ 421.223342][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3382'. [ 421.225375][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'. [ 421.366135][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 421.396200][T13147] netlink: 'syz.0.3387': attribute type 12 has an invalid length. [ 421.412635][T13149] device vlan3 left promiscuous mode [ 421.413784][T13149] device team0 left promiscuous mode [ 421.633774][T13168] bridge0: port 5(vlan3) entered blocking state [ 421.635136][T13168] bridge0: port 5(vlan3) entered disabled state [ 421.736256][T13175] bridge0: port 2(syz_tun) entered blocking state [ 421.737772][T13175] bridge0: port 2(syz_tun) entered disabled state [ 421.741015][T13175] device syz_tun entered promiscuous mode [ 421.747328][T13175] device vlan3 entered promiscuous mode [ 421.748544][T13175] device team0 entered promiscuous mode [ 421.750512][T13175] bridge0: port 2(syz_tun) entered blocking state [ 421.752052][T13175] bridge0: port 2(syz_tun) entered forwarding state [ 422.406363][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 423.446113][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 423.533213][T13286] netlink: 'syz.2.3449': attribute type 1 has an invalid length. [ 423.581840][T13289] lo speed is unknown, defaulting to 1000 [ 424.486106][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 425.391413][T13408] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 425.526112][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 425.616135][T13426] __nla_validate_parse: 32 callbacks suppressed [ 425.616152][T13426] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3511'. [ 425.779669][T13441] device batadv_slave_1 entered promiscuous mode [ 425.781942][T13440] device batadv_slave_1 left promiscuous mode [ 425.890904][T13450] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3523'. [ 425.960465][T13457] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3526'. [ 426.294284][T13485] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3536'. [ 426.300575][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.304609][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.308489][ T4297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.312107][ T4297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.314944][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 426.317205][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.517938][T13483] lo speed is unknown, defaulting to 1000 [ 426.538893][T13500] netlink: 1056 bytes leftover after parsing attributes in process `syz.0.3540'. [ 426.711280][T13514] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3546'. [ 426.731596][T13483] chnl_net:caif_netlink_parms(): no params data found [ 426.901736][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3550'. [ 426.936017][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.937561][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.939823][T13483] device bridge_slave_0 entered promiscuous mode [ 426.944153][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.945782][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.947755][T13483] device bridge_slave_1 entered promiscuous mode [ 426.998639][ T4744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.012542][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.023814][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.059073][T13483] team0: Port device team_slave_0 added [ 427.062470][T13483] team0: Port device team_slave_1 added [ 427.118588][ T4744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.129092][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.130584][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.135523][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.139531][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.141045][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.147363][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.208360][ T4744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.277661][T13483] device hsr_slave_0 entered promiscuous mode [ 427.316072][T13483] device hsr_slave_1 entered promiscuous mode [ 427.355913][T13483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.357515][T13483] Cannot create hsr debugfs directory [ 427.419101][ T4744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.423339][T13542] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3557'. [ 427.576321][T13548] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 427.606311][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 427.695318][ T4744] tipc: Disabling bearer [ 427.697235][ T4744] tipc: Left network mode [ 428.028760][T13582] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3569'. [ 428.405876][ T4306] Bluetooth: hci0: command 0x0409 tx timeout [ 428.479248][T13615] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3581'. [ 428.646145][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 428.653425][T13483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.709064][T13483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.790724][T13483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.847044][T13483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 429.540234][T13648] netlink: 'syz.1.3595': attribute type 12 has an invalid length. [ 429.686109][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 429.735263][T13483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.573185][ T4306] Bluetooth: hci0: command 0x041b tx timeout [ 430.726160][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 430.781984][T13670] __nla_validate_parse: 1 callbacks suppressed [ 430.782000][T13670] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3604'. [ 430.799700][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.801743][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.825080][T13483] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.878737][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.880934][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.883074][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.884603][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.893395][T13682] netlink: 'syz.3.3609': attribute type 12 has an invalid length. [ 430.900869][ T4744] device hsr_slave_0 left promiscuous mode [ 430.936887][ T4744] device hsr_slave_1 left promiscuous mode [ 431.026069][ T4744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.027618][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.029630][ T4744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.031275][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.033315][ T4744] device bridge_slave_1 left promiscuous mode [ 431.034677][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.087182][ T4744] device bridge_slave_0 left promiscuous mode [ 431.088523][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.215996][ T4744] device veth1_macvtap left promiscuous mode [ 431.217218][ T4744] device veth0_macvtap left promiscuous mode [ 431.218433][ T4744] device veth1_vlan left promiscuous mode [ 431.219599][ T4744] device veth0_vlan left promiscuous mode [ 431.766307][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 432.655869][ T4301] Bluetooth: hci0: command 0x040f tx timeout [ 432.806164][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 433.126792][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.128143][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.836476][ T4744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.846093][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 434.036609][ T4744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.736391][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 434.886160][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 435.599196][ T4744] bond0 (unregistering): Released all slaves [ 435.826837][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.829067][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.833047][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.835149][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.836727][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.840795][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.843127][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.845409][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.853545][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.859572][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.867873][T13698] netlink: 1056 bytes leftover after parsing attributes in process `syz.0.3616'. [ 435.870022][T13702] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3618'. [ 435.881932][T13483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.884178][T13483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.913238][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.915557][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.918064][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.921939][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.926121][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 435.959263][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.961376][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.982245][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.089169][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3627'. [ 436.952906][T13729] netlink: 'syz.3.3628': attribute type 12 has an invalid length. [ 436.961806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.963485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.966425][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 436.985131][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.084518][T13743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3631'. [ 437.182246][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.184920][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.211889][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.214297][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.222773][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.232557][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.240967][T13483] device veth0_vlan entered promiscuous mode [ 437.251386][T13483] device veth1_vlan entered promiscuous mode [ 437.280618][T13753] netlink: 1056 bytes leftover after parsing attributes in process `syz.0.3636'. [ 437.282938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.284937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.288511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.301295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.309131][T13483] device veth0_macvtap entered promiscuous mode [ 437.322333][T13483] device veth1_macvtap entered promiscuous mode [ 437.342607][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.344768][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.350710][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.352608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.354672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.359103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.362299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.370232][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.374644][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.383474][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.388691][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.391749][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.397488][T13483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.400534][T13483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.402377][T13483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.404146][T13483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.431509][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3640'. [ 437.443454][T13763] netlink: 'syz.3.3641': attribute type 12 has an invalid length. [ 437.489777][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.491578][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.502796][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.541783][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.543703][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.548054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.016077][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 439.046097][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 439.348868][T13789] netlink: 1056 bytes leftover after parsing attributes in process `syz.3.3648'. [ 439.546363][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3651'. [ 439.625145][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.629438][ T4306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.631669][ T4306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.634454][ T4306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.643701][ T4306] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 439.900897][ T4306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.086084][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 440.463059][ T6443] bridge0: port 2(syz_tun) entered disabled state [ 440.537766][ T6443] device syz_tun left promiscuous mode [ 440.539166][ T6443] bridge0: port 2(syz_tun) entered disabled state [ 440.576457][ T6443] device vlan3 left promiscuous mode [ 440.577703][ T6443] device team0 left promiscuous mode [ 440.584410][T13810] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 440.634323][T13800] lo speed is unknown, defaulting to 1000 [ 440.641561][T13818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.889269][ T149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.898677][T13828] netlink: 1056 bytes leftover after parsing attributes in process `syz.0.3661'. [ 440.904299][T13836] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3663'. [ 440.906832][T13836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.105004][ T149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.126201][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 441.129300][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3668'. [ 441.380311][ T149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.434975][T13800] chnl_net:caif_netlink_parms(): no params data found [ 441.528206][T13850] x_tables: duplicate underflow at hook 2 [ 442.166168][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 442.218139][ T149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.347070][T13800] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.348676][T13800] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.356953][T13800] device bridge_slave_0 entered promiscuous mode [ 442.365466][T13800] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.377454][T13800] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.384570][T13800] device bridge_slave_1 entered promiscuous mode [ 442.473496][T13800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.486116][ T4301] Bluetooth: hci4: command 0x0409 tx timeout [ 442.497019][T13800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.285286][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 443.455793][ T149] tipc: Disabling bearer [ 443.456954][ T149] tipc: Disabling bearer [ 443.467886][ T149] tipc: Left network mode [ 443.471938][T13800] team0: Port device team_slave_0 added [ 443.474662][T13800] team0: Port device team_slave_1 added [ 443.580554][T13896] capability: warning: `syz.3.3685' uses deprecated v2 capabilities in a way that may be insecure [ 444.192998][T13800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.194435][T13800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.199591][T13800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.203258][T13800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.204743][T13800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.253358][T13800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.575862][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 444.677815][T13800] device hsr_slave_0 entered promiscuous mode [ 444.696069][T13800] device hsr_slave_1 entered promiscuous mode [ 444.802493][T13800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.804190][T13800] Cannot create hsr debugfs directory [ 446.056105][ T5983] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 446.342287][ T5983] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 446.344391][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 446.411223][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 446.511171][ T5983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.656237][ T4301] Bluetooth: hci4: command 0x040f tx timeout [ 446.715837][ T5983] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.717680][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.732007][ T5983] usb 1-1: config 0 descriptor?? [ 446.733517][T13954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.770177][T13976] netlink: 1056 bytes leftover after parsing attributes in process `syz.3.3714'. [ 447.143624][ T5983] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 447.151531][ T5983] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 447.179073][ T5983] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 447.430350][ T110] usb 1-1: USB disconnect, device number 7 [ 447.748241][T13800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.792784][ T149] device hsr_slave_0 left promiscuous mode [ 447.826065][ T149] device hsr_slave_1 left promiscuous mode [ 447.996925][ T149] bridge0: port 1(vlan3) entered disabled state [ 448.807025][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 448.936729][ T149] device veth1_macvtap left promiscuous mode [ 448.938767][ T149] device veth0_macvtap left promiscuous mode [ 448.940827][ T149] device veth1_vlan left promiscuous mode [ 448.942084][ T149] device veth0_vlan left promiscuous mode [ 450.026984][ T149] bond1 (unregistering): Released all slaves [ 454.787579][ T149] bond0 (unregistering): Released all slaves [ 455.046748][T13800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 455.103591][T13800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 455.252866][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3735'. [ 455.254697][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 455.257848][T13800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.863439][T14099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3738'. [ 455.909245][T13800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.916850][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.918770][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.925081][T13800] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.931457][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.933472][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.935408][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.936886][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.951329][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.953661][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.963230][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.965178][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.966629][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.125878][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.128292][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.130520][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.133495][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.151250][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.173877][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.182633][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.198943][T13800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.201003][T13800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.276987][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.279337][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.281570][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.283648][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.289606][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.383651][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.385415][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.400721][T13800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.455823][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.458024][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.475203][T14158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3755'. [ 457.478631][T14154] device syzkaller1 entered promiscuous mode [ 457.484204][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.492092][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.570632][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.572641][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.574648][T13800] device veth0_vlan entered promiscuous mode [ 457.580829][T13800] device veth1_vlan entered promiscuous mode [ 457.646441][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 457.648517][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 457.650728][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.652802][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.658008][T13800] device veth0_macvtap entered promiscuous mode [ 457.662678][T13800] device veth1_macvtap entered promiscuous mode [ 457.703066][T13800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.705144][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.707478][T13800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.709788][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.719000][T13800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.721327][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 457.723405][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.725357][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.734660][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.801153][T13800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.803152][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.805026][T13800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.817231][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.821798][T13800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.823806][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.832258][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.837639][T13800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.839446][T13800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.841249][T13800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.843127][T13800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.918925][ T5556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.920634][ T5556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.924151][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.929354][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.931157][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.961257][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 458.092207][T14184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3763'. [ 458.195401][T14193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3766'. [ 459.242822][T14201] device syzkaller1 entered promiscuous mode [ 459.266594][ T4297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.269555][ T4297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.271960][ T4297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.276774][ T4297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.278797][ T4297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 459.280990][ T4297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.329895][T14202] lo speed is unknown, defaulting to 1000 [ 459.622512][ T6507] device syz_tun left promiscuous mode [ 459.623704][ T6507] bridge0: port 1(syz_tun) entered disabled state [ 459.803726][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3776'. [ 459.805638][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 459.812698][T14220] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3777'. [ 459.932721][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 460.649920][T14202] chnl_net:caif_netlink_parms(): no params data found [ 460.672881][T14235] device syzkaller1 entered promiscuous mode [ 460.817670][T14202] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.819413][T14202] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.821636][T14202] device bridge_slave_0 entered promiscuous mode [ 460.826287][T14202] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.827992][T14202] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.830302][T14202] device bridge_slave_1 entered promiscuous mode [ 460.846232][T14202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.848783][T14253] device batadv_slave_1 entered promiscuous mode [ 460.854100][T14202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.920266][T14249] device batadv_slave_1 left promiscuous mode [ 460.924814][T14202] team0: Port device team_slave_0 added [ 460.928530][T14202] team0: Port device team_slave_1 added [ 460.957989][T14202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.961810][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.973535][T14202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.982380][T14202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.983885][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.989116][T14202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.061722][T14202] device hsr_slave_0 entered promiscuous mode [ 461.096199][T14202] device hsr_slave_1 entered promiscuous mode [ 461.135844][T14202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.137445][T14202] Cannot create hsr debugfs directory [ 461.138649][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3789'. [ 461.140376][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3789'. [ 461.314346][ T4446] tipc: Left network mode [ 461.324087][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3791'. [ 461.329687][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3791'. [ 461.366162][ T4297] Bluetooth: hci2: command 0x0409 tx timeout [ 461.377177][T14278] device netdevsim0 entered promiscuous mode [ 461.406805][T14278] device netdevsim0 left promiscuous mode [ 462.709458][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3800'. [ 462.711406][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 463.033264][T14351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3805'. [ 463.738186][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 464.227768][T14202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.267895][T14202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.497449][T14202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.528249][T14202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.580305][T14408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3813'. [ 465.582271][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 465.670311][ T4446] device hsr_slave_0 left promiscuous mode [ 465.706632][ T4446] device hsr_slave_1 left promiscuous mode [ 465.766404][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 466.106073][ T4446] bond1 (unregistering): Released all slaves [ 467.855820][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 471.528597][ T4446] bond0 (unregistering): Released all slaves [ 471.787834][T14455] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3822'. [ 471.912942][T14462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3825'. [ 471.992586][T14202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.014471][T14469] lo speed is unknown, defaulting to 1000 [ 472.015969][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.016397][ T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.046036][T14202] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.063250][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.065310][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.067950][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.069389][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.107410][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.109354][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.111320][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.113290][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.114713][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.143398][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.150456][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.159821][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.165041][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.182174][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.195330][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.210587][T14202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.212544][T14202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.220753][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.225196][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.240718][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.246802][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.262576][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.271288][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.412422][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3832'. [ 472.607386][T14503] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 473.441208][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.443043][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.495979][T14202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.499791][T14522] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3834'. [ 473.561036][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.563163][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.598836][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.599304][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.599850][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.600220][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.606778][T14202] device veth0_vlan entered promiscuous mode [ 473.622867][T14202] device veth1_vlan entered promiscuous mode [ 473.697240][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.699320][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.701226][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.703457][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.713473][T14202] device veth0_macvtap entered promiscuous mode [ 473.723690][T14202] device veth1_macvtap entered promiscuous mode [ 473.757536][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.759581][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.761455][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.763516][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.765408][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.785955][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.789272][T14202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.797642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.799783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.806095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.808305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.812584][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.814672][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.819163][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.821365][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.823649][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.826180][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.829594][T14202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.835856][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.838028][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.847622][T14541] lo speed is unknown, defaulting to 1000 [ 473.854665][T14202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.865991][T14202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.869106][T14202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.873494][T14202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.963101][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 473.989403][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.991225][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.995850][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.034129][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.036016][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.045400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.059374][T14569] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3846'. [ 475.108672][T14574] netlink: 'syz.4.3847': attribute type 12 has an invalid length. [ 475.498691][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3853'. [ 475.575358][ T4301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.629889][ T4301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.632199][ T4301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.634224][ T4301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.636446][ T4301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 475.638700][ T4301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.719167][T14604] lo speed is unknown, defaulting to 1000 [ 475.765351][T14610] lo speed is unknown, defaulting to 1000 [ 477.479363][T14617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3857'. [ 477.481190][T14617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3857'. [ 477.685891][ T4306] Bluetooth: hci3: command 0x0409 tx timeout [ 477.758968][T14628] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3860'. [ 477.849956][T14635] netlink: 'syz.4.3861': attribute type 12 has an invalid length. [ 477.872145][T14604] chnl_net:caif_netlink_parms(): no params data found [ 478.001117][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.003852][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.008791][T14604] device bridge_slave_0 entered promiscuous mode [ 478.024201][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.026256][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.029404][T14604] device bridge_slave_1 entered promiscuous mode [ 478.056236][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.063133][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.100832][T14604] team0: Port device team_slave_0 added [ 478.106474][T14604] team0: Port device team_slave_1 added [ 478.126908][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.128322][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.133473][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.137693][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.139242][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.152465][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.237672][T14604] device hsr_slave_0 entered promiscuous mode [ 478.271113][T14604] device hsr_slave_1 entered promiscuous mode [ 478.310717][T14604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.312403][T14604] Cannot create hsr debugfs directory [ 478.447002][T14655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'. [ 480.038813][ T4306] Bluetooth: hci3: command 0x041b tx timeout [ 480.168452][T14604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.202311][T14679] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3872'. [ 480.204261][T14681] netlink: 'syz.1.3873': attribute type 12 has an invalid length. [ 480.287648][T14604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.438478][T14604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.563902][T14604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.642621][T14692] Process accounting resumed [ 480.775472][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3878'. [ 480.859104][ T4446] tipc: Disabling bearer [ 480.860313][ T4446] tipc: Left network mode [ 480.992281][T14604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 482.016881][ T4446] bond1: (slave ip6gretap1): Removing an active aggregator [ 482.020278][ T4446] bond1: (slave ip6gretap1): Releasing backup interface [ 482.075285][T14604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 482.085825][ T4297] Bluetooth: hci3: command 0x040f tx timeout [ 482.118666][T14728] netlink: 'syz.2.3883': attribute type 12 has an invalid length. [ 482.213073][T14604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.250403][T14604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.345298][T14747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3891'. [ 482.350022][T14744] lo speed is unknown, defaulting to 1000 [ 482.522420][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.550447][T14604] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.621954][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.624064][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.629294][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.631759][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.633901][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.635440][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.638584][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.640898][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.643544][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.645367][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.648959][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 483.590821][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.593040][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.595319][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.617436][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.629411][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.635309][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.662762][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.664935][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.672606][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.674895][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.678728][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.723561][T14604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.253312][ T4306] Bluetooth: hci3: command 0x0419 tx timeout [ 484.448618][T14768] netlink: 'syz.4.3898': attribute type 12 has an invalid length. [ 484.460084][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'. [ 484.631198][T14782] lo speed is unknown, defaulting to 1000 [ 484.887878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.889603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.893638][T14604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.918647][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 484.921007][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.997159][T14806] netlink: 'syz.4.3912': attribute type 12 has an invalid length. [ 485.001777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.267463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.355620][T14604] device veth0_vlan entered promiscuous mode [ 486.100667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.102930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.105968][T14604] device veth1_vlan entered promiscuous mode [ 486.109776][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 486.136566][T14820] lo speed is unknown, defaulting to 1000 [ 486.207246][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.211248][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.012218][ T4446] device hsr_slave_0 left promiscuous mode [ 487.067654][ T4446] device hsr_slave_1 left promiscuous mode [ 487.156339][ T4446] device vlan2 left promiscuous mode [ 487.157690][ T4446] bridge0: port 4(vlan2) entered disabled state [ 487.176860][ T4446] bridge0: port 3(team0) entered disabled state [ 487.227589][ T4446] device bridge_slave_1 left promiscuous mode [ 487.235000][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.337424][ T4446] device bridge_slave_0 left promiscuous mode [ 487.339590][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.817578][ T4446] device veth1_macvtap left promiscuous mode [ 487.819419][ T4446] device veth0_macvtap left promiscuous mode [ 487.821120][ T4446] device veth1_vlan left promiscuous mode [ 487.827455][ T4446] device veth0_vlan left promiscuous mode [ 488.898784][ T4446] bond2 (unregistering): Released all slaves [ 489.748366][ T4446] bond1 (unregistering): Released all slaves [ 491.567215][ T4446] device team_slave_1 left promiscuous mode [ 491.571270][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 491.786262][ T4446] device team_slave_0 left promiscuous mode [ 491.789606][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 491.966670][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.186683][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.567544][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.568871][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.628717][ T4446] bond0 (unregistering): Released all slaves [ 494.880209][T14604] device veth0_macvtap entered promiscuous mode [ 494.888245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.890585][T14840] netlink: 'syz.1.3924': attribute type 12 has an invalid length. [ 494.893981][ T4342] lo speed is unknown, defaulting to 1000 [ 494.920524][T14604] device veth1_macvtap entered promiscuous mode [ 494.955434][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.976875][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.978886][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.980948][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.982871][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.984980][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.993431][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.995577][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.999499][T14604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.003097][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.005324][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.007982][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.010069][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.011940][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.013979][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.016990][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.019119][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.022319][T14604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.036492][T14604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.038306][T14604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.040052][T14604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.041692][T14604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.057039][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.069583][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.085651][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.098535][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.111962][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 495.205944][T14861] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 495.935795][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.937664][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.995221][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.045526][ T4744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.047666][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.053563][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.584462][T14903] x_tables: duplicate underflow at hook 2 [ 500.261276][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 500.364071][T14905] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 500.678687][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 500.678701][ T27] audit: type=1326 audit(500.660:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c54b368 code=0x7ffc0000 [ 500.685452][ T27] audit: type=1326 audit(500.660:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff9c54b368 code=0x7ffc0000 [ 500.695865][ T27] audit: type=1326 audit(500.660:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c54b368 code=0x7ffc0000 [ 501.653829][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 501.657656][T14931] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3954'. [ 501.666042][T14931] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3954'. [ 501.690280][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'. [ 501.722228][ T27] audit: type=1326 audit(501.700:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 501.728862][ T27] audit: type=1326 audit(501.710:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 501.742521][ T27] audit: type=1326 audit(501.720:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=150 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 501.750074][ T27] audit: type=1326 audit(501.720:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 501.761947][ T27] audit: type=1326 audit(501.720:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 501.782186][T14941] netlink: 'syz.4.3954': attribute type 4 has an invalid length. [ 501.817764][T14941] ip6t_srh: unknown srh invflags 4000 [ 501.899925][T14948] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 503.449724][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 503.453717][T14966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3969'. [ 503.644056][T14971] netlink: 'syz.1.3971': attribute type 153 has an invalid length. [ 503.711150][T14980] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 505.515044][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'. [ 505.683606][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3985'. [ 505.827396][T15021] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 505.904640][T15026] netlink: 'syz.3.3989': attribute type 10 has an invalid length. [ 505.955028][T15026] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 506.175410][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 507.096423][T15052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4000'. [ 508.447704][T15060] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 508.542823][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.544575][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.635549][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4013'. [ 512.457451][T15104] Bluetooth: MGMT ver 1.22 [ 514.088609][T15129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4024'. [ 514.200053][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4025'. [ 515.666558][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4029'. [ 515.923588][T15166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4036'. [ 516.796820][T15179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4042'. [ 517.762105][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4047'. [ 517.811206][T15196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4049'. [ 517.938340][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'. [ 517.940304][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4055'. [ 517.942477][T15208] netlink: 'syz.2.4055': attribute type 6 has an invalid length. [ 518.765290][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4054'. [ 518.895885][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4061'. [ 518.989086][T15018] kernel write not supported for file /287/attr/current (pid: 15018 comm: kworker/1:9) [ 519.135292][T15243] device vlan2 left promiscuous mode [ 519.142224][T15243] bridge0: port 3(vlan2) entered disabled state [ 519.178466][T15243] device bridge_slave_1 left promiscuous mode [ 519.180004][T15243] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.383883][ T4306] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 519.462479][T15243] device bridge_slave_0 left promiscuous mode [ 519.509798][T15243] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.227989][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4070'. [ 521.110296][T15276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4080'. [ 522.409396][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4097'. [ 523.769239][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4110'. [ 526.640483][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4125'. [ 528.430442][T15414] 9pnet_fd: Insufficient options for proto=fd [ 530.534808][T15427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4137'. [ 530.694536][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4141'. [ 530.703616][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4141'. [ 530.709397][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4141'. [ 530.711404][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4141'. [ 530.828859][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.836001][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.869748][T15450] 9pnet_fd: Insufficient options for proto=fd [ 531.677448][T15458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4151'. [ 533.200410][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.204197][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.248534][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4165'. [ 533.877168][ T4306] Bluetooth: hci0: command 0x0401 tx timeout [ 534.594872][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4176'. [ 536.954976][T15554] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4187'. [ 537.128586][T15563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4191'. [ 537.418061][T15579] futex_wake_op: syz.2.4190 tries to shift op by -1; fix this program [ 540.777051][T15608] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4206'. [ 542.522002][T15640] 9pnet_fd: Insufficient options for proto=fd [ 542.574830][T15644] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4221'. [ 544.241099][T15675] 9pnet_fd: Insufficient options for proto=fd [ 546.762808][T15702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4241'. [ 548.859161][T15756] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4261'. [ 549.666772][ T27] audit: type=1326 audit(549.520:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.0.4269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 549.682402][ T27] audit: type=1326 audit(549.520:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.0.4269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 549.700621][ T27] audit: type=1326 audit(549.610:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.0.4269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 549.711814][ T27] audit: type=1326 audit(549.610:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.0.4269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 549.724198][T15788] netlink: 'syz.3.4271': attribute type 12 has an invalid length. [ 549.728568][ T27] audit: type=1326 audit(549.610:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.0.4269" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 550.862231][T15817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4279'. [ 550.993581][T15826] netlink: 'syz.2.4282': attribute type 12 has an invalid length. [ 551.145226][T15840] 9pnet_fd: Insufficient options for proto=fd [ 553.040840][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 553.113994][T15884] netlink: 'syz.2.4298': attribute type 12 has an invalid length. [ 553.981748][T15889] 9pnet_fd: Insufficient options for proto=fd [ 555.558964][T15922] 9pnet_fd: Insufficient options for proto=fd [ 556.044046][T15930] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.046165][T15930] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.047972][T15930] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.049816][T15930] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.075469][T15930] device vxlan0 entered promiscuous mode [ 556.098416][T15930] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.100290][T15930] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.102073][T15930] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.103813][T15930] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.203546][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.308785][T15929] netlink: 'syz.4.4314': attribute type 12 has an invalid length. [ 556.453732][T15954] 9pnet_fd: Insufficient options for proto=fd [ 559.974708][T15986] netlink: 'syz.4.4334': attribute type 12 has an invalid length. [ 560.006867][T15990] 9pnet_fd: Insufficient options for proto=fd [ 563.279733][T16026] 9pnet_fd: Insufficient options for proto=fd [ 563.285790][ T4306] Bluetooth: hci4: command 0x0406 tx timeout [ 563.313431][T16028] netlink: 'syz.0.4351': attribute type 12 has an invalid length. [ 563.341398][T16032] bridge0: port 3(syz_tun) entered blocking state [ 563.342956][T16032] bridge0: port 3(syz_tun) entered disabled state [ 563.345160][T16032] device syz_tun entered promiscuous mode [ 563.347939][T16032] bridge0: port 3(syz_tun) entered blocking state [ 563.349314][T16032] bridge0: port 3(syz_tun) entered forwarding state [ 565.330803][T16065] 9pnet_fd: Insufficient options for proto=fd [ 565.716916][T16070] bridge0: port 3(syz_tun) entered blocking state [ 565.724313][T16070] bridge0: port 3(syz_tun) entered disabled state [ 566.444997][T16070] device syz_tun entered promiscuous mode [ 566.455404][T16070] bridge0: port 3(syz_tun) entered blocking state [ 566.456820][T16070] bridge0: port 3(syz_tun) entered forwarding state [ 566.514307][T16074] netlink: 'syz.1.4367': attribute type 12 has an invalid length. [ 567.772703][T16103] 9pnet_fd: Insufficient options for proto=fd [ 572.506497][T16151] 9pnet_fd: Insufficient options for proto=fd [ 572.841960][T16162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.847764][T16162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.880797][T16162] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 576.212838][T16193] 9pnet_fd: Insufficient options for proto=fd [ 578.130421][ T4297] Bluetooth: min 3 > max 0 [ 579.834313][T16233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.837471][T16233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.839192][T16233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.958245][T16235] 9pnet_fd: Insufficient options for proto=fd [ 580.166037][ T4306] Bluetooth: hci4: command 0x2021 tx timeout [ 583.509642][T16265] 9pnet_fd: Insufficient options for proto=fd [ 583.756192][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 586.002789][T16285] netlink: 'syz.0.4437': attribute type 12 has an invalid length. [ 586.799177][T16310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4443'. [ 586.801245][T16310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4443'. [ 587.963559][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4442'. [ 590.274157][T16345] netlink: 'syz.2.4454': attribute type 12 has an invalid length. [ 590.455315][T16350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4456'. [ 593.772536][T16380] netlink: 'syz.3.4466': attribute type 12 has an invalid length. [ 593.992678][T16388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4467'. [ 594.210565][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.212382][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.318241][T16423] netlink: 'syz.0.4478': attribute type 12 has an invalid length. [ 597.576906][T16428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 599.046541][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 599.963995][T16460] 9pnet_fd: Insufficient options for proto=fd [ 600.187053][T16467] netlink: 'syz.2.4493': attribute type 12 has an invalid length. [ 601.629983][T16491] 9pnet_fd: Insufficient options for proto=fd [ 603.228360][T16500] 9pnet_fd: Insufficient options for proto=fd [ 603.564621][T16505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4503'. [ 603.566611][T16505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4503'. [ 604.408023][T16512] netlink: 'syz.2.4507': attribute type 12 has an invalid length. [ 604.411678][T16514] bridge0: port 3(syz_tun) entered disabled state [ 604.413080][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.414667][T16514] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.454650][T16536] 9pnet_fd: Insufficient options for proto=fd [ 607.806451][T16551] netlink: 'syz.0.4521': attribute type 12 has an invalid length. [ 611.003074][T16597] netlink: 'syz.2.4537': attribute type 12 has an invalid length. [ 611.153891][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4534'. [ 615.970003][T16645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4551'. [ 616.967807][ T5983] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 617.225779][ T5983] usb 1-1: Using ep0 maxpacket: 8 [ 617.228509][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.230707][ T5983] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 617.232504][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.243895][ T5983] usb 1-1: config 0 descriptor?? [ 618.092501][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.131415][ T5983] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 618.157047][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.158923][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.237001][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4563'. [ 618.315205][ T5983] usb 1-1: USB disconnect, device number 8 [ 618.316785][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 618.334899][ T5983] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 622.177860][T16725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4576'. [ 623.683840][T16747] loop1: detected capacity change from 0 to 1024 [ 623.696411][T16747] ======================================================= [ 623.696411][T16747] WARNING: The mand mount option has been deprecated and [ 623.696411][T16747] and is ignored by this kernel. Remove the mand [ 623.696411][T16747] option from the mount to silence this warning. [ 623.696411][T16747] ======================================================= [ 623.823113][T16747] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.4582: Invalid block bitmap block 0 in block_group 0 [ 623.851219][T16747] Quota error (device loop1): write_blk: dquota write failed [ 623.857379][T16747] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 623.859431][T16747] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.4582: Failed to acquire dquot type 0 [ 623.885135][T16747] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.4582: Freeing blocks not in datazone - block = 0, count = 4096 [ 623.910341][T16747] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.4582: Invalid inode bitmap blk 0 in block_group 0 [ 623.914016][T16747] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 623.924186][T16747] EXT4-fs (loop1): 1 orphan inode deleted [ 623.925336][T16747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 623.942243][ T9] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 623.944372][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 0 [ 626.012541][T11573] EXT4-fs (loop1): unmounting filesystem. [ 626.037494][T16766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4588'. [ 627.312966][T16782] process 'syz.2.4592' launched './file1' with NULL argv: empty string added [ 627.615260][T16782] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 629.487769][T16788] device wg2 entered promiscuous mode [ 629.596568][T16805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4600'. [ 633.716794][T16853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4614'. [ 633.817526][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'. [ 636.196709][T16880] loop4: detected capacity change from 0 to 512 [ 636.292656][T16880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 636.583140][T16891] device pim6reg1 entered promiscuous mode [ 636.636861][T13483] EXT4-fs (loop4): unmounting filesystem. [ 636.719288][T16894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4627'. [ 639.958824][T16934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4640'. [ 640.262585][T16943] netlink: 'syz.2.4644': attribute type 12 has an invalid length. [ 645.706252][T16974] loop0: detected capacity change from 0 to 256 [ 645.930941][T16980] fuse: Bad value for 'fd' [ 647.147410][T16992] netlink: 'syz.2.4656': attribute type 12 has an invalid length. [ 650.162976][T17015] loop4: detected capacity change from 0 to 512 [ 651.416035][T17015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 651.431239][T17015] EXT4-fs (loop4): 1 orphan inode deleted [ 651.531579][T17015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 651.670686][T13483] EXT4-fs (loop4): unmounting filesystem. [ 651.785196][T17029] netlink: 'syz.4.4668': attribute type 12 has an invalid length. [ 653.182883][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.184867][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.680418][T17033] loop1: detected capacity change from 0 to 40427 [ 654.476084][T17033] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 654.482572][T17033] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 654.603778][T17033] F2FS-fs (loop1): Found nat_bits in checkpoint [ 654.811673][T17033] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 654.813383][T17033] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 655.262922][T17067] overlayfs: missing 'workdir' [ 655.618088][T17073] netlink: 'syz.1.4679': attribute type 4 has an invalid length. [ 656.516570][T17081] loop3: detected capacity change from 0 to 512 [ 656.579238][T17081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 657.631502][T17081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 657.657492][T17081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4683: bg 0: block 248: padding at end of block bitmap is not set [ 657.676745][T17081] Quota error (device loop3): write_blk: dquota write failed [ 657.678474][T17081] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 657.680498][T17081] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.4683: Failed to acquire dquot type 1 [ 657.702738][T17081] EXT4-fs (loop3): 1 truncate cleaned up [ 657.714742][T17081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 659.002927][T17079] netlink: 'syz.0.4681': attribute type 12 has an invalid length. [ 659.712184][T14202] EXT4-fs (loop3): unmounting filesystem. [ 661.742091][T17126] loop4: detected capacity change from 0 to 256 [ 661.753500][T17121] loop1: detected capacity change from 0 to 1024 [ 661.755251][T17121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 661.780784][T17126] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 661.869408][T17121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 661.977838][T11573] EXT4-fs (loop1): unmounting filesystem. [ 662.365387][T17141] loop1: detected capacity change from 0 to 256 [ 662.398606][T17141] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 665.345510][T17170] 9pnet_fd: Insufficient options for proto=fd [ 668.886507][T17205] 9pnet_fd: Insufficient options for proto=fd [ 669.818114][T17221] loop1: detected capacity change from 0 to 16 [ 669.876910][T17221] erofs: (device loop1): mounted with root inode @ nid 36. [ 669.926170][T17221] syz.1.4727: attempt to access beyond end of device [ 669.926170][T17221] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 669.929642][T17221] syz.1.4727: attempt to access beyond end of device [ 669.929642][T17221] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 670.396877][T17223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.415986][T17223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.840383][T17231] loop0: detected capacity change from 0 to 16 [ 670.846314][T17231] erofs: Unknown parameter 'sched_switch' [ 673.207454][T17250] 9pnet_fd: Insufficient options for proto=fd [ 673.373783][T17258] device macsec0 entered promiscuous mode [ 674.977863][ T4297] Bluetooth: hci1: command 0x1003 tx timeout [ 674.980036][ T4306] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 676.771219][T17295] 9pnet_fd: Insufficient options for proto=fd [ 676.941418][T17301] loop0: detected capacity change from 0 to 1024 [ 676.943144][T17301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.510796][T17301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 677.840203][T14604] EXT4-fs (loop0): unmounting filesystem. [ 678.032344][T17312] loop2: detected capacity change from 0 to 512 [ 678.814873][T17312] ext4: Unknown parameter 'fowner>00000000000000000000' [ 678.887041][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.332536][T17327] loop2: detected capacity change from 0 to 256 [ 679.800251][T17327] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 680.267704][T17337] loop1: detected capacity change from 0 to 1024 [ 680.269499][T17337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 680.437588][T17337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 682.962497][T11573] EXT4-fs (loop1): unmounting filesystem. [ 683.435500][T17363] syz.2.4773 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 684.398013][T17391] loop1: detected capacity change from 0 to 512 [ 684.399801][T17391] EXT4-fs: Ignoring removed i_version option [ 684.431474][T17391] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 684.442775][T17391] System zones: 0-2, 18-18, 34-34 [ 684.457353][T17391] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 684.470725][T17391] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 684.485412][T17391] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.4781: Failed to acquire dquot type 0 [ 684.491922][T17396] loop4: detected capacity change from 0 to 1024 [ 684.500129][T17391] EXT4-fs (loop1): Remounting filesystem read-only [ 684.507069][T17391] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 684.523468][T17396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.534177][T17391] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 684.549195][T17391] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.4781: Failed to acquire dquot type 0 [ 684.565967][T17396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 684.572080][T17391] EXT4-fs (loop1): Remounting filesystem read-only [ 684.579995][T17391] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 684.582512][T17391] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 684.584367][T17391] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.4781: Failed to acquire dquot type 0 [ 684.605846][T17391] EXT4-fs (loop1): Remounting filesystem read-only [ 684.607244][T17391] EXT4-fs (loop1): 1 orphan inode deleted [ 684.608603][T17391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 684.708939][T13483] EXT4-fs (loop4): unmounting filesystem. [ 684.973846][T17400] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4781: deleted inode referenced: 16 [ 685.590359][T17400] EXT4-fs (loop1): Remounting filesystem read-only [ 685.593648][T17401] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4781: deleted inode referenced: 16 [ 685.598193][T17401] EXT4-fs (loop1): Remounting filesystem read-only [ 685.600862][T17402] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4781: deleted inode referenced: 16 [ 685.604574][T17402] EXT4-fs (loop1): Remounting filesystem read-only [ 685.774102][T11573] EXT4-fs (loop1): unmounting filesystem. [ 690.725573][T17474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4809'. [ 691.679175][T17479] fuse: Bad value for 'fd' [ 694.885155][T17522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4823'. [ 698.104335][T17558] loop0: detected capacity change from 0 to 256 [ 698.910422][T17561] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4835'. [ 699.864419][T17571] loop2: detected capacity change from 0 to 40427 [ 699.930461][T17576] device pim6reg1 entered promiscuous mode [ 699.967737][T17571] F2FS-fs (loop2): Found nat_bits in checkpoint [ 700.086824][T17571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 700.263987][T13800] syz-executor: attempt to access beyond end of device [ 700.263987][T13800] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 700.601378][T17590] loop3: detected capacity change from 0 to 512 [ 700.618026][T17590] EXT4-fs: Ignoring removed i_version option [ 700.626949][T17590] EXT4-fs: Ignoring removed nobh option [ 701.315218][T17590] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 701.318100][T17590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 701.452096][T17590] EXT4-fs (loop3): 1 truncate cleaned up [ 701.457416][T17590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 701.808629][T17605] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4849'. [ 702.179101][T14202] EXT4-fs (loop3): unmounting filesystem. [ 704.049666][T17610] loop1: detected capacity change from 0 to 40427 [ 704.053846][T17610] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 704.055887][T17610] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 704.059019][T17610] F2FS-fs (loop1): invalid crc value [ 704.213260][T17610] F2FS-fs (loop1): Found nat_bits in checkpoint [ 705.016709][T17610] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 705.018394][T17610] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 705.075408][T17610] syz.1.4850: attempt to access beyond end of device [ 705.075408][T17610] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 705.143607][T17647] loop3: detected capacity change from 0 to 512 [ 705.150758][T17647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 706.550584][ T149] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 706.577259][ T149] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 706.649864][T17653] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4862'. [ 706.655827][T17647] EXT4-fs (loop3): orphan cleanup on readonly fs [ 706.659719][T17647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4860: bg 0: block 248: padding at end of block bitmap is not set [ 706.663679][T17647] Quota error (device loop3): write_blk: dquota write failed [ 706.665119][T17647] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 706.667110][T17647] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.4860: Failed to acquire dquot type 1 [ 706.672706][T17647] EXT4-fs (loop3): 1 truncate cleaned up [ 706.675130][T17647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 707.226077][T17654] fuse: Bad value for 'fd' [ 707.818859][T14202] EXT4-fs (loop3): unmounting filesystem. [ 708.589761][T17658] loop2: detected capacity change from 0 to 40427 [ 708.595045][T17658] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 708.599367][T17658] F2FS-fs (loop2): invalid crc value [ 708.615857][T17658] F2FS-fs (loop2): Found nat_bits in checkpoint [ 708.644141][T17658] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 708.760330][T17658] syz.2.4864: attempt to access beyond end of device [ 708.760330][T17658] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 708.969138][T13800] F2FS-fs (loop2): access invalid blkaddr:2816 [ 708.977868][T13800] CPU: 1 PID: 13800 Comm: syz-executor Not tainted 6.1.119-syzkaller #0 [ 708.979582][T13800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.981542][T13800] Call trace: [ 708.982248][T13800] dump_backtrace+0x1c8/0x1f4 [ 708.983231][T13800] show_stack+0x2c/0x3c [ 708.984020][T13800] dump_stack_lvl+0x108/0x170 [ 708.985037][T13800] dump_stack+0x1c/0x58 [ 708.985875][T13800] f2fs_is_valid_blkaddr+0x9f4/0xf58 [ 708.986919][T13800] f2fs_map_blocks+0x112c/0x2fd8 [ 708.987967][T13800] f2fs_mpage_readpages+0xa6c/0x1df4 [ 708.989200][T13800] f2fs_readahead+0x198/0x450 [ 708.990151][T13800] read_pages+0x168/0x6a0 [ 708.991070][T13800] page_cache_ra_unbounded+0x46c/0x58c [ 708.992068][T13800] page_cache_ra_order+0x850/0xa74 [ 708.993031][T13800] ondemand_readahead+0x5f0/0xafc [ 708.994078][T13800] page_cache_sync_ra+0x350/0x3d0 [ 708.995087][T13800] f2fs_readdir+0x488/0xe38 [ 708.996059][T13800] iterate_dir+0x1f4/0x4ec [ 708.997097][T13800] __arm64_sys_getdents64+0x1c4/0x4a0 [ 708.998171][T13800] invoke_syscall+0x98/0x2bc [ 708.999056][T13800] el0_svc_common+0x138/0x258 [ 708.999976][T13800] do_el0_svc+0x58/0x13c [ 709.000934][T13800] el0_svc+0x58/0x168 [ 709.001715][T13800] el0t_64_sync_handler+0x84/0xf0 [ 709.002802][T13800] el0t_64_sync+0x18c/0x190 [ 709.034070][T13800] F2FS-fs (loop2): access invalid blkaddr:2816 [ 709.035406][T13800] CPU: 0 PID: 13800 Comm: syz-executor Not tainted 6.1.119-syzkaller #0 [ 709.037002][T13800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 709.038988][T13800] Call trace: [ 709.039628][T13800] dump_backtrace+0x1c8/0x1f4 [ 709.040516][T13800] show_stack+0x2c/0x3c [ 709.041338][T13800] dump_stack_lvl+0x108/0x170 [ 709.042281][T13800] dump_stack+0x1c/0x58 [ 709.043152][T13800] f2fs_is_valid_blkaddr+0x9f4/0xf58 [ 709.044204][T13800] f2fs_map_blocks+0x112c/0x2fd8 [ 709.045173][T13800] f2fs_mpage_readpages+0xa6c/0x1df4 [ 709.046231][T13800] f2fs_readahead+0x198/0x450 [ 709.047157][T13800] read_pages+0x168/0x6a0 [ 709.048017][T13800] page_cache_ra_unbounded+0x46c/0x58c [ 709.049098][T13800] page_cache_ra_order+0x850/0xa74 [ 709.050106][T13800] ondemand_readahead+0x5f0/0xafc [ 709.051071][T13800] page_cache_sync_ra+0x350/0x3d0 [ 709.052010][T13800] f2fs_readdir+0x488/0xe38 [ 709.052949][T13800] iterate_dir+0x1f4/0x4ec [ 709.053857][T13800] __arm64_sys_getdents64+0x1c4/0x4a0 [ 709.054935][T13800] invoke_syscall+0x98/0x2bc [ 709.055819][T13800] el0_svc_common+0x138/0x258 [ 709.056708][T13800] do_el0_svc+0x58/0x13c [ 709.057580][T13800] el0_svc+0x58/0x168 [ 709.058333][T13800] el0t_64_sync_handler+0x84/0xf0 [ 709.059319][T13800] el0t_64_sync+0x18c/0x190 [ 709.786397][T13800] syz-executor: attempt to access beyond end of device [ 709.786397][T13800] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 709.798741][T13800] syz-executor: attempt to access beyond end of device [ 709.798741][T13800] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 709.957510][T17689] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4874'. [ 712.028320][T17705] loop3: detected capacity change from 0 to 16 [ 712.042102][T17705] erofs: (device loop3): mounted with root inode @ nid 36. [ 712.070682][T17705] syz.3.4873: attempt to access beyond end of device [ 712.070682][T17705] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 712.073445][T17705] syz.3.4873: attempt to access beyond end of device [ 712.073445][T17705] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 713.071540][T17727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4886'. [ 713.997897][T17731] loop3: detected capacity change from 0 to 128 [ 713.999707][T17731] EXT4-fs: quotafile must be on filesystem root [ 714.129241][T17735] loop2: detected capacity change from 0 to 2048 [ 716.005743][T17735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 716.084545][T13800] EXT4-fs (loop2): unmounting filesystem. [ 716.121483][T17749] loop0: detected capacity change from 0 to 512 [ 718.517971][T17769] device ip6tnl1 entered promiscuous mode [ 720.175174][T17790] loop4: detected capacity change from 0 to 16 [ 720.215739][T17790] erofs: (device loop4): mounted with root inode @ nid 36. [ 720.321886][T17790] syz.4.4904: attempt to access beyond end of device [ 720.321886][T17790] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 720.549667][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 720.618492][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 720.707899][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 720.753724][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 720.830990][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 720.940721][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.085031][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.088779][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.103386][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.122872][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.132939][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.136654][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.139258][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.141646][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.280923][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.283108][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.284633][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.286015][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.287633][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.289489][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.290955][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.293279][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.294808][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.296240][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.297731][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.299158][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.300764][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.302607][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.304145][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.305625][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.307101][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.309318][ T4821] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 721.315694][ T4821] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 722.205059][ T27] audit: type=1326 audit(722.607:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.215629][ T27] audit: type=1326 audit(722.617:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.238490][ T27] audit: type=1326 audit(722.637:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.242845][ T27] audit: type=1326 audit(722.637:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.257412][ T27] audit: type=1326 audit(722.637:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.287769][ T27] audit: type=1326 audit(722.637:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.307281][ T27] audit: type=1326 audit(722.637:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.316241][ T27] audit: type=1326 audit(722.637:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.331968][ T27] audit: type=1326 audit(722.637:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.342030][ T27] audit: type=1326 audit(722.637:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.0.4908" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f4b368 code=0x7ffc0000 [ 722.547355][T17814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4911'. [ 724.278434][T17829] loop0: detected capacity change from 0 to 512 [ 724.287578][T17829] ext3: Unknown parameter 'nouser_xattr' [ 724.487060][T17839] loop2: detected capacity change from 0 to 256 [ 727.345918][T17839] FAT-fs (loop2): Directory bread(block 64) failed [ 727.347499][T17839] FAT-fs (loop2): Directory bread(block 65) failed [ 727.348778][T17839] FAT-fs (loop2): Directory bread(block 66) failed [ 727.350135][T17839] FAT-fs (loop2): Directory bread(block 67) failed [ 727.351513][T17839] FAT-fs (loop2): Directory bread(block 68) failed [ 727.352793][T17839] FAT-fs (loop2): Directory bread(block 69) failed [ 727.354045][T17839] FAT-fs (loop2): Directory bread(block 70) failed [ 727.355325][T17839] FAT-fs (loop2): Directory bread(block 71) failed [ 727.356692][T17839] FAT-fs (loop2): Directory bread(block 72) failed [ 727.357943][T17839] FAT-fs (loop2): Directory bread(block 73) failed [ 727.625129][T17855] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4922'. [ 730.209764][T17875] loop0: detected capacity change from 0 to 512 [ 734.112634][T17876] loop4: detected capacity change from 0 to 512 [ 734.813425][T17876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 734.817693][T17876] EXT4-fs: failed to create workqueue [ 734.818768][T17876] EXT4-fs (loop4): mount failed [ 734.830018][T17875] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 739.915273][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.349760][T17934] binder: 17933:17934 tried to acquire reference to desc 0, got 1 instead [ 740.352579][T17934] binder_alloc: 17933: binder_alloc_buf, no vma [ 740.361478][T17934] binder: cannot allocate buffer: vma cleared, target dead or dying [ 740.361517][T17934] binder: 17933:17934 transaction async to 17933:0 failed 12/29189/-3, size 0-0 line 3239 [ 740.388657][ T4345] binder: undelivered TRANSACTION_ERROR: 29189 [ 740.608204][T17941] loop0: detected capacity change from 0 to 256 [ 741.418215][T17947] loop2: detected capacity change from 0 to 128 [ 741.419893][T17947] EXT4-fs: quotafile must be on filesystem root [ 745.540209][T17978] loop0: detected capacity change from 0 to 16 [ 745.544063][T17978] erofs: (device loop0): mounted with root inode @ nid 36. [ 748.653763][T17997] binder: 17995:17997 tried to acquire reference to desc 0, got 1 instead [ 748.672148][ T4821] binder: release 17995:17997 transaction 17 out, still active [ 748.673837][ T4821] binder: undelivered TRANSACTION_COMPLETE [ 748.753991][ T4821] binder: send failed reply for transaction 17, target dead [ 749.603006][T17999] fuse: Bad value for 'fd' [ 749.676473][T18008] netlink: 'syz.3.4976': attribute type 10 has an invalid length. [ 749.678132][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 750.733194][T18021] device pim6reg1 entered promiscuous mode [ 750.928353][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 750.928367][ T27] audit: type=1326 audit(751.382:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 750.935295][ T27] audit: type=1326 audit(751.382:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 750.939721][ T27] audit: type=1326 audit(751.382:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 750.953486][ T27] audit: type=1326 audit(751.382:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 750.957752][ T27] audit: type=1326 audit(751.382:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 750.961826][ T27] audit: type=1326 audit(751.382:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 751.008636][ T27] audit: type=1326 audit(751.382:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 751.012850][ T27] audit: type=1326 audit(751.382:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 751.033474][ T27] audit: type=1326 audit(751.382:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 751.047934][ T27] audit: type=1326 audit(751.382:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.1.4981" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8454b368 code=0x7ffc0000 [ 752.592926][T18043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.594871][T18043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.094741][T18053] loop2: detected capacity change from 0 to 512 [ 753.279427][T18053] EXT4-fs (loop2): orphan cleanup on readonly fs [ 753.310298][T18053] [ 753.310836][T18053] ====================================================== [ 753.312194][T18053] WARNING: possible circular locking dependency detected [ 753.313504][T18053] 6.1.119-syzkaller #0 Not tainted [ 753.314504][T18053] ------------------------------------------------------ [ 753.315908][T18053] syz.2.4989/18053 is trying to acquire lock: [ 753.317089][T18053] ffff0000f47945e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x54/0x240 [ 753.319014][T18053] [ 753.319014][T18053] but task is already holding lock: [ 753.320715][T18053] ffff0000defc70e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x7e0/0x1178 [ 753.322719][T18053] [ 753.322719][T18053] which lock already depends on the new lock. [ 753.322719][T18053] [ 753.324845][T18053] [ 753.324845][T18053] the existing dependency chain (in reverse order) is: [ 753.326859][T18053] [ 753.326859][T18053] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 753.328637][T18053] down_write+0x5c/0x88 [ 753.329590][T18053] ext4_map_blocks+0x77c/0x1810 [ 753.330797][T18053] ext4_getblk+0x198/0x6ec [ 753.331892][T18053] ext4_bread+0x3c/0x1b0 [ 753.332910][T18053] ext4_quota_write+0x230/0x54c [ 753.334032][T18053] find_free_dqentry+0x550/0xa5c [ 753.335091][T18053] do_insert_tree+0x600/0xec4 [ 753.336193][T18053] do_insert_tree+0x834/0xec4 [ 753.337399][T18053] do_insert_tree+0x834/0xec4 [ 753.338601][T18053] do_insert_tree+0x7fc/0xec4 [ 753.339684][T18053] qtree_write_dquot+0x3c8/0x4d8 [ 753.340856][T18053] v2_write_dquot+0xf4/0x188 [ 753.342022][T18053] dquot_acquire+0x2c4/0x5c4 [ 753.343236][T18053] ext4_acquire_dquot+0x270/0x420 [ 753.344369][T18053] dqget+0x660/0xcec [ 753.345361][T18053] __dquot_initialize+0x344/0xc04 [ 753.346651][T18053] dquot_initialize+0x24/0x34 [ 753.347853][T18053] ext4_process_orphan+0x5c/0x2b8 [ 753.349029][T18053] ext4_orphan_cleanup+0x974/0x1134 [ 753.350391][T18053] ext4_fill_super+0x6f04/0x7570 [ 753.351668][T18053] get_tree_bdev+0x360/0x54c [ 753.352834][T18053] ext4_get_tree+0x28/0x38 [ 753.353854][T18053] vfs_get_tree+0x90/0x274 [ 753.354922][T18053] do_new_mount+0x278/0x8fc [ 753.355969][T18053] path_mount+0x590/0xe5c [ 753.357096][T18053] __arm64_sys_mount+0x45c/0x594 [ 753.358285][T18053] invoke_syscall+0x98/0x2bc [ 753.359429][T18053] el0_svc_common+0x138/0x258 [ 753.360767][T18053] do_el0_svc+0x58/0x13c [ 753.361718][T18053] el0_svc+0x58/0x168 [ 753.362679][T18053] el0t_64_sync_handler+0x84/0xf0 [ 753.363781][T18053] el0t_64_sync+0x18c/0x190 [ 753.364953][T18053] [ 753.364953][T18053] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 753.366582][T18053] down_read+0x64/0x308 [ 753.367528][T18053] v2_read_dquot+0x50/0x11c [ 753.368604][T18053] dquot_acquire+0x130/0x5c4 [ 753.369796][T18053] ext4_acquire_dquot+0x270/0x420 [ 753.370957][T18053] dqget+0x660/0xcec [ 753.371869][T18053] __dquot_initialize+0x344/0xc04 [ 753.373183][T18053] dquot_initialize+0x24/0x34 [ 753.374282][T18053] ext4_process_orphan+0x5c/0x2b8 [ 753.375542][T18053] ext4_orphan_cleanup+0x974/0x1134 [ 753.376892][T18053] ext4_fill_super+0x6f04/0x7570 [ 753.378093][T18053] get_tree_bdev+0x360/0x54c [ 753.379230][T18053] ext4_get_tree+0x28/0x38 [ 753.380197][T18053] vfs_get_tree+0x90/0x274 [ 753.381193][T18053] do_new_mount+0x278/0x8fc [ 753.382282][T18053] path_mount+0x590/0xe5c [ 753.383356][T18053] __arm64_sys_mount+0x45c/0x594 [ 753.384574][T18053] invoke_syscall+0x98/0x2bc [ 753.385752][T18053] el0_svc_common+0x138/0x258 [ 753.386874][T18053] do_el0_svc+0x58/0x13c [ 753.387843][T18053] el0_svc+0x58/0x168 [ 753.388814][T18053] el0t_64_sync_handler+0x84/0xf0 [ 753.389971][T18053] el0t_64_sync+0x18c/0x190 [ 753.391054][T18053] [ 753.391054][T18053] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 753.392700][T18053] __lock_acquire+0x3338/0x7680 [ 753.393922][T18053] lock_acquire+0x26c/0x7cc [ 753.395033][T18053] __mutex_lock_common+0x190/0x21a0 [ 753.396326][T18053] mutex_lock_nested+0x38/0x44 [ 753.397463][T18053] dquot_commit+0x54/0x240 [ 753.398677][T18053] ext4_write_dquot+0x1b4/0x314 [ 753.399882][T18053] ext4_mark_dquot_dirty+0xe8/0x140 [ 753.401105][T18053] mark_all_dquot_dirty+0x108/0x424 [ 753.402403][T18053] __dquot_free_space+0x840/0xce4 [ 753.403600][T18053] ext4_free_blocks+0x1b14/0x2b64 [ 753.404744][T18053] ext4_ext_remove_space+0x1bd0/0x4544 [ 753.405989][T18053] ext4_ext_truncate+0x168/0x210 [ 753.407170][T18053] ext4_truncate+0xa08/0x1178 [ 753.408241][T18053] ext4_evict_inode+0xc3c/0x12cc [ 753.409454][T18053] evict+0x418/0x894 [ 753.410382][T18053] iput+0x7c0/0x8a4 [ 753.411300][T18053] ext4_process_orphan+0x244/0x2b8 [ 753.412517][T18053] ext4_orphan_cleanup+0x974/0x1134 [ 753.413750][T18053] ext4_fill_super+0x6f04/0x7570 [ 753.414849][T18053] get_tree_bdev+0x360/0x54c [ 753.415923][T18053] ext4_get_tree+0x28/0x38 [ 753.416898][T18053] vfs_get_tree+0x90/0x274 [ 753.417954][T18053] do_new_mount+0x278/0x8fc [ 753.419079][T18053] path_mount+0x590/0xe5c [ 753.420119][T18053] __arm64_sys_mount+0x45c/0x594 [ 753.421276][T18053] invoke_syscall+0x98/0x2bc [ 753.422404][T18053] el0_svc_common+0x138/0x258 [ 753.423555][T18053] do_el0_svc+0x58/0x13c [ 753.424626][T18053] el0_svc+0x58/0x168 [ 753.425543][T18053] el0t_64_sync_handler+0x84/0xf0 [ 753.426735][T18053] el0t_64_sync+0x18c/0x190 [ 753.427801][T18053] [ 753.427801][T18053] other info that might help us debug this: [ 753.427801][T18053] [ 753.430132][T18053] Chain exists of: [ 753.430132][T18053] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 753.430132][T18053] [ 753.433253][T18053] Possible unsafe locking scenario: [ 753.433253][T18053] [ 753.435014][T18053] CPU0 CPU1 [ 753.436304][T18053] ---- ---- [ 753.437516][T18053] lock(&ei->i_data_sem/2); [ 753.438472][T18053] lock(&s->s_dquot.dqio_sem); [ 753.440075][T18053] lock(&ei->i_data_sem/2); [ 753.441688][T18053] lock(&dquot->dq_lock); [ 753.442605][T18053] [ 753.442605][T18053] *** DEADLOCK *** [ 753.442605][T18053] [ 753.444260][T18053] 4 locks held by syz.2.4989/18053: [ 753.445450][T18053] #0: ffff0000dc9bc0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1b4/0x824 [ 753.447654][T18053] #1: ffff0000dc9bc650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x408/0x12cc [ 753.449729][T18053] #2: ffff0000defc70e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x7e0/0x1178 [ 753.451768][T18053] #3: ffff800015cd8ac8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 753.453715][T18053] [ 753.453715][T18053] stack backtrace: [ 753.455000][T18053] CPU: 0 PID: 18053 Comm: syz.2.4989 Not tainted 6.1.119-syzkaller #0 [ 753.456774][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 753.458995][T18053] Call trace: [ 753.459696][T18053] dump_backtrace+0x1c8/0x1f4 [ 753.460824][T18053] show_stack+0x2c/0x3c [ 753.461936][T18053] dump_stack_lvl+0x108/0x170 [ 753.462978][T18053] dump_stack+0x1c/0x58 [ 753.463930][T18053] print_circular_bug+0x150/0x1b8 [ 753.465204][T18053] check_noncircular+0x2cc/0x378 [ 753.466286][T18053] __lock_acquire+0x3338/0x7680 [ 753.467280][T18053] lock_acquire+0x26c/0x7cc [ 753.468232][T18053] __mutex_lock_common+0x190/0x21a0 [ 753.469404][T18053] mutex_lock_nested+0x38/0x44 [ 753.470432][T18053] dquot_commit+0x54/0x240 [ 753.471404][T18053] ext4_write_dquot+0x1b4/0x314 [ 753.472331][T18053] ext4_mark_dquot_dirty+0xe8/0x140 [ 753.473500][T18053] mark_all_dquot_dirty+0x108/0x424 [ 753.474671][T18053] __dquot_free_space+0x840/0xce4 [ 753.475667][T18053] ext4_free_blocks+0x1b14/0x2b64 [ 753.476814][T18053] ext4_ext_remove_space+0x1bd0/0x4544 [ 753.477958][T18053] ext4_ext_truncate+0x168/0x210 [ 753.478957][T18053] ext4_truncate+0xa08/0x1178 [ 753.479934][T18053] ext4_evict_inode+0xc3c/0x12cc [ 753.480945][T18053] evict+0x418/0x894 [ 753.481740][T18053] iput+0x7c0/0x8a4 [ 753.482460][T18053] ext4_process_orphan+0x244/0x2b8 [ 753.483474][T18053] ext4_orphan_cleanup+0x974/0x1134 [ 753.484510][T18053] ext4_fill_super+0x6f04/0x7570 [ 753.485539][T18053] get_tree_bdev+0x360/0x54c [ 753.486583][T18053] ext4_get_tree+0x28/0x38 [ 753.487457][T18053] vfs_get_tree+0x90/0x274 [ 753.488343][T18053] do_new_mount+0x278/0x8fc [ 753.489199][T18053] path_mount+0x590/0xe5c [ 753.490143][T18053] __arm64_sys_mount+0x45c/0x594 [ 753.491137][T18053] invoke_syscall+0x98/0x2bc [ 753.492098][T18053] el0_svc_common+0x138/0x258 [ 753.493032][T18053] do_el0_svc+0x58/0x13c [ 753.493866][T18053] el0_svc+0x58/0x168 [ 753.494655][T18053] el0t_64_sync_handler+0x84/0xf0 [ 753.495693][T18053] el0t_64_sync+0x18c/0x190 [ 753.497003][T18053] EXT4-fs (loop2): 1 orphan inode deleted [ 753.511386][T18053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 753.776276][T13800] EXT4-fs (loop2): unmounting filesystem.