last executing test programs: 8.749863343s ago: executing program 2: futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0xfffff000) write(r1, &(0x7f00000006c0)='^', 0x1) tee(r0, r4, 0x81, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.592032963s ago: executing program 2: unshare(0x600) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x0, @private1}, 0x80) 7.252107926s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000001a40)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64], 0x2, 0x5f51, &(0x7f0000007240)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000dc0)=ANY=[@ANYRES16, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYBLOB="1eaca1ce5a49018bb44244f8b2e2683b4b329aa2188af018f727984b8dbe8a941919cc373d20ba827d3ad4574273aa70a80231414c72c615cfec7380d93e938dcffc8174dda0429832d29ca72a4cb0580f3783c38ce824d6c4274a6e99667d3b8eccc80c794989574d4152a015937f5e3add863990e9c4ebff9a09734e2cec8ca721e4a3e6c9f8dc88892a89d9194c1dace384041fd04f2ca2b62c536aeffc9bc00a390a879f703dfae3af2235fcccb0fc26802a99d736b0d0b7668e482293bda4592de7b890051e901e05ff42cf566ec59a6bc3b35ace82855630fa5237dd17dc6cbb45903df8cd2ae1b7090615a49a", @ANYRES32, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) 5.436408917s ago: executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$int_in(0xffffffffffffffff, 0x2a10, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000340)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.927105536s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000b00), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1c000000, 0x0, r2, 0x1000, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="620ac4ff0000000071101d000000000095000000000000007f5765f3f357c58b77e63bba9dc81ce741aa97d5f2db517308be3cf00a9020addcdc79d7"], &(0x7f0000000480)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='1-01'], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 4.831404311s ago: executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002000040257d15a44000016008010902600042017bef0009040000010209", @ANYRES16], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 4.659755937s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000ffe0f505000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000002850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x4ab, &(0x7f00000004c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0xe8, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xcb, 0x2a, [@perr={0x84, 0xc5, {0x0, 0xf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}]}]}, 0xe8}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000017c0)) fcntl$getown(0xffffffffffffffff, 0x9) geteuid() getgid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffff0b3c}) write$snddsp(r6, &(0x7f0000000000)="ea09b7bafc1a5dbbe8165e69a528416b71a4e275bc6fdf758f90408b0885", 0x1e) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000080)=0x1ff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r7, &(0x7f0000005e40)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, 0x0) 3.492412008s ago: executing program 3: syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f0000000140)={[{@longad}, {@uid}, {@uid_forget}, {@gid_ignore}, {@uid_forget}, {@uid_ignore}, {@session={'session', 0x3d, 0xffffffffffffff81}}, {@unhide}, {@anchor={'anchor', 0x3d, 0x4}}, {}, {@undelete}]}, 0x2, 0xc40, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhX2qqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFXDQwmiLokWldILn4UORUoADRwkZQ9MAWAXIKGMzsW3FJkZYikhJlfT429d2ZeW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xz1/4mR62K0AAB6ki6NfPXHK8x8AHiuX/f8/AAAAAAAAAAAAAADsdymKeDJSzF5cTePVckf9Qrvv5q2x4ZGtqw2kquaBqnz5806cOn3mSy8MnT2Z80J7+iPq77bPxuujl883Xpm5MTs3OT8/OdEYm25fnZmYvOc97LT+ZseqE9C48cbNiWvX5hunnj+9YfOtwQ/7nzgyeG7o2ePPdMuODY+MjK4XqfeWr913Qzq2G+FxMIo4Hime++5PUisiitj5uag/2Gu/2UDViWNVJ8aGR6qOTLVb0wvlxkvdE1FENHoqNbvnaOtrEbW+B9qH7TUjFsvmlw0+VnZvdLY117oyNdm41JpbaC+0Z6YvpU5ry/40ooizKWIpIlb679xdXxRRixTfObyarkTEge55+GI1MHj7dhR72Md7ULaz0RexVDwC12wf648iXosUP33vaFzN95nqXvOFiNfK/H7E22W+FJHKL8aZiA+2+B7xaKpFEX9RXv9zq2miuh907ysXvtb4yvS1mZ6y3fvKL/l8uONO8ZCeDwOb8sHY5/emehTRqu74q+n+f7MDAAAAAAAAAAAAAAAAwG4biCI+Eyle/fc/rsYVRzUu/fC5oT8Y/NXeMeNP32U/ZdnnI2KxuLcxuQfzwMBL6VJKD3ks8eOsHkX8SR7/962H3RgAAAAAAAAAAAAAAAAAAIDHWhE/jhQvvn80LUXvnOLt6euNy60rU51ZYbtz/3bnTF9bW1trpE42c47nXMy5lHM550rOKHL9nM2c4zkXcy7lXM65kjMO5Po5mznHcy7mXMq5nHMlZ9Ry/ZzNnOM5F3Mu5VzOuZIz9sncvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPHtb6ymSBHRjBiPTi73P+zWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yJF4w+bt9fVIiJV/3YcLX85E82DZX4ymkNlvhTN8zlbVdaa33oI7Wdn+lIRP4oU/fV3b1/wfP37Oku3vwbx9jfXlz5b6+SB7sbBD/ufOHL43NDIbzy93ee0VQOOXWhP37zVGBseGRntWV3LR/9kz7rBfNxid7pORMy/+dYbrampybn7/1B+BXZQ/RH6kGqPS099qD5EbV804+H0ncdA+fz/IFL87vv/0X3gd57/9fiVztLtJ3z87E/Xn/8vbt7RPT7/a5vr5ed/+Uzf6vn/ZM+6F/PvRvpqEfWFG7N9RyLq82++dbx9o3V98vrk9JkTJ748NPTl0yf6DkbUr7WnJns+7crpAgAAAAAAAAAAAAAAAHhwUhEvR4rWj1ZTIyJuVeO1Bs8NPXv8mQNxoBpvtWHc9uujl883Xpm5MTs3OT8/OdEYm25fnZmYvNfD1avhXmPDI3vSmbsa2OP2D9RfmZl9c659/Y8Wttx+qH7+yvzCXOvq1ptjIIqIZu+aY1WDx4ZHqkZPtVvTZdV6bDmY/pfXl4r4r0hx9UwjfT6vy+P/N4/w3zD+f3HzjvZo/P8netaVx0ypiJ9Fit/5y6fj81U7D8Ud5yyX+9tIcezs53K5OFiW67ah816BzsjAsuz/RYp//PnGst3xkE+ulz15zyf2EVFe/8OR4nt//k78Zl638f0PW1//Q5t3tEfX/6medYc2vK9gx10nX//jkeKlJ9+N38rrPur9H913bxzNhW+/n2OPrv+netYN5uP+9u50HQAAAAAAAAAA4JHWl4r4u0jxg5FaeiGvu5e//zexeUd79Pe/Pt2zbmJ35iu664cdn1QAAAAA2Cf6UhE/jhTXF969PYZ64/jvnvGfv7c+/nM4bdpa/Tnfr1XvDdjNP//rNZiPO77zbgMAAAAAAAAAAAAAAAAAAMC+klIRL+T51Mer8fwT286nvhwpXv2f53K5dKQs150HfrD6tX5xZvr4+ampmauthdaVqcnG6Gzr6mRZ96lIsfo3n8t1i2p+9e5885053tfnYp+LFCN/3y3bmYu9Ozf5U+tlT5ZlPxEp/vsfNpbtzmP9qfWyp8qyfx0pvv7PW5c9sl72dFn2nUjxw683umUPlWW770f99HrZ56/OFHtwVQAAAAAAAAAAAAAAAAAAAHjc9KUi/ixS/O+Npdtj+fP8/309i5W3v9kz3/8mt6p5/ger+f+3+3w/8/9X7xVY3O6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8ZSiiLcixezF1bTcXy531C+0p2/eGhse2braQKpqHqjKlz/1k6dOn/nSC0Nnu/nR9XfbZ+L10cvnG6/M3Jidm5yfn5xojE23r85MTN7zHnZaf7Nj1Qlo3Hjj5sS1a/ONU8+frlYfzJtvDX7Y/8SRwXNDzx5/plt2bHhkZLRnF7W++z76HdI26w9GEX8VKZ777k/SD/ojitj5ubjLd2f3vbxhaaDqxLGqE2PDI1VHptqt6YVy46XuiSgiGj2Vmt1z9ACuxY40IxbL5pcNPlZ2b3S2Nde6MjXZuNSaW2gvtGemL6VOa8v+NKKIsyliKSJW+u/cXV8U8Uak+M7h1fQv/REHuufhixdHv3ri1PbtKPawj/egbGejL2KpuPs1+8+H1chHQH8U8U+R4qfvHY1/7Y+oRecnvhDxWpnfj3g7Otc7lV+MMxEfbPE94tFUiyL+v7z+51bTe/3l/aB7X7nwtcZXpq/N9JTt3lceuefDRgMP9Gjb35tefqDt2EY9ivhhdcdfTf/mv2sAAAAAAAAAAAAAAACAfaSIX48UL75/NFXjg/OY4qfy1itTnWF93bF/3THTa2tra43UyWbO8ZyLOZdyLudcyRlFrp+zWWZ9bW08Ly/mXMq5nHMlZxzI9XM2c47nXMy5lHM550rOqOX6OZs5x3Mu5lzKuZxzJWfsl7HgAAAAAAAAAAAAAAAAAADAx0pR/ZPi299YTWv9nfmlx6OTy+YD/dj7RQAAAP//EqD3Yw==") 3.35304694s ago: executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @loopback}}}, 0x90) 3.162391549s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.144825362s ago: executing program 1: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e3df3b40990435101256000000010902450001000000000904000001377ea3000a2406000105240000000d179ce9ffffff00000000000006241a0000000424020009210000000122000009058e"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) 3.069062604s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 2.943824353s ago: executing program 4: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b000100744e7267657400001c0002800900010073797a31000000000400030008"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x4, 0x400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc472}, 0xe) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELSET={0x67c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPR={0x370, 0x11, 0x0, 0x1, @bitwise={{0xc}, @val={0x360, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x31c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c2285016d68d96686da8bc7855272e496a76fda9bccc9882"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "4c14783d453473a21744ede5dd31706a27a12aa30493f7898a145afc996d0015112aa01e8599b4bd08085d275eabf36fb17956f017f65e442f7e349a94a4e22a0310b58ad893fbd7d8aa02df4fda4f4bce1c328162d1f66b87705ad4008cfa92e95c7ad71e455ea31098dc792826bba9d7a65cdac3b86ca3ff6d94e8b1fd66065307edc257f995f157b8ffc47ce878238b0a9c30b06e3523699504556038a24e3811433137171b583339e214f47be02b4065965037384feebddaabe2d2fc59d7aafb1f2feb4a87ee56b8107d2f914ee1950620511776a83e98cc29b9fdb372aa1ce5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "82e7b0372a1e1fe5512a648f335e5792b0359aff25f773435988a70e98cca080e77d"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x46, 0x1, "4fb60224c09377005f3ed2373e6b5caaffbebd8621ea15ae2d53c9a33945205b966bccbed3590a54fb76c83a426bca382261740aab45c36d52db0a6d0ec179c1658e"}, @NFTA_DATA_VALUE={0xb6, 0x1, "abc8144f6bdc069f75a56b6f95dbfcc222c3301f30948e4604ba7780af0b1c83ce8d07dcd117c6af2069fb4226234bcab99bb2b6c1d2097eb2fa54fcdc27df2f856e14a033ac3142c39b278ceb1727be09b45030ba6e7dd4061b2f9d483e1f4ba5219a2b763a8965e123ef466d3073e99bb1a7069861a3e48db32c747df9773780f544047416b7687a389de011f83736e20ea2403b1ccac7c53b6caeef275440ddb9563163db304f97175e9b06ab33a5fffa"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x10, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_DESC={0x254, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x455}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff4f5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x541700bf}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33c4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb12}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed06}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d22}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffcb5}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x18532abf200c4e5f}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0x700}}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) 2.822614502s ago: executing program 3: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$eJzs3c9vHGcdB+DPrNdbb6iC0yZthIqIEqkgRSR2rBTChYAQyqFCVTlwthKnsbJxKttFboXABQQnJA79AwqSb5yQuAeFc7n1anGqhMQl4hBxMZrZWXvtXf+I7dgxPE80ft+Z95133vnOzDs741gb4P/WrctpPkqRW5ffXirnV1emOqsrUy/VxZ0kZb6RNLtJirmkeJzcLMuLvil96YBPZm+8+/mT1S+6c816quo3dlpviCF1l+spF5KM1Omg0b1uYlN7t5O8PFCltde2NlUsg3apTuHYrQ1Y3qH2P05vWfAs1y3wgundnYrufXPAeHIqyVj9OSD16NA4uh4+HzuNcgAAAPC/4rOHx90DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHnq7/8v6qlRp7mQovf9/63esjp/oj067g4AAAAAAAAAwCH42tM8zVJO9+bXiup3/hermbP5z1rypXyQhcxkPleylOksZjHzmUwy3tdQa2l6cXF+cn3N0vA1rw1d89pR7TEAAAAAAAAAnGDtbUt+mVsbv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXQZGMdJOsJTm7XrDcaHYXp1XNJn/v5U+IYtjCR0ffDwAAADiQsX2s8+WneZqlnO7NrxXVM/9r1fPyWD7IXBYzm8V0MpM79TN0+dTfWF2Z6qyuTD0op8F2v/evZ+pG1WK67x6qLa8/rPe2fL6q0c7dzFZLruR2VedOGtWapfO9/gzv18dln4rv1gb60Bzas2Yd1nJjv9/uLcKheNZXEeN1l3sRmaj7VkbjTDcCRfWiJtkaiV2PTnPrltLI6PqWJtNYf/Nz9kAxH+5UnZb785vnGvMdLA9buB6JRqpIXOs7+17bORLJ1//yp5/c68zdv3d34fKx7NJ+jGyzvI5E7wzLVF8kXj/RkRg+DmxvoorEufX5W/lhfpzLuZB3Mp/Z/DTTWcxM9T61NF2fz+XP8Z0jdXPT3Du79aRVH5fuMdtLny7kB1VuOherdU9nNkUe5k5m8lb171om861cz/Xc6DvC57btd7Vv1VXf2HrV9470X4d2/tI36kw7yW/rdCAGteW1ru3OzsPSHfvLuJ7pi2t3JHyyXutM39g40RelV3rRGR3a+H7GxuZX6ky5jV/V6YthvI5EeQH17hK93r3ajUSzuhcNnud/qK6Nhc7c/fl70+9v0/7WAfnNOi1Pq5Wv7rWXww/F4SrPl1cyVo8km8+OsuzV8kCObC2brMrOro9AjYGyc1VZUfSu1B9te6W26s9wgy1dq8peH1o2VZWd7yvb9HkrD9PJnSOIHwAHNJ5TrfY/25+1P23/un2v/fbY91/69ktvtDL6t9HvNCdG3my8Ufw5n+bnG8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/i18+NH96U5nZn54prF90S6Z3VrekinqL/TZ17YOMdNKchjtjG1tZ7RccOS70951d9Z+kRx5nHtfIji8zu/KTDN7afDmbnU+3lcPG0mO9zw8usxIhp8AxzwwAc/d1cUH719d+PCjb84+mH5v5r2ZudHr129M3Lj+1tTVu7OdmYnuz+PuJfA8bNz0j7snAAAAAAAAAAAAwF4N+8OAiy8fxt/AtPzPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ3Lqc5qMUmZy4MlHOr65Mdcqpl9+o2UzSaCTFz5LicXIz3Snjfc0V+ePjrA3ZziezN979/MnqFxttNbv1k0adHsByPeVCkpE6Paz2bh+4veLfvT0sA3apFzg4bv8NAAD//wNS+MQ=") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17f, &(0x7f0000000000)="$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") r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x0, 0x0, 0xfeffffff, 0x140, 0x0, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'ip6_vti0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x140}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000001"], 0x0) ioperm(0x0, 0x3d, 0x1f) 2.624484813s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {0x8}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 2.582489949s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000ffe0f505000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f505b703000000000002850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x4ab, &(0x7f00000004c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0xe8, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xcb, 0x2a, [@perr={0x84, 0xc5, {0x0, 0xf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}]}]}, 0xe8}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000017c0)) fcntl$getown(0xffffffffffffffff, 0x9) geteuid() getgid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffff0b3c}) write$snddsp(r6, &(0x7f0000000000)="ea09b7bafc1a5dbbe8165e69a528416b71a4e275bc6fdf758f90408b0885", 0x1e) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000080)=0x1ff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r7, &(0x7f0000005e40)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, 0x0) 2.404395307s ago: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x4000}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r4, 0x0, 0x40) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r5, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 2.013728367s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000a207dcba714e76b1"], 0x14}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x10, 0xffffffffffffffff, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x1c, r5, 0x926fdb2c68a18847, 0x0, 0x0, {0x11}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 1.388178264s ago: executing program 4: socket$key(0xf, 0x3, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0xc41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000013140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0x1, 0x8}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x10202}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 797.186956ms ago: executing program 0: r0 = syz_io_uring_setup(0x6d5c, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL) syz_io_uring_setup(0x378, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x19}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 786.971747ms ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="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", 0xfe44}], 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 779.347599ms ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040)=0x2, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040), 0x20000000}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) fchdir(r3) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x0, 0x0) io_uring_setup(0x0, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000640)=ANY=[@ANYRES64=r6, @ANYRES16=r6, @ANYRESOCT=r6, @ANYBLOB="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", @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) unshare(0x20000400) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 772.98013ms ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f00000003c0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 620.332924ms ago: executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@initr0, @exit, @map_fd]}, 0x0}, 0x90) eventfd2(0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)) 297.598944ms ago: executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8}) 174.420172ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) 64.30443ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000006940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000004800)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESHEX=r1], 0x1, 0x14fe, &(0x7f0000002a40)="$eJzs3AuYjVX7MPB1r7UexjSxm+QwrHvdDzsNlkOSHJLkkCRJkuSUkDRJkpAYckoakpDjJIkhJIdpTBrn8yHnJHmlSZKccgrru6be9/N/39736/t/b9/f9/3n/l3Xuva6Z+977Xvte8/s53nmuvYPPUfVa1G/djMiEv8W+O0mWQgRI4QYJoQoIIQIhBCV4yvH59yfT0Hyv/ck7M/1SNq1roBdS9z/3I37n7tx/3M37n/uxv3P3bj/uRv3P3fj/jOWm22bXfQGHrl38PX/3Iw///8byS43+ZsN5W7q9Z9I4f7nbtz/3I37n7tx/3M37n/uxv3P3bj/uRv3n7Hc7Fpff+Zxbce1fv8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsdzvurtBAi5zb4Vw9O/q+tjTHGGGOMMcYYY38On/daV8AYY4wxxhhjjLH/+0BIoYQWgcgj8ooYkU/EiutEnLhe5BcFRETcIOLFjaKguEkUEoVFEVFUJIhiorgwAoUVJEJRQpQUUXGzKCVuEYmitCgjygonyonyooKoKG4VlcRtorK4XVQRd4iqopqoLmqIO0VNcZeoJe4WtcU9oo6oK+qJ+uJe0UDcJxqK+0Uj8YBoLB4UTcRDoql4WDQTj4jm4lHRQjwmWorHRSvRWrQRbUW7/6P8l0Vf8YroJ/qLZDFADBSvikFisBgihoph4jUxXLwuRog3RIoYKUaJN8Vo8ZYYI94WY8U4MV68IyaIiWKSmCymiKkiVbwrpon3xHTx/si/vaJpYraYIz4Uc8U8MV98JBaIj8VCsUgsFktEuvhEZIilIlN8KpaJz0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hcbBc7xE6xS+wWe8Re8YXYJ74U+8VX4oD4+j+Zf+4f8nuBAAESJGjQkAfyQAzEQCzEQhzEQX7IDxGIQDzEQ0EoCIWgEBSBIpAACVAcigMCAgFBCSgBUYhCKSgFiZAIZaAMOHBQHspDRbgVKkElqAyVoQpUgapQDapBDagBNaEm1IJaUBtqQx2oA/WgHtwL98J90BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCK2gFbaANtIN20B7aQwfoAJ2gE3SGztAFukASJEFX6ArdoBt0h+7QA3pAT+gJvaA39IaX4WV4BV6B/lBHDoCBMBAGwSAYAkNhKLwGw+F1eB3egBQYCaPgTXgT3oIxcBbGwjgYD+OhppwIk2AykJwKqZAK02AaTIfpMAM+gA9gFqTBbJgDc2AuzIN58BEsgI/hY1gEi2AJpEM6ZMBSyIRMWAbnIAuWwwpYCatgNayCtbAO1sIG2AgbYDNshq2wFT6Hz2EH7IBdsAv2wB74Ar6AL+FLSIEDAPq3d9whOAyHIRuy4QgcgaNwFI7BMTgOx+EEnIRTcBLOwBk4C+fgPJyHi3ARLsGLCd8131N6fYqQObTUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GyoCwoC8lCsogsIhNkgiwui0uUKEmGsoQsIaMyKkvJUjJRJsoysox00snysrysKCvKSrKSrCxvl1XkHbKqrCY7uhqyhqwpO7la8m5ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+ZBsKgfAEHhE5nSmhRwJLeUoaCVbyzayrXwLnpDt5RjoIDvKTvIpOQ7GQhfZ3iXJZ2VXOQm6yeflZHhB9pBToad8SfaSvWUf+bLsKzu4frK/nAED5EA5CwbJwXKIHCrnQl2Z07F68g2ZIkfKUfJNuQTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+QHcqacJdPkbDlHfijnynlyvvxILpAfy4VykVwsl8h0+YnMkEtlpvxULpOfySy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+bncLnfInXKX3C33yL3yC7lPfin3y6/kAfm1PCj/Ig/Jb+Rh+a3Mlt/JI/J7eVT+II/JH+Vx+ZM8IU/KU/K0PCN/lmflOXleXpAX5S/ykrwsr0gvhQIllVJaBSqPyqtiVD4Vq65Tcep6lV8VUBF1g4pXN6qC6iZVSBVWRVRRlaCKqeLKKFRWkQpVCVVSRdXNqpS6RSWq0qqMKqucKqfKqwqqorpVVVK3qcrqdlVF3aGqqmqquqqh7lQ11V2qlrpb1Vb3qDqqrqqn6qt7VQN1n2qo7leN1AOqsXpQNVEPqabqYdVMPaKaq0dVC/WYaqkeV61Ua9VGtVXt1BOqvXpSdVAdVSf1lOqsnlZd1DMqST2ruqrnVDf1vOquXlA91Iuqp3pJ9VK9VR91WV1RXvVT/VWyGqAGqlfVIDVYDVFD1TD1mhquXlcj1BsqRY1Uo9SbarR6S41Rb6uxapwar95RE9RENUlNVlPUVJWq3lXT1HtqunpfzVAfqJlqlkpTs9WQv640/38j/71/kj/i12ffqrapz9V2tUPtVLvUbrVH7VV71T61T+1X+9UBdUAdVAfVIXVIHVaHVbbKVkfUEXVUHVXH1DF1XB1XJ9RJdUGdVmfUz+qsOqfOqQvqorqoLv31NRAatNRKax3oPDqvjtH5dKy+Tsfp63V+XUBH9A06Xt+oC+qbdCFdWBfRRXWCLqaLa6NRW0061CV0SR3VN+tS+hadqEvrMrqsdrqc9rrCv5VfXlfQf1RfO91Ot9ftdQfdQXfSnXRn3Vl30V10kk7SXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52sk/VA/aoepAfrIXqoHqZf08P1cD1Cj9ApOkWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+pUPU1P09P1dD1Dz9Az9UydptP0HD1Hz9Vz9Xw9Xy/QC/RCvVAv1ot1uk7XGTpDZ+pMvUwv01l6uV6uV+qVerVerdfqtXq9Xq836o16s96ss/Q2vU1v19v1Tr1T79a79V69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WGfrbH1EH9FH9VF9TB/Tx/VxfUKf0Kf0KX1Gn9Fn9Vl9Xp/XF/VFfUlf0lf0lZzDvkAGMtCBDvIEeYKYICaIDWKDuCAuyB/kDyJBJIgP4oOCwU1BoaBwUCQoGiQExYLigQkwsAEFYVAiKBlEg5uDUsEtQWJQOigTlA1cUC4oH1QIKga3BpWC24LKwe1BleCOoGpQLage1AjuDGoGdwW1gruD2sE9QZ2gblAvqB/cGzQI7gsaBvcHjYIHgsbBg0GT4KGgafBw0Cx4JGgePBq0CB4LWgaPB62C1kGboG3Q7k9d3/uzhZ90/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpJp3zTTznplu3jczzAdmppll0sxsM8d8aOaaeWa++cgsMB+bhWaRWWyWmHTzickwS02m+dQsM5+ZLLPcrDArzSqz2qwxa806s95sMBvNJrPZbDFbzTbzudludpidZpfZbfaYveYLs898afabr8wB87U5aP5iDplvzGHzrck235kj5ntz1PxgjpkfzXHzkzlhTppT5rQ5Y342Z805c95cMBfNL+aSuWyuGJ9zcJ/z8Y4aNebBPBiDMRiLsRiHcZgf82MEIxiP8VgQC2IhLIRFsAgmYAIWx+KYg5CwBJbAKEaxFJbCREzEMlgGHTosj+WxIlbESlgJK2NlrIJVsCpWxepYHe/EO/EuvAvvxrvxHrwH62JdrI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2ErbINtsB22w/bYHjtgB+yEnbAzdsYu2AWTMAm7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/thP0zGZByIA3EQDsIhOASH4TAcjsNxBI7AFEzBUTgKR+NoHINjcCyOw/H4Dk7AiTgJJ+MUnIqpmIrTcBpOx+k4A2fgTJyJaZiGc3AOzsW5OB/n4wJcgAtxIS7GxZiO6ZiBGZiJmbgMl2EWZuEKXIGrcBWuwTW4DtfhBtyAm3ATbsEtuA234XbcjjtxJ+7G3bgX9+I+3If7cT8ewAN4EA/iITyEh/EwZmM2HsEjeBSP4jE8hsfxOJ7AE3gKT+EZPINn8Syex/N4EX/BS3gZr6DHGJvPxtrrbJy93ua3Bew/xkVsUZtgi9ni1thCtvDfxWitTbSlbRlb1jpbzpa3FX4XV7XVbHVbw95pa9q7bK3fxQ3sfbahvd82sg/Y+vbev4sb2wdtE/uYbWoft81sa9vctrUt7GO2pX3ctrKtbRvb1na2T9su9hmbZJ+1Xe1zv4sz7FK7zq63G+xGu89+ac/bC/ao/cFetL/Yfra/HWZfs8Pt63aEfcOm2JG/i8fbd+wEO9FOspPtFDv1d/FMO8um2dl2jv3QzrXzfhen20/sAptpF9pFdrFd8mucU1Om/dQus5/ZLLvcrrAr7Sq72q6xa/9nrSvtZrvFbrV77Rd2u91hd9pddrfd82ucs4/99it7wH5tj9jv7SH7jT1sj9ls+92vcc7+jtkf7XH7kz1hT9pT9rQ9Y3+2Z+25X/efs/fT9rK9Yr0VBCRJkaaA8lBeiqF8FEvXURxdT/mpAEXoBoqnG6kg3USFqDAVoaKUQMWoOBlCskQUUgkqSVG6mUrRLZRIpakMlSVH5ag8VaCKdCtVotuoMt1OVegOqkrVqDrVoDupJt1Ftehuqk33UB2qS/WoPt1LDeg+akj3UyN6gBrTg9SEHqKm9DA1o0eoOT1KLegxakmPUytqTW2oLbWjJ6g9PUkdqCN1oqeoMz1NXegZSqJnqSs9R93oeepOL1APepF60kvUi3pTH3qZ+tIr1I/6UzINoIH0Kg2iwTSEhtIweo2G0+s0gt6gFBpJo+hNGk1v0Rh6m8bSOBpP79AEmkiTaDJNoamUSu/SNHqPptP7NIM+oJk0i9JoNs2hD2kuzaP59BEtoI9pIS2ixbSE0ukTyqCllEmf0jL6jLJoOa2glbSKVtMaWkvraD1toI20iTbTFtpK2+hz2k47aCftot20h/bSF7SPvqT99BUdoK/pIP2FDtE3dJi+pWz6jo7Q93SUfqBj9CMdp5/oBJ2kU3SaztDPdJbO0Xm6QBfpF7pEl+kKeRIhhDJUoQ6DME+YN4wJ84Wx4XVhXHh9mD8sEEbCG8L48MawYHhTWCgsHBYJi4YJYbGweGhCDG1IYRiWCEuG0fDmsFR4S5gYlg7LhGVDF5YLy4cVworhrWGl8Lawcnh7WCW8I6waVgsfe6BGeGdYM7wrrBXeHdYO7wnrhHXDemH98N6wQXhf2DC8P2wUPhBWCh8Mm4QPhU3Dh8Nm4SNh8/DRsEX4WNgyfDxsFbYO24Rtw3bhE2H78MmwQ9gx7BQ+FXYOnw67hM+ESeGzYdfwuT+8PzkcEA4MXw1fDb2/Xy2OLommRz+JZkSXRjOjn0aXRT+LZkWXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R7dEt0a9r59XOHDSKadd4PK4vC7G5XOx7joX5653+V0BF3E3uHh3oyvobnKFXGFXxBV1Ca6YK+6MQ2cdudCVcCVd1N3sSrlbXKIr7cq4ss65cq68a+vauXauvXvSdXAdXSf3lHvKPe2eds+4Z9yzrqt7znVzz7vu7gXXw73oXnQvuV6ut+vjXnZ93Suun+vvkl2yG+gGukFukBvihrhhbpgb7oa7EW6ES3EpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Vpbppbpqb7qa7GW6GnulmujSX5ua4OW6um+vmu/luQeICt9AtdIvdYpfu0l2Gy3CZLtMtc8tclstyK9wKt8qtcmvcGrfOrXMb3Aa3yW1yW9wWt81tc9vddrfT7XS73W631+11+9w+Ldx+d8AdcAfdQXfIHXKH3bcu233njrjv3VH3gzvmfnTH3U/uhDvpTrnT7oz72Z1159x5d8FddL+4S+6yu+K8S428G5kWeS8yPfJ+ZEbkg8jMyKxIWmR2ZE7kw8jcyLzI/MhHkQWRjyMLI4siiyNLIumRTyIZkaWRzMinkWWRzyJZkeWRFZGVkVWR1RHvi20PfQlf0kf9zb6Uv8Un+tK+jC/rnS/ny/sKvqK/1Vfyt/nK/nZfxd/hq/pqvrp/3LfyrX0b39a380/49v5J38F39J38U76zf9p38c/4JP+s7+qf89388767f8H38C/6nv4l38v39n38y76vf8X38/19sh/gB/pX/SA/2A/xQ/0w/5of7l/3I/wbPsWP9KP8m360f8uP8W/7sX6cH+/f8RP8RD/JT/ZT/FSf6t/10/x7frp/38/wH/iZfpZP87P9HP+hn+vn+fn+I7/Af+wX+kV+sV/i0/0nPsMv9Zn+U7/Mf+az/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/znfrvf4Xf6XX633+P3+i/8Pv+l3++/8gf81/6g/4s/5L/xh/23Ptt/54/47/1R/4M/5n/0x/1P/oQ/6U/50/6M/9mf9ef8eX/BX/S/+Ev+sr/ivb+GF9EZY4wxxv6/of7g/gH/5GfyryPHQCHE9TuKZv/jmpsK/TYfLBM6R4QQz/bv+cjfRp06ycl/+yqBLCWCkouEEJGr+XnE1Xi56CSeFkmio6j4T+sbLHtfpD9YP3q7ELH/ISdGXI2vrn/rv1j/iafGZ1QJz8f/L9ZfJERiyas5+cTVeLno9Ov/aDuKSv9i/cLt/6D+fN+kCtHhP+TEiatxTv2+wG/zJ8VzIunvHskYY4wxxhhjjP1msKze/Y/On3POzxP01Zy84mr8R+fnjDHGGGOMMcYYu/Ze6N3nmSeSkjp25wlPePL/1kRdy1/Pa/2XiTHGGGOMMfZnu3rQf60rYYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGcq//iq8Tu9Z7ZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq61/xEAAP//aIcwug==") open(&(0x7f00000000c0)='.\x00', 0x591002, 0x0) 52.357191ms ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x1, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}]}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth0_to_bond\x00', 0x3}, 0x18) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="2e4b81e30f80cf0beaabc60faa5a4ec1e606768764ed0d58413732c12cccb74507d4baa6b2bb88e6abaed78384084d42315d641fbc963024f7d9483dbf0e41e3ce733d14bce3ad7ebd3cb888d7fc55fbb8ab454163ba130ae01df667a0322358d336e5e25f02612b40b5a573b1a82dfbcb6af934a11fc184fe8e36930e5156cd", 0x80, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1401, 0x10, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r3) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r7, 0xe0d, 0x0, 0x0, {0x4, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004004}, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r5, 0x101, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x1, 0xc5, 0x2000, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffb, 0x7, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffffff81]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4040080) 24.364636ms ago: executing program 3: unshare(0x20400) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) 0s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000a207dcba714e76b1"], 0x14}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x10, 0xffffffffffffffff, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x1c, r5, 0x926fdb2c68a18847, 0x0, 0x0, {0x11}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.003095][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.013039][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.023175][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.033421][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.043384][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.062891][ T3763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.097329][ T9770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.108121][ T9770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.135212][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.144409][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.157182][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.166232][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.175263][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.187901][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.227759][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.257449][ T8925] Bluetooth: hci0: command 0x041b tx timeout [ 379.356919][ T9862] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.487578][ T9869] loop3: detected capacity change from 0 to 64 [ 379.563211][ T3763] bond1: (slave ip6gretap1): Releasing active interface [ 379.585452][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.593750][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.606471][ T9770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.655115][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 379.707248][ T9853] chnl_net:caif_netlink_parms(): no params data found [ 379.737490][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.749531][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.801968][ T9878] loop3: detected capacity change from 0 to 512 [ 379.843849][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.852841][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.862280][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.870952][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.910134][ T9770] device veth0_vlan entered promiscuous mode [ 379.919764][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.927232][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.936012][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 379.936153][ T9853] device bridge_slave_0 entered promiscuous mode [ 379.983953][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.001136][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.014053][ T9853] device bridge_slave_1 entered promiscuous mode [ 380.105664][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 380.124136][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 380.155129][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.170451][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.181036][ T9770] device veth1_vlan entered promiscuous mode [ 380.230518][ T9853] team0: Port device team_slave_0 added [ 380.243681][ T9853] team0: Port device team_slave_1 added [ 380.274113][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 380.319895][ T4229] usb 3-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=95.2e [ 380.327072][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.337733][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.354646][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.373446][ T4229] usb 3-1: Product: syz [ 380.377999][ T4229] usb 3-1: Manufacturer: syz [ 380.382644][ T4229] usb 3-1: SerialNumber: syz [ 380.391508][ T4229] usb 3-1: config 0 descriptor?? [ 380.398863][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.447463][ T4229] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 380.468433][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.482343][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.496859][ T4229] usb 3-1: Direct firmware load for keyspan/usa28.fw failed with error -2 [ 380.509319][ T4229] usb 3-1: Falling back to sysfs fallback for: keyspan/usa28.fw [ 380.529914][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.538837][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.554429][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.570275][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.596796][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.678441][ T9770] device veth0_macvtap entered promiscuous mode [ 380.728821][ T9853] device hsr_slave_0 entered promiscuous mode [ 380.738674][ T9853] device hsr_slave_1 entered promiscuous mode [ 380.745946][ T9853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.753586][ T9853] Cannot create hsr debugfs directory [ 380.773423][ T9770] device veth1_macvtap entered promiscuous mode [ 380.799353][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.807058][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.815568][ T9870] device bridge_slave_0 entered promiscuous mode [ 380.827311][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.834682][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.835056][ T8925] Bluetooth: hci2: command 0x0409 tx timeout [ 380.843947][ T9870] device bridge_slave_1 entered promiscuous mode [ 380.907760][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.960225][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.026171][ T9870] team0: Port device team_slave_0 added [ 381.050420][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.071290][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.081625][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.093995][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.103885][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.114691][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.124960][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.135698][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.145599][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.156106][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.167818][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.185356][ T9870] team0: Port device team_slave_1 added [ 381.201978][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 381.223730][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.233362][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.244611][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.256955][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.267436][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.278030][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.287982][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.298708][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.310276][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.321514][ T8927] Bluetooth: hci0: command 0x040f tx timeout [ 381.328450][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.338882][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.350150][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.361382][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.391554][ T3763] device hsr_slave_0 left promiscuous mode [ 381.399004][ T3763] device hsr_slave_1 left promiscuous mode [ 381.405997][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.413516][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.422800][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.431092][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.440986][ T3763] device bridge_slave_1 left promiscuous mode [ 381.447351][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.456929][ T3763] device bridge_slave_0 left promiscuous mode [ 381.463206][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.477657][ T3763] device veth1_macvtap left promiscuous mode [ 381.483742][ T3763] device veth0_macvtap left promiscuous mode [ 381.490092][ T3763] device veth1_vlan left promiscuous mode [ 381.496018][ T3763] device veth0_vlan left promiscuous mode [ 381.602309][ T3763] bond1 (unregistering): Released all slaves [ 381.635871][ T8927] Bluetooth: hci1: command 0x0409 tx timeout [ 381.741738][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 381.761251][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 381.774489][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.790825][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.870793][ T3763] bond0 (unregistering): Released all slaves [ 381.942975][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.952043][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.982453][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.992230][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.019164][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.031892][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.039234][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.065922][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.086975][ T9770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.096240][ T9770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.105040][ T9770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.113816][ T9770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.172364][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.180066][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.188456][ T9885] device bridge_slave_0 entered promiscuous mode [ 382.205612][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.212701][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.223007][ T9885] device bridge_slave_1 entered promiscuous mode [ 382.258719][ T9870] device hsr_slave_0 entered promiscuous mode [ 382.265964][ T9870] device hsr_slave_1 entered promiscuous mode [ 382.272653][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.280471][ T9870] Cannot create hsr debugfs directory [ 382.370592][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.403226][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.476561][ T9885] team0: Port device team_slave_0 added [ 382.539157][ T9885] team0: Port device team_slave_1 added [ 382.641958][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.649312][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.676122][ T8918] Bluetooth: hci3: command 0x0409 tx timeout [ 382.676408][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.700592][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.707823][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.736376][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.771422][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.780031][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.820182][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.838465][ T9885] device hsr_slave_0 entered promiscuous mode [ 382.846752][ T9885] device hsr_slave_1 entered promiscuous mode [ 382.853585][ T9885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.861535][ T9885] Cannot create hsr debugfs directory [ 382.916393][ T8927] Bluetooth: hci2: command 0x041b tx timeout [ 382.931982][ T9870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.958045][ T5569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.975148][ T5569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.021442][ T9870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.053062][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.110554][ T9870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.219555][ T9870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.399445][ T3743] Bluetooth: hci0: command 0x0419 tx timeout [ 383.423374][ T9885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.437102][ T9853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.447788][ T9853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.458202][ T9853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.471512][ T9853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.494365][ T9885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.559215][ T9854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 383.591172][ T9885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.657222][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.717166][ T9885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.729074][ T3734] Bluetooth: hci1: command 0x041b tx timeout [ 383.766925][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.795703][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.806277][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.844991][ T9854] usb 2-1: Using ep0 maxpacket: 32 [ 383.872427][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.884055][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.894799][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.902171][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.910893][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.920843][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.929810][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.937047][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.945177][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.954175][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.964610][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.975216][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.994073][ T9854] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 384.010637][ T9854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.025697][ T9853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.056086][ T9854] usb 2-1: config 0 descriptor?? [ 384.065059][ T9853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.107160][ T9854] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 384.135096][ T9854] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 384.164551][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.183260][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.201945][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.217753][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.235516][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.244283][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.262547][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.273898][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.328074][ T9870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.355341][ T3734] usb 2-1: USB disconnect, device number 5 [ 384.395684][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.416238][ T9870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.457658][ T9870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.521971][ T9870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.577229][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.577401][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.586208][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.635981][ T9885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.698735][ T9885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.725499][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.726952][ T9918] loop2: detected capacity change from 0 to 512 [ 384.744776][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.754245][ T9885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.775501][ T9031] Bluetooth: hci3: command 0x041b tx timeout [ 384.824356][ T9885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.842219][ T9918] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 384.871133][ T9853] device veth0_vlan entered promiscuous mode [ 384.922730][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.946393][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.956760][ T9918] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz-executor.2: iget: bad i_size value: -67835469387268086 [ 385.024511][ T9853] device veth1_vlan entered promiscuous mode [ 385.030997][ T8918] Bluetooth: hci2: command 0x040f tx timeout [ 385.041246][ T9918] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 385.054444][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.075542][ T9918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.086911][ T9918] ext2 filesystem being mounted at /root/syzkaller-testdir3851582913/syzkaller.AwAob5/43/file0 supports timestamps until 2038 (0x7fffffff) [ 385.095956][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.145759][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.154080][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.245549][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.324598][ T9853] device veth0_macvtap entered promiscuous mode [ 385.333255][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.342725][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.398497][ T9853] device veth1_macvtap entered promiscuous mode [ 385.418417][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.428275][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 385.445867][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.464272][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.467287][ T9921] loop1: detected capacity change from 0 to 32768 [ 385.490212][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.530967][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.540759][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.564841][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.572058][ T8983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.603216][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.627008][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.645025][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.655698][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.665832][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.676695][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.686790][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.697383][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.707278][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.718909][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.733497][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.795133][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.795788][ T8983] Bluetooth: hci1: command 0x040f tx timeout [ 385.822155][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.837388][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.864971][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.884926][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.904753][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.920369][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.934664][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.954818][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.979535][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.000784][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.020903][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.029702][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.039772][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.048912][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 386.058074][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.066813][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.073903][ T9031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.081959][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.090913][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.119777][ T9853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.141643][ T9853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.151786][ T9853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.160686][ T9853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.180113][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 386.242427][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.253383][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.262430][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.271555][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.287485][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.303151][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.341511][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.384441][ T3763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.411223][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.420511][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.437897][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.456603][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.476229][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.485746][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.494202][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.502466][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.521589][ T3763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.560430][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.637274][ T3763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.684493][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.684826][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.706151][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.715911][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.737560][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.744660][ T9031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.897623][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 386.906585][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.915964][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.923066][ T9031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.934208][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.942437][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.951142][ T8918] Bluetooth: hci3: command 0x040f tx timeout [ 387.063038][ T9934] autofs4:pid:9934:autofs_fill_super: called with bogus options [ 387.140257][ T9934] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 387.166556][ T3249] Bluetooth: hci2: command 0x0419 tx timeout [ 387.300891][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.332676][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.738376][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.753233][ T3763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.774627][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.817918][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.825041][ T8927] kernel write not supported for file /input/mouse0 (pid: 8927 comm: kworker/1:18) [ 387.837109][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.854685][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.885544][ T8924] Bluetooth: hci1: command 0x0419 tx timeout [ 387.927223][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.936476][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.946534][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.955651][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.968698][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.982476][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.996154][ T9031] Bluetooth: hci4: command 0x0409 tx timeout [ 388.003906][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.019872][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.066473][ T9885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.094158][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.107482][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.119546][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.218677][ T9924] chnl_net:caif_netlink_parms(): no params data found [ 388.479901][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.585500][ T9958] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.595636][ T9958] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.605366][ T9958] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.614090][ T9958] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.624364][ T9958] device vxlan0 entered promiscuous mode [ 388.665438][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.673029][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.685143][ T8927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 388.708858][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.779239][ T3763] bond1: (slave ip6gretap1): Releasing active interface [ 388.800200][ T3763] bond1: (slave ip6gretap1): Releasing active interface [ 388.824352][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.845847][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.865552][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.872866][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.881183][ T9924] device bridge_slave_0 entered promiscuous mode [ 388.906892][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.914718][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.924295][ T9924] device bridge_slave_1 entered promiscuous mode [ 388.930894][ T8927] usb 1-1: Using ep0 maxpacket: 32 [ 388.942003][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.955159][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.995735][ T8918] Bluetooth: hci3: command 0x0419 tx timeout [ 389.003787][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.013252][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.023556][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.031777][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.043628][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.059246][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.063223][ T8927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 389.081517][ T9870] device veth0_vlan entered promiscuous mode [ 389.089135][ T8927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 389.108054][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.114342][ T8927] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 389.120982][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.134386][ T9885] device veth0_vlan entered promiscuous mode [ 389.134603][ T8927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.162666][ T9924] team0: Port device team_slave_0 added [ 389.162923][ T8927] usb 1-1: config 0 descriptor?? [ 389.177548][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.185994][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.205256][ T9957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 389.237788][ T9870] device veth1_vlan entered promiscuous mode [ 389.245861][ T8927] hub 1-1:0.0: USB hub found [ 389.247086][ T9924] team0: Port device team_slave_1 added [ 389.318204][ T9885] device veth1_vlan entered promiscuous mode [ 389.336196][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.343320][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.371065][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.446073][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.454262][ T9969] loop1: detected capacity change from 0 to 512 [ 389.460799][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.465362][ T8927] hub 1-1:0.0: 2 ports detected [ 389.488391][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.530220][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.540163][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.548954][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.557546][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.605108][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.613919][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.660725][ T9924] device hsr_slave_0 entered promiscuous mode [ 389.669354][ T9924] device hsr_slave_1 entered promiscuous mode [ 389.676591][ T9924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.684287][ T9924] Cannot create hsr debugfs directory [ 389.692923][ T9885] device veth0_macvtap entered promiscuous mode [ 389.704681][ T9971] loop1: detected capacity change from 0 to 512 [ 389.727061][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.735533][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.744221][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.754008][ T9870] device veth0_macvtap entered promiscuous mode [ 389.793323][ T9870] device veth1_macvtap entered promiscuous mode [ 389.802868][ T9885] device veth1_macvtap entered promiscuous mode [ 389.879094][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.894240][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.904304][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.915863][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.926449][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.938068][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.948160][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.959757][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.969723][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.980419][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.990293][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.002081][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.013869][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.035706][ T8924] Bluetooth: hci4: command 0x041b tx timeout [ 390.046333][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.054588][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.063200][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.071951][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.081284][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.102529][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.129501][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.140924][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.151974][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.161899][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.172731][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.176447][ T9971] overlayfs: failed to resolve './file0': -2 [ 390.182897][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.200208][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.210235][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.220701][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.232192][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.246759][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.256699][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.267160][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.280302][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.295778][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.308713][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.318853][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.329678][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.342335][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.352961][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.363467][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.374123][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.384047][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.394732][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.404768][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.419690][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.431454][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.509751][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.536076][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.546580][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.558690][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.570076][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.583655][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.604264][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.625565][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.644940][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.657049][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.667029][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.679036][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.692460][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.703128][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.713715][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.725224][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.735358][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.746000][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.759528][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.770189][ T9870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.780007][ T9870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.791085][ T9870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.802101][ T9870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.818240][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.827901][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.842813][ T9885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.855282][ T9885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.864131][ T9885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.873316][ T9885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.932569][ T9975] loop1: detected capacity change from 0 to 40427 [ 391.186689][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.203926][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.252707][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.271541][ T5569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.280637][ T5569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.320366][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.339259][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.382275][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.395999][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.466603][ T3845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.473231][ T9924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.498770][ T3845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.533594][ T9981] loop1: detected capacity change from 0 to 512 [ 391.560226][ T9924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.587507][ T9924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.607645][ T9924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.627009][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.704085][ T3743] usb 1-1: USB disconnect, device number 5 [ 391.710111][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 391.710128][ T26] audit: type=1804 audit(1718287637.023:117): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/16/bus" dev="sda1" ino=1956 res=1 errno=0 [ 391.839344][ T26] audit: type=1804 audit(1718287637.093:118): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/16/bus" dev="sda1" ino=1956 res=1 errno=0 [ 391.941542][ T26] audit: type=1804 audit(1718287637.093:119): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/16/bus" dev="sda1" ino=1956 res=1 errno=0 [ 392.012876][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.045454][ T26] audit: type=1800 audit(1718287637.203:120): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 392.091456][ T26] audit: type=1800 audit(1718287637.213:121): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 392.104171][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.125062][ T3249] Bluetooth: hci4: command 0x040f tx timeout [ 392.155331][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.163699][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.228962][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.245734][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.276172][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.283287][ T8927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.318781][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.351151][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.390125][T10001] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.399494][T10001] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.408318][T10001] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.417104][T10001] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.439628][T10001] device vxlan0 entered promiscuous mode [ 392.499488][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.510187][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.535849][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.554158][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.561288][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.569788][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.587983][ T8924] kernel write not supported for file /input/mouse0 (pid: 8924 comm: kworker/1:16) [ 392.609877][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.701276][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.722177][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.731295][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.733449][T10009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 392.751546][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.779055][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.794627][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.822532][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 392.831066][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.840016][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.858121][ T9924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 392.884463][ T3763] device hsr_slave_0 left promiscuous mode [ 392.895892][ T3763] device hsr_slave_1 left promiscuous mode [ 392.929932][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.955625][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.969386][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.977102][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.987252][ T3763] device bridge_slave_1 left promiscuous mode [ 392.993526][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.012530][ T3763] device bridge_slave_0 left promiscuous mode [ 393.022240][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.046264][ T3763] device hsr_slave_0 left promiscuous mode [ 393.052907][ T3763] device hsr_slave_1 left promiscuous mode [ 393.059959][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.067787][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.079152][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.086940][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.097524][ T3763] device bridge_slave_1 left promiscuous mode [ 393.106564][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.122871][ T3763] device bridge_slave_0 left promiscuous mode [ 393.150346][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.187238][ T3763] device hsr_slave_0 left promiscuous mode [ 393.204614][ T3763] device hsr_slave_1 left promiscuous mode [ 393.217300][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.236537][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.253061][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.271005][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.290803][ T3763] device bridge_slave_1 left promiscuous mode [ 393.297256][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.317494][ T3763] device bridge_slave_0 left promiscuous mode [ 393.334021][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.382345][ T3763] device veth1_macvtap left promiscuous mode [ 393.388578][ T3763] device veth0_macvtap left promiscuous mode [ 393.394748][ T3763] device veth1_vlan left promiscuous mode [ 393.402900][ T3763] device veth0_vlan left promiscuous mode [ 393.412709][ T3763] device veth1_macvtap left promiscuous mode [ 393.418907][ T3763] device veth0_macvtap left promiscuous mode [ 393.425040][ T3763] device veth1_vlan left promiscuous mode [ 393.430837][ T3763] device veth0_vlan left promiscuous mode [ 393.440095][ T3763] device veth1_macvtap left promiscuous mode [ 393.446251][ T3763] device veth0_macvtap left promiscuous mode [ 393.452320][ T3763] device veth1_vlan left promiscuous mode [ 393.458549][ T3763] device veth0_vlan left promiscuous mode [ 393.916614][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 393.933117][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 393.947805][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.965994][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.048549][ T3763] bond0 (unregistering): Released all slaves [ 394.116332][ T3763] bond1 (unregistering): Released all slaves [ 394.195521][ T8925] Bluetooth: hci4: command 0x0419 tx timeout [ 394.220770][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 394.237845][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 394.254337][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.270706][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.358523][ T3763] bond0 (unregistering): Released all slaves [ 394.412206][ T3763] bond1 (unregistering): Released all slaves [ 394.509915][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 394.528221][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 394.541503][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.557264][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.638627][ T3763] bond0 (unregistering): Released all slaves [ 394.818820][ T26] audit: type=1800 audit(1718287640.133:122): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 394.928858][ T26] audit: type=1800 audit(1718287640.133:123): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 395.028021][T10043] loop1: detected capacity change from 0 to 512 [ 395.044457][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.063359][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.087117][ T9924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.160342][T10049] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 395.190269][ T26] audit: type=1804 audit(1718287640.503:124): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/19/bus" dev="sda1" ino=1954 res=1 errno=0 [ 395.260024][ T26] audit: type=1804 audit(1718287640.573:125): pid=10051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/19/bus" dev="sda1" ino=1954 res=1 errno=0 [ 395.357403][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.367863][ T26] audit: type=1804 audit(1718287640.573:126): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1075790679/syzkaller.w8zIAK/19/bus" dev="sda1" ino=1954 res=1 errno=0 [ 395.376301][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.410903][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.419723][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.443681][T10026] chnl_net:caif_netlink_parms(): no params data found [ 395.461765][ T3573] Bluetooth: hci2: command 0x0409 tx timeout [ 395.489119][ T9924] device veth0_vlan entered promiscuous mode [ 395.500466][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.515569][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.557553][ T9924] device veth1_vlan entered promiscuous mode [ 395.682389][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.733783][ T9924] device veth0_macvtap entered promiscuous mode [ 395.803228][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 395.811851][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 395.836543][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.865878][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.887163][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.920314][ T9924] device veth1_macvtap entered promiscuous mode [ 395.959196][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.967778][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.984976][T10026] device bridge_slave_0 entered promiscuous mode [ 396.023688][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.039108][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.052452][T10026] device bridge_slave_1 entered promiscuous mode [ 396.097506][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.121964][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.134662][T10076] loop4: detected capacity change from 0 to 1024 [ 396.147112][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.159991][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.180280][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.211339][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.237876][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.258047][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.273615][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.294602][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.317703][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.348285][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.375191][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.413782][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.447616][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.466125][T10076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.474920][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.501131][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525895][T10076] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 396.529378][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.552435][T10076] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 396.568124][T10076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 396.568124][T10076] [ 396.568602][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.578120][T10076] EXT4-fs (loop4): Total free blocks count 0 [ 396.595455][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.605556][T10076] EXT4-fs (loop4): Free/Dirty block details [ 396.606308][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.615080][T10076] EXT4-fs (loop4): free_blocks=68451041280 [ 396.622428][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.638758][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.642182][T10076] EXT4-fs (loop4): dirty_blocks=96 [ 396.650559][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.675273][T10076] EXT4-fs (loop4): Block reservation details [ 396.693015][T10076] EXT4-fs (loop4): i_reserved_data_blocks=6 [ 396.696745][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.716000][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.735278][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.749805][ T9924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.759559][ T9924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.768910][ T9924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.777866][ T9924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.787923][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 396.809295][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.818989][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 396.818989][ T144] [ 396.864484][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.895409][T10089] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.904177][T10089] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.913220][T10089] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.921977][T10089] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.944210][T10089] device vxlan0 entered promiscuous mode [ 397.074013][T10026] team0: Port device team_slave_0 added [ 397.137199][T10026] team0: Port device team_slave_1 added [ 397.178609][ T5569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.215067][ T5569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.220835][T10097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 397.241792][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.249929][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.276008][T10097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 397.291581][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.307147][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.328952][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.338539][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.353474][ T3845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.365161][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.405192][ T3845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.440569][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.476553][ T3249] Bluetooth: hci2: command 0x041b tx timeout [ 397.484983][ T8925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 397.503499][T10026] device hsr_slave_0 entered promiscuous mode [ 397.534369][T10026] device hsr_slave_1 entered promiscuous mode [ 397.742825][T10026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.765203][T10026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.765234][ T8925] usb 2-1: Using ep0 maxpacket: 32 [ 397.791314][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.840796][T10026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.862046][T10026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.885143][ T8925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 397.915103][ T8925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 397.955625][ T8925] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 397.983038][ T8925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.013331][ T8925] usb 2-1: config 0 descriptor?? [ 398.045347][T10103] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 398.063041][T10026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.066082][ T8925] hub 2-1:0.0: USB hub found [ 398.103588][T10026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.191223][T10026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.202526][T10026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.282674][ T8925] hub 2-1:0.0: 2 ports detected [ 398.390138][T10026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.407474][T10026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.430133][T10026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.449822][T10026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.608753][T10127] loop3: detected capacity change from 0 to 512 [ 398.654301][T10129] loop2: detected capacity change from 0 to 512 [ 398.685106][T10026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.716657][T10129] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 398.717807][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.724329][T10129] UDF-fs: Scanning with blocksize 512 failed [ 398.734091][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.750537][T10026] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.786423][ T26] audit: type=1804 audit(1718287644.103:127): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3481555260/syzkaller.YztT40/18/bus" dev="sda1" ino=1961 res=1 errno=0 [ 398.815022][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.824397][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.834450][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.841600][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.852795][T10129] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 398.857416][ T26] audit: type=1804 audit(1718287644.173:128): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3481555260/syzkaller.YztT40/18/bus" dev="sda1" ino=1961 res=1 errno=0 [ 398.861564][T10129] UDF-fs: Scanning with blocksize 1024 failed [ 398.901826][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.922498][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.942387][ T26] audit: type=1804 audit(1718287644.173:129): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3481555260/syzkaller.YztT40/18/bus" dev="sda1" ino=1961 res=1 errno=0 [ 398.942630][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.974671][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.982613][T10129] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 398.991931][T10129] UDF-fs: Scanning with blocksize 2048 failed [ 399.005701][T10129] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 399.018041][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.030303][T10129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.050561][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.066047][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.086824][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.100011][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.117172][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.144159][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.171858][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.187679][T10026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.244020][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.277170][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.287750][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.324389][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.347005][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.517717][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 399.556307][ T9031] Bluetooth: hci2: command 0x040f tx timeout [ 399.571041][T10138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.579974][T10138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.588883][T10138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.597825][T10138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.626930][T10138] device vxlan0 entered promiscuous mode [ 399.666335][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.677122][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.697557][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.738430][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.755722][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.791237][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.800731][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.812808][T10026] device veth0_vlan entered promiscuous mode [ 399.821716][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.831168][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.851888][T10026] device veth1_vlan entered promiscuous mode [ 399.884088][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 399.894303][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 399.928275][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.947472][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.963351][T10026] device veth0_macvtap entered promiscuous mode [ 400.010619][T10026] device veth1_macvtap entered promiscuous mode [ 400.017116][ T26] audit: type=1326 audit(1718287645.313:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99b1500ea9 code=0x0 [ 400.088813][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.109462][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.122187][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.133398][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.143936][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.154690][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.164889][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.177419][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.187646][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.198490][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.211338][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.222171][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.234399][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.246038][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.254219][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.262896][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.304097][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.317842][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.355693][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.366112][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.377685][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.388054][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.399125][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.409412][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.420463][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.432170][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.443859][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.454269][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.465304][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.490228][ T9031] usb 2-1: USB disconnect, device number 6 [ 400.503340][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.528191][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.556025][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.579282][T10026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.595104][T10026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.616355][T10026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.632997][T10026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.816712][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.830947][T10145] loop2: detected capacity change from 0 to 32768 [ 400.837925][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.876698][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.908074][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.923088][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.940568][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.359885][T10159] autofs4:pid:10159:autofs_fill_super: called with bogus options [ 401.405476][T10159] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 401.922407][ T8925] Bluetooth: hci2: command 0x0419 tx timeout [ 402.162227][T10167] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.213223][T10169] loop1: detected capacity change from 0 to 1024 [ 402.349033][T10177] loop0: detected capacity change from 0 to 1764 [ 402.419814][T10177] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 402.605122][ T9031] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 402.875048][ T9031] usb 4-1: Using ep0 maxpacket: 32 [ 402.960905][ T3763] device hsr_slave_0 left promiscuous mode [ 402.992759][ T3763] device hsr_slave_1 left promiscuous mode [ 402.997252][ T9031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 403.007721][T10207] loop1: detected capacity change from 0 to 1764 [ 403.024953][ T9031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 403.047533][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.055028][ T9031] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 403.055099][ T9031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.070759][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.097373][T10207] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 403.114000][ T9031] usb 4-1: config 0 descriptor?? [ 403.121053][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.142930][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.145268][T10179] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 403.173065][ T3763] device bridge_slave_1 left promiscuous mode [ 403.186081][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.194709][ T9031] hub 4-1:0.0: USB hub found [ 403.203220][ T3763] device bridge_slave_0 left promiscuous mode [ 403.224045][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.278652][ T3763] device veth1_macvtap left promiscuous mode [ 403.285617][ T3763] device veth0_macvtap left promiscuous mode [ 403.291723][ T3763] device veth1_vlan left promiscuous mode [ 403.297924][ T3763] device veth0_vlan left promiscuous mode [ 403.415105][ T9031] hub 4-1:0.0: 2 ports detected [ 403.756173][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 403.779934][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 403.804069][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.822347][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.960073][ T3763] bond0 (unregistering): Released all slaves [ 404.111132][T10214] device netdevsim0 entered promiscuous mode [ 404.136565][T10214] device macvtap1 entered promiscuous mode [ 404.264877][T10236] FAT-fs (nbd0): Unrecognized mount option "" or missing value [ 404.480646][T10214] device netdevsim0 left promiscuous mode [ 404.978943][T10243] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 404.996676][T10243] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 405.025504][T10243] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.091889][T10241] device bridge_slave_1 left promiscuous mode [ 405.110834][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.129496][ T26] audit: type=1800 audit(1718287650.443:131): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 405.174154][T10241] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 405.333044][T10255] loop0: detected capacity change from 0 to 512 [ 405.430232][T10260] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.445086][T10255] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 405.452657][T10255] UDF-fs: Scanning with blocksize 512 failed [ 405.479355][T10255] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 405.535275][T10255] UDF-fs: Scanning with blocksize 1024 failed [ 405.550708][T10255] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 405.579522][T10255] UDF-fs: Scanning with blocksize 2048 failed [ 405.620448][T10255] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 405.683948][T10255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.850313][T10270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 406.234350][T10277] FAT-fs (nbd0): Unrecognized mount option "" or missing value [ 406.583607][ T3743] usb 4-1: USB disconnect, device number 10 [ 407.321126][T10286] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 407.339220][T10292] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.346843][T10286] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 407.373465][T10291] loop2: detected capacity change from 0 to 1764 [ 407.385284][T10286] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.480658][T10286] device bridge_slave_1 left promiscuous mode [ 407.481010][T10301] loop1: detected capacity change from 0 to 64 [ 407.486971][T10291] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 407.511345][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.536425][T10286] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 407.675553][T10301] overlayfs: overlapping lowerdir path [ 409.181220][T10325] FAT-fs (nbd4): Unrecognized mount option "" or missing value [ 409.989600][T10331] loop2: detected capacity change from 0 to 8 [ 409.997893][T10336] loop0: detected capacity change from 0 to 64 [ 410.230299][T10348] mmap: syz-executor.1 (10348) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 410.810697][T10367] FAT-fs (nbd3): Unrecognized mount option "" or missing value [ 412.012460][T10344] loop4: detected capacity change from 0 to 32768 [ 412.062323][T10393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.186114][T10400] loop2: detected capacity change from 0 to 8 [ 412.347671][T10344] XFS (loop4): Mounting V5 Filesystem [ 412.556343][T10410] FAT-fs (nbd0): Unrecognized mount option "" or missing value [ 412.730036][T10344] XFS (loop4): Ending clean mount [ 412.749007][T10344] XFS (loop4): Quotacheck needed: Please wait. [ 412.909797][T10344] XFS (loop4): Quotacheck: Done. [ 413.989286][T10435] loop3: detected capacity change from 0 to 736 [ 414.109869][T10437] loop0: detected capacity change from 0 to 64 [ 414.127232][T10435] rock: directory entry would overflow storage [ 414.137151][T10435] rock: sig=0x3b10, size=4, remaining=3 [ 414.164063][ T9870] XFS (loop4): Unmounting Filesystem [ 414.196027][ T9031] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 414.464968][ T9031] usb 2-1: Using ep0 maxpacket: 32 [ 414.466591][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.596144][T10451] loop0: detected capacity change from 0 to 8 [ 414.602191][T10449] loop3: detected capacity change from 0 to 512 [ 414.640111][ T9031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 414.674369][ T9031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 414.679531][T10455] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #-1 [ 414.709948][ T9031] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 414.729787][ T9031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.742108][ T9031] usb 2-1: config 0 descriptor?? [ 414.766071][T10433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 414.777083][T10449] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 524288 (only 8 groups) [ 415.565165][ T3573] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 415.597828][ T9031] hub 2-1:0.0: USB hub found [ 415.635710][ T9031] hub 2-1:0.0: 2 ports detected [ 415.885088][ T3573] usb 4-1: Using ep0 maxpacket: 8 [ 415.893415][T10467] loop0: detected capacity change from 0 to 736 [ 416.011397][T10467] rock: directory entry would overflow storage [ 416.018065][ T3573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 416.029490][T10467] rock: sig=0x3b10, size=4, remaining=3 [ 416.035508][ T3573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.047283][ T3573] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.057175][ T3573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 416.078195][ T3573] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 416.098565][ T3573] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 416.114902][ T3573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.135389][ T3573] usb 4-1: config 0 descriptor?? [ 416.165436][T10460] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 416.358474][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.452468][ T3573] usb 4-1: USB disconnect, device number 11 [ 416.530828][T10466] loop2: detected capacity change from 0 to 32768 [ 416.632232][T10466] XFS (loop2): Mounting V5 Filesystem [ 416.668105][ T26] audit: type=1326 audit(1718287661.983:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3389ecaea9 code=0x0 [ 416.754021][T10466] XFS (loop2): Ending clean mount [ 416.774528][T10466] XFS (loop2): Quotacheck needed: Please wait. [ 416.852411][T10466] XFS (loop2): Quotacheck: Done. [ 417.288509][ T9924] XFS (loop2): Unmounting Filesystem [ 418.025829][ T3734] usb 2-1: USB disconnect, device number 7 [ 418.147517][T10546] loop3: detected capacity change from 0 to 2048 [ 418.268317][ T26] audit: type=1326 audit(1718287663.583:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1500ea9 code=0x7ffc0000 [ 418.529161][ T26] audit: type=1326 audit(1718287663.583:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1500ea9 code=0x7ffc0000 [ 419.245466][ T26] audit: type=1326 audit(1718287663.583:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f99b1500ea9 code=0x7ffc0000 [ 419.380147][T10581] loop0: detected capacity change from 0 to 256 [ 419.387343][ T26] audit: type=1326 audit(1718287663.583:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1500ea9 code=0x7ffc0000 [ 419.462854][ T26] audit: type=1326 audit(1718287663.583:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1500ea9 code=0x7ffc0000 [ 419.540831][T10581] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 419.860996][T10605] loop1: detected capacity change from 0 to 64 [ 419.950350][T10606] attempt to access beyond end of device [ 419.950350][T10606] loop0: rw=0, want=292, limit=256 [ 421.025946][T10624] loop3: detected capacity change from 0 to 16 [ 421.104093][T10624] erofs: (device loop3): mounted with root inode @ nid 36. [ 421.970334][T10634] loop2: detected capacity change from 0 to 256 [ 422.029685][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.064489][T10642] loop0: detected capacity change from 0 to 256 [ 422.145330][T10642] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 422.170928][T10648] loop3: detected capacity change from 0 to 512 [ 422.221706][T10648] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 422.370027][T10648] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,max_batch_time=0x0000000000000004,lazytime,noinit_itable,jqfmt=vfsv0,noinit_itable,grpid,nojournal_checksum,min_batch_time=0x000000007ffffffe,resuid=0x0000000000000000,errors=continue,data=ordered,,errors=continue. Quota mode: none. [ 422.488929][T10656] attempt to access beyond end of device [ 422.488929][T10656] loop0: rw=0, want=292, limit=256 [ 423.280183][T10648] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 423.631807][ T3845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.659847][ T3845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.753433][T10662] overlayfs: statfs failed on './file0' [ 423.767123][ T3845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.830630][ T3845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.930010][ T3845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.940909][ T3845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.014647][T10673] loop1: detected capacity change from 0 to 64 [ 424.035086][ T3845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.066338][ T3845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.305243][T10677] loop0: detected capacity change from 0 to 512 [ 424.448157][T10677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 424.459628][T10663] loop4: detected capacity change from 0 to 32768 [ 424.470166][T10677] ext4 filesystem being mounted at /root/syzkaller-testdir3099396827/syzkaller.Ba55s4/54/file0 supports timestamps until 2038 (0x7fffffff) [ 424.524706][T10669] chnl_net:caif_netlink_parms(): no params data found [ 424.562791][T10677] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 424.579521][T10677] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz-executor.0: mark_inode_dirty error [ 424.592811][T10677] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 424.611228][T10677] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz-executor.0: mark_inode_dirty error [ 424.816821][T10691] loop3: detected capacity change from 0 to 8192 [ 424.819553][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.831373][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.840443][T10669] device bridge_slave_0 entered promiscuous mode [ 424.859672][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.868513][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.877720][T10669] device bridge_slave_1 entered promiscuous mode [ 424.989796][T10669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.033908][T10669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.071904][T10695] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.117658][T10669] team0: Port device team_slave_0 added [ 425.144071][T10669] team0: Port device team_slave_1 added [ 425.219201][T10669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.227193][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.255131][T10669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.286784][T10669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.297326][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.332807][T10669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.382383][T10706] kvm [10703]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 425.487678][T10669] device hsr_slave_0 entered promiscuous mode [ 425.497385][T10669] device hsr_slave_1 entered promiscuous mode [ 425.512939][T10669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.537256][T10669] Cannot create hsr debugfs directory [ 425.602104][T10712] loop0: detected capacity change from 0 to 64 [ 425.702996][ T3845] device hsr_slave_0 left promiscuous mode [ 425.725204][ T3845] device hsr_slave_1 left promiscuous mode [ 425.764433][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.784817][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.825542][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.843767][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.862446][ T3845] device bridge_slave_1 left promiscuous mode [ 425.872956][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.882343][ T1281] Bluetooth: hci4: command 0x0409 tx timeout [ 425.914586][ T3845] device bridge_slave_0 left promiscuous mode [ 425.929242][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.936488][T10710] loop3: detected capacity change from 0 to 32768 [ 425.951841][ T3845] device veth1_macvtap left promiscuous mode [ 425.958529][ T3845] device veth0_macvtap left promiscuous mode [ 425.965431][ T3845] device veth1_vlan left promiscuous mode [ 425.971693][ T3845] device veth0_vlan left promiscuous mode [ 426.075093][T10710] /dev/loop3: Can't open blockdev [ 426.232105][T10725] loop1: detected capacity change from 0 to 8192 [ 426.430767][T10722] loop4: detected capacity change from 0 to 32768 [ 426.589613][ T3845] team0 (unregistering): Port device team_slave_1 removed [ 426.657819][ T3845] team0 (unregistering): Port device team_slave_0 removed [ 426.708881][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.731250][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.332012][T10736] loop0: detected capacity change from 0 to 16 [ 427.362783][ T3845] bond0 (unregistering): Released all slaves [ 427.482716][T10736] erofs: (device loop0): mounted with root inode @ nid 36. [ 427.903136][T10747] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 427.903136][T10747] [ 427.917268][T10746] loop3: detected capacity change from 0 to 512 [ 427.956103][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 427.966804][T10746] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 427.986178][T10746] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,max_batch_time=0x0000000000000004,lazytime,noinit_itable,jqfmt=vfsv0,noinit_itable,grpid,nojournal_checksum,min_batch_time=0x000000007ffffffe,resuid=0x0000000000000000,errors=continue,data=ordered,,errors=continue. Quota mode: none. [ 428.025273][T10669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.050116][T10669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.070485][T10669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.094131][T10669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.326320][T10756] loop1: detected capacity change from 0 to 1024 [ 428.367342][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.399433][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.413401][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.448604][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.509541][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.530240][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.560307][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.567445][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.601576][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.621857][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.648921][T10758] loop3: detected capacity change from 0 to 8192 [ 428.656497][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.663719][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.686737][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.722626][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.737983][T10758] loop3: p1 p3 p4 [ 428.743602][T10752] loop0: detected capacity change from 0 to 32768 [ 428.743730][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.755862][T10758] loop3: partition table partially beyond EOD, truncated [ 428.780157][T10758] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 428.787981][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.809136][T10752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10752) [ 428.814446][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.823198][T10758] loop3: p3 start 4294901760 is beyond EOD, truncated [ 428.851623][T10758] loop3: p4 size 50331648 extends beyond EOD, truncated [ 428.872485][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.885777][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.906364][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.941243][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.963911][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.979063][T10761] overlayfs: failed to resolve './file0': -2 [ 428.986749][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.997468][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.009215][T10669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.020420][T10752] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 429.035109][T10752] BTRFS info (device loop0): force zlib compression, level 3 [ 429.054707][T10752] BTRFS info (device loop0): force clearing of disk cache [ 429.083311][T10752] BTRFS info (device loop0): setting nodatasum [ 429.095065][T10752] BTRFS info (device loop0): allowing degraded mounts [ 429.103326][T10752] BTRFS info (device loop0): enabling disk space caching [ 429.121375][T10752] BTRFS info (device loop0): disk space caching is enabled [ 429.142240][T10752] BTRFS info (device loop0): has skinny extents [ 429.235994][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.254767][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.287791][T10669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.363061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.383283][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.457935][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.503885][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.516193][T10669] device veth0_vlan entered promiscuous mode [ 429.742035][T10790] loop1: detected capacity change from 0 to 256 [ 429.806904][T10752] BTRFS info (device loop0): clearing free space tree [ 429.913674][T10752] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.056178][T10669] device veth1_vlan entered promiscuous mode [ 430.099723][T10752] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 430.289117][ T3573] Bluetooth: hci4: command 0x040f tx timeout [ 430.304662][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.313385][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.321987][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.333530][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.382290][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.398945][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.458074][T10669] device veth0_macvtap entered promiscuous mode [ 430.480725][T10669] device veth1_macvtap entered promiscuous mode [ 430.501002][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.514724][T10794] loop3: detected capacity change from 0 to 164 [ 430.530799][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.540979][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.553200][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.667711][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.679480][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.690185][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.701761][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.721168][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.750146][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.781314][T10669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.795063][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.060911][T10796] BTRFS info (device loop0): balance: start -sprofiles=metadata|single|raid10|raid1|dup|raid0|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=8..0,devid=0,vrange=0..0,limit=0,limit=0..0,stripes=0..0 [ 431.082465][T10796] BTRFS info (device loop0): balance: ended with status: 0 [ 431.266912][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.275464][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.284930][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.298489][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.342263][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.364649][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.384696][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.394587][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.444067][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.462441][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.474553][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.492609][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.506175][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.524587][T10669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.539275][T10669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.556103][T10669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.587808][T10669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.625898][T10669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.664508][T10803] device geneve2 entered promiscuous mode [ 431.826278][T10807] loop3: detected capacity change from 0 to 512 [ 431.835167][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.849631][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.941972][T10807] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 431.967176][T10807] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,max_batch_time=0x0000000000000004,lazytime,noinit_itable,jqfmt=vfsv0,noinit_itable,grpid,nojournal_checksum,min_batch_time=0x000000007ffffffe,resuid=0x0000000000000000,errors=continue,data=ordered,,errors=continue. Quota mode: none. [ 432.117724][T10805] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.255925][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.265947][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.334931][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 432.377880][ T3734] Bluetooth: hci4: command 0x0419 tx timeout [ 432.392765][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.420730][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.459140][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.631291][T10820] netlink: 356 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.662069][T10820] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.823049][T10826] loop2: detected capacity change from 0 to 16 [ 432.900161][T10826] erofs: (device loop2): mounted with root inode @ nid 36. [ 432.933127][T10831] ALSA: mixer_oss: invalid index 100000 [ 433.067544][T10813] loop3: detected capacity change from 0 to 32768 [ 433.140651][T10835] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.155185][T10813] /dev/loop3: Can't open blockdev [ 433.358026][T10839] loop2: detected capacity change from 0 to 512 [ 433.415925][T10839] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 433.429214][T10839] EXT4-fs (sda1): re-mounted. Opts: data_err=abort,max_batch_time=0x0000000000000004,lazytime,noinit_itable,jqfmt=vfsv0,noinit_itable,grpid,nojournal_checksum,min_batch_time=0x000000007ffffffe,resuid=0x0000000000000000,errors=continue,data=ordered,,errors=continue. Quota mode: none. [ 434.754248][T10859] Cannot find add_set index 0 as target [ 436.076153][T10854] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 436.101489][T10854] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 436.339683][T10863] loop0: detected capacity change from 0 to 512 [ 436.376622][ T26] audit: type=1800 audit(1718287681.693:138): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1942 res=0 errno=0 [ 436.396870][T10863] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 436.396870][T10863] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 436.396870][T10863] [ 436.417207][T10863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 436.423689][ T26] audit: type=1800 audit(1718287681.713:139): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1942 res=0 errno=0 [ 436.470553][T10863] EXT4-fs (loop0): 1 truncate cleaned up [ 436.485668][T10863] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,noacl,quota,,errors=continue. Quota mode: writeback. [ 436.524343][T10863] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 436.807140][ T3249] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 437.055107][ T3249] usb 1-1: Using ep0 maxpacket: 8 [ 437.177494][ T3249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 437.198993][ T3249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.218921][ T3249] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.232837][ T3249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 437.253423][ T3249] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 437.263762][ T3249] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 437.281620][ T3249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.300876][ T3249] usb 1-1: config 0 descriptor?? [ 437.326422][T10863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.538330][T10886] loop1: detected capacity change from 0 to 32768 [ 437.591643][ T3573] usb 1-1: USB disconnect, device number 6 [ 437.645043][T10886] /dev/loop1: Can't open blockdev [ 438.053867][T10901] loop2: detected capacity change from 0 to 32768 [ 438.126248][T10901] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (10901) [ 438.197569][T10901] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 438.206601][T10901] BTRFS info (device loop2): using free space tree [ 438.213335][T10901] BTRFS info (device loop2): has skinny extents [ 438.252468][T10901] BTRFS info (device loop2): enabling ssd optimizations [ 438.823376][T10931] loop3: detected capacity change from 0 to 512 [ 438.896073][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 439.454134][ T26] audit: type=1804 audit(1718287684.763:140): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1306117917/syzkaller.cMH51n/9/bus" dev="sda1" ino=1951 res=1 errno=0 [ 439.511256][T10954] Invalid ELF header magic: != ELF [ 439.516855][ T26] audit: type=1804 audit(1718287684.813:141): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1306117917/syzkaller.cMH51n/9/bus" dev="sda1" ino=1951 res=1 errno=0 [ 439.633748][ T26] audit: type=1804 audit(1718287684.813:142): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1306117917/syzkaller.cMH51n/9/bus" dev="sda1" ino=1951 res=1 errno=0 [ 439.693993][T10963] loop2: detected capacity change from 0 to 8 [ 439.881515][T10967] loop4: detected capacity change from 0 to 1024 [ 439.957549][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.965314][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.392596][T10957] loop0: detected capacity change from 0 to 32768 [ 440.460903][T10957] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10957) [ 440.529427][T10957] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 440.541726][T10957] BTRFS info (device loop0): using free space tree [ 440.549472][T10957] BTRFS info (device loop0): has skinny extents [ 440.624047][T10957] BTRFS info (device loop0): enabling ssd optimizations [ 440.665886][ T26] audit: type=1800 audit(1718287685.983:143): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 440.765260][ T5569] hfsplus: b-tree write err: -5, ino 4 [ 441.127477][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.608180][T11010] loop0: detected capacity change from 0 to 4096 [ 442.063455][T11018] loop1: detected capacity change from 0 to 256 [ 442.720137][T11008] loop2: detected capacity change from 0 to 32768 [ 442.791327][ T26] audit: type=1800 audit(1718287688.103:144): pid=11023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=31 res=0 errno=0 [ 442.859919][T11008] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.899617][T11008] lbmIODone: I/O error in JFS log [ 442.919851][T11008] *** Log Format Error ! *** [ 442.927809][T11023] 9pnet: Insufficient options for proto=fd [ 442.929194][T11008] lmLogInit: exit(-22) [ 442.938661][T11008] lmLogOpen: exit(-22) [ 442.963551][T11026] jfs: Unrecognized mount option "00000000000000000000000cXcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 442.963551][T11026] հ84bL*" or missing value [ 443.005368][T11030] loop3: detected capacity change from 0 to 512 [ 444.053271][T11048] loop1: detected capacity change from 0 to 512 [ 444.143363][T11034] loop4: detected capacity change from 0 to 32768 [ 444.190549][T11034] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 444.199364][T11034] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 444.212100][T11034] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 444.212100][T11034] inode = 0 2073 [ 444.212100][T11034] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 462 [ 444.231115][T11034] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 444.240501][T11034] gfs2: fsid=syz:syz.0: File system withdrawn [ 444.246770][T11034] CPU: 0 PID: 11034 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 444.255474][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 444.265671][T11034] Call Trace: [ 444.268987][T11034] [ 444.271943][T11034] dump_stack_lvl+0x1e3/0x2d0 [ 444.276710][T11034] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 444.282374][T11034] ? panic+0x860/0x860 [ 444.286632][T11034] gfs2_withdraw+0xeb9/0x1500 [ 444.291355][T11034] ? gfs2_lm+0x230/0x230 [ 444.295801][T11034] ? gfs2_journal_wipe+0xcf0/0xcf0 [ 444.300946][T11034] ? gfs2_consist_inode_i+0xc0/0xe0 [ 444.306253][T11034] gfs2_inode_refresh+0xbd6/0x1070 [ 444.311422][T11034] ? gfs2_inode_metasync+0xf0/0xf0 [ 444.316920][T11034] ? __lock_acquire+0x1ff0/0x1ff0 [ 444.322096][T11034] inode_go_lock+0x12c/0x470 [ 444.326824][T11034] do_promote+0x74b/0xb10 [ 444.331216][T11034] ? demote_incompat_holders+0x4d1/0x550 [ 444.336892][T11034] finish_xmote+0x50d/0xb60 [ 444.341439][T11034] do_xmote+0x776/0x10b0 [ 444.345725][T11034] gfs2_glock_nq+0xc32/0x15e0 [ 444.350445][T11034] gfs2_lookupi+0x3ff/0x5e0 [ 444.355188][T11034] ? mark_lock+0x98/0x340 [ 444.359592][T11034] ? gfs2_lookup_simple+0x170/0x170 [ 444.364833][T11034] ? gfs2_lookupi+0x3f7/0x5e0 [ 444.369632][T11034] ? crc32_le_base+0x79c/0xd20 [ 444.374631][T11034] gfs2_lookup_simple+0xf2/0x170 [ 444.379705][T11034] ? gfs2_lookup_by_inum+0xe0/0xe0 [ 444.384890][T11034] init_journal+0x1be/0x23c0 [ 444.389516][T11034] ? string+0x26a/0x2b0 [ 444.393690][T11034] ? vsnprintf+0x1dc/0x1c70 [ 444.398220][T11034] ? vsnprintf+0x1b96/0x1c70 [ 444.403347][T11034] ? end_bio_io_page+0xf0/0xf0 [ 444.408142][T11034] ? ptr_to_hashval+0x60/0x60 [ 444.412850][T11034] ? init_sb+0xc50/0x1340 [ 444.417214][T11034] ? snprintf+0xd6/0x120 [ 444.421486][T11034] ? vscnprintf+0x80/0x80 [ 444.425932][T11034] init_inodes+0xdc/0x310 [ 444.430284][T11034] gfs2_fill_super+0x1c2c/0x2750 [ 444.435260][T11034] ? gfs2_reconfigure+0xcf0/0xcf0 [ 444.440307][T11034] ? ptr_to_hashval+0x60/0x60 [ 444.445016][T11034] ? gfs2_glock_nq_num+0x123/0x270 [ 444.450160][T11034] ? set_blocksize+0x1ec/0x370 [ 444.454957][T11034] get_tree_bdev+0x3fe/0x620 [ 444.459568][T11034] ? gfs2_reconfigure+0xcf0/0xcf0 [ 444.464637][T11034] gfs2_get_tree+0x50/0x210 [ 444.469165][T11034] ? bpf_lsm_capable+0x5/0x10 [ 444.473870][T11034] vfs_get_tree+0x88/0x270 [ 444.478313][T11034] do_new_mount+0x2ba/0xb40 [ 444.483234][T11034] ? do_move_mount_old+0x160/0x160 [ 444.488469][T11034] ? user_path_at_empty+0x12b/0x180 [ 444.493915][T11034] __se_sys_mount+0x2d5/0x3c0 [ 444.498624][T11034] ? __x64_sys_mount+0xc0/0xc0 [ 444.504046][T11034] ? syscall_enter_from_user_mode+0x2e/0x240 [ 444.510066][T11034] ? lockdep_hardirqs_on+0x94/0x130 [ 444.515736][T11034] ? __x64_sys_mount+0x1c/0xc0 [ 444.520624][T11034] do_syscall_64+0x3b/0xb0 [ 444.525171][T11034] ? clear_bhb_loop+0x15/0x70 [ 444.529985][T11034] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.535941][T11034] RIP: 0033:0x7f4ebc1585aa [ 444.540379][T11034] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 444.560136][T11034] RSP: 002b:00007f4ebaccfef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 444.568765][T11034] RAX: ffffffffffffffda RBX: 00007f4ebaccff80 RCX: 00007f4ebc1585aa [ 444.576763][T11034] RDX: 0000000020000100 RSI: 0000000020012500 RDI: 00007f4ebaccff40 [ 444.584758][T11034] RBP: 0000000020000100 R08: 00007f4ebaccff80 R09: 000000000100c000 [ 444.592755][T11034] R10: 000000000100c000 R11: 0000000000000202 R12: 0000000020012500 [ 444.600812][T11034] R13: 00007f4ebaccff40 R14: 00000000000124d8 R15: 00000000200008c0 [ 444.609352][T11034] [ 444.623406][T11034] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 444.827880][T11055] loop3: detected capacity change from 0 to 2048 [ 445.091791][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.093250][ T4229] usb 3-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed [ 445.141624][ T4229] usb 3-1: failed to load firmware "keyspan/usa28.fw" [ 445.149131][ T4229] keyspan: probe of 3-1:0.0 failed with error -2 [ 445.191717][ T4229] usb 3-1: USB disconnect, device number 3 [ 445.228552][T11059] loop3: detected capacity change from 0 to 2048 [ 445.604938][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 445.849079][T11079] loop3: detected capacity change from 0 to 1024 [ 445.855761][ T3742] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 445.995576][ T4229] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.013077][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.023702][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.046739][ T4229] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.124197][T11088] loop4: detected capacity change from 0 to 512 [ 446.150702][T11089] loop3: detected capacity change from 0 to 8 [ 446.204284][T11088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 446.221188][T11088] System zones: 1-12 [ 446.233219][T11088] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 8323072 (level 1) [ 446.241996][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 446.255345][ T4229] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.267604][ T3742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 446.270861][T11088] EXT4-fs (loop4): 1 truncate cleaned up [ 446.285361][T11089] /dev/loop3: Can't open blockdev [ 446.285463][ T3742] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 446.301137][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=96, SerialNumber=8 [ 446.310910][ T4229] usb 3-1: Product: syz [ 446.315025][T11088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.328089][ T4229] usb 3-1: Manufacturer: syz [ 446.332921][ T4229] usb 3-1: SerialNumber: syz [ 446.354970][ T3742] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 446.364064][ T3742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.383612][ T3742] usb 2-1: config 0 descriptor?? [ 446.787530][ T3742] usb 2-1: USB disconnect, device number 8 [ 446.828146][ T4229] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 447.748260][ T4229] usb 3-1: USB disconnect, device number 4 [ 447.936642][ T26] audit: type=1326 audit(1718287693.253:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 447.978470][ T26] audit: type=1326 audit(1718287693.283:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.012354][ T26] audit: type=1326 audit(1718287693.283:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.044022][ T26] audit: type=1326 audit(1718287693.283:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.059343][T11107] loop1: detected capacity change from 0 to 256 [ 448.077181][ T26] audit: type=1326 audit(1718287693.283:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.115995][ T26] audit: type=1326 audit(1718287693.283:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.147472][ T26] audit: type=1326 audit(1718287693.293:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.176182][ T26] audit: type=1326 audit(1718287693.293:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12e8187627 code=0x7ffc0000 [ 448.222335][ T26] audit: type=1326 audit(1718287693.293:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12e814d309 code=0x7ffc0000 [ 448.269376][T11108] loop2: detected capacity change from 0 to 128 [ 448.295233][ T26] audit: type=1326 audit(1718287693.293:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e8189ea9 code=0x7ffc0000 [ 448.619380][T10669] [ 448.621771][T10669] ====================================================== [ 448.628800][T10669] WARNING: possible circular locking dependency detected [ 448.635919][T10669] 5.15.160-syzkaller #0 Not tainted [ 448.641121][T10669] ------------------------------------------------------ [ 448.648320][T10669] syz-executor.2/10669 is trying to acquire lock: [ 448.654876][T10669] ffff88814b7883f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760 [ 448.666151][T10669] [ 448.666151][T10669] but task is already holding lock: [ 448.673516][T10669] ffff88805d6e35c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 448.683435][T10669] [ 448.683435][T10669] which lock already depends on the new lock. [ 448.683435][T10669] [ 448.693841][T10669] [ 448.693841][T10669] the existing dependency chain (in reverse order) is: [ 448.702876][T10669] [ 448.702876][T10669] -> #1 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 448.711658][T10669] lock_acquire+0x1db/0x4f0 [ 448.716718][T10669] down_read+0x45/0x2e0 [ 448.721413][T10669] ext4_bmap+0x4b/0x410 [ 448.726128][T10669] bmap+0xa1/0xd0 [ 448.730284][T10669] jbd2_journal_flush+0x7a2/0xc90 [ 448.735832][T10669] ext4_ioctl+0x3249/0x5b80 [ 448.740859][T10669] __se_sys_ioctl+0xf1/0x160 [ 448.745968][T10669] do_syscall_64+0x3b/0xb0 [ 448.750906][T10669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.757315][T10669] [ 448.757315][T10669] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 448.766084][T10669] validate_chain+0x1649/0x5930 [ 448.771454][T10669] __lock_acquire+0x1295/0x1ff0 [ 448.776822][T10669] lock_acquire+0x1db/0x4f0 [ 448.781838][T10669] __mutex_lock_common+0x1da/0x25a0 [ 448.787581][T10669] mutex_lock_io_nested+0x45/0x60 [ 448.793123][T10669] __jbd2_log_wait_for_space+0x213/0x760 [ 448.799271][T10669] add_transaction_credits+0x950/0xc00 [ 448.805423][T10669] start_this_handle+0x747/0x1570 [ 448.810994][T10669] jbd2__journal_start+0x2d1/0x5c0 [ 448.816634][T10669] __ext4_journal_start_sb+0x175/0x370 [ 448.822624][T10669] __ext4_unlink+0x3a7/0xae0 [ 448.827751][T10669] ext4_unlink+0x1a9/0x530 [ 448.832687][T10669] vfs_unlink+0x359/0x5f0 [ 448.837535][T10669] do_unlinkat+0x4a3/0x950 [ 448.842469][T10669] __x64_sys_unlink+0x45/0x50 [ 448.847659][T10669] do_syscall_64+0x3b/0xb0 [ 448.852588][T10669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.859007][T10669] [ 448.859007][T10669] other info that might help us debug this: [ 448.859007][T10669] [ 448.869310][T10669] Possible unsafe locking scenario: [ 448.869310][T10669] [ 448.876782][T10669] CPU0 CPU1 [ 448.882152][T10669] ---- ---- [ 448.887506][T10669] lock(&sb->s_type->i_mutex_key#9); [ 448.892878][T10669] lock(&journal->j_checkpoint_mutex); [ 448.900936][T10669] lock(&sb->s_type->i_mutex_key#9); [ 448.908820][T10669] lock(&journal->j_checkpoint_mutex); [ 448.914375][T10669] [ 448.914375][T10669] *** DEADLOCK *** [ 448.914375][T10669] [ 448.922684][T10669] 3 locks held by syz-executor.2/10669: [ 448.928226][T10669] #0: ffff88814bd04460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 448.937371][T10669] #1: ffff88807573abd0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x950 [ 448.947671][T10669] #2: ffff88805d6e35c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 448.957781][T10669] [ 448.957781][T10669] stack backtrace: [ 448.963657][T10669] CPU: 0 PID: 10669 Comm: syz-executor.2 Not tainted 5.15.160-syzkaller #0 [ 448.972231][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 448.982279][T10669] Call Trace: [ 448.985552][T10669] [ 448.988476][T10669] dump_stack_lvl+0x1e3/0x2d0 [ 448.993152][T10669] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 448.998784][T10669] ? print_circular_bug+0x12b/0x1a0 [ 449.004005][T10669] check_noncircular+0x2f8/0x3b0 [ 449.008940][T10669] ? add_chain_block+0x850/0x850 [ 449.013890][T10669] ? lockdep_lock+0x11f/0x2a0 [ 449.018561][T10669] ? __lock_acquire+0x1295/0x1ff0 [ 449.023585][T10669] validate_chain+0x1649/0x5930 [ 449.028434][T10669] ? validate_chain+0x112/0x5930 [ 449.033371][T10669] ? reacquire_held_locks+0x660/0x660 [ 449.038743][T10669] ? reacquire_held_locks+0x660/0x660 [ 449.044106][T10669] ? reacquire_held_locks+0x660/0x660 [ 449.049476][T10669] ? do_raw_spin_unlock+0x137/0x8b0 [ 449.054674][T10669] ? reacquire_held_locks+0x660/0x660 [ 449.060041][T10669] ? finish_lock_switch+0x8f/0x100 [ 449.065150][T10669] ? reacquire_held_locks+0x660/0x660 [ 449.070517][T10669] ? validate_chain+0x112/0x5930 [ 449.075448][T10669] ? __switch_to_asm+0x34/0x60 [ 449.080212][T10669] ? mark_lock+0x98/0x340 [ 449.084533][T10669] __lock_acquire+0x1295/0x1ff0 [ 449.089383][T10669] lock_acquire+0x1db/0x4f0 [ 449.093877][T10669] ? __jbd2_log_wait_for_space+0x213/0x760 [ 449.099678][T10669] ? read_lock_is_recursive+0x10/0x10 [ 449.105044][T10669] ? __might_sleep+0xc0/0xc0 [ 449.109635][T10669] ? validate_chain+0x112/0x5930 [ 449.114565][T10669] ? __lock_acquire+0x1295/0x1ff0 [ 449.119589][T10669] __mutex_lock_common+0x1da/0x25a0 [ 449.124962][T10669] ? __jbd2_log_wait_for_space+0x213/0x760 [ 449.130770][T10669] ? __jbd2_log_wait_for_space+0x213/0x760 [ 449.136576][T10669] ? mutex_lock_io_nested+0x60/0x60 [ 449.141866][T10669] mutex_lock_io_nested+0x45/0x60 [ 449.146890][T10669] __jbd2_log_wait_for_space+0x213/0x760 [ 449.152551][T10669] ? do_raw_write_lock+0x143/0x4e0 [ 449.157670][T10669] ? jbd2_commit_block_csum_verify+0x4f0/0x4f0 [ 449.163826][T10669] ? do_raw_read_unlock+0x70/0x70 [ 449.168950][T10669] add_transaction_credits+0x950/0xc00 [ 449.174523][T10669] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 449.181309][T10669] ? mark_lock+0x98/0x340 [ 449.185723][T10669] ? __kasan_slab_alloc+0xa5/0xc0 [ 449.190748][T10669] ? __kasan_slab_alloc+0x8e/0xc0 [ 449.195768][T10669] ? slab_post_alloc_hook+0x53/0x380 [ 449.201053][T10669] ? kmem_cache_alloc+0xf3/0x280 [ 449.205984][T10669] ? jbd2__journal_start+0x144/0x5c0 [ 449.211268][T10669] ? __ext4_unlink+0x3a7/0xae0 [ 449.216030][T10669] ? ext4_unlink+0x1a9/0x530 [ 449.220617][T10669] ? vfs_unlink+0x359/0x5f0 [ 449.225114][T10669] ? __x64_sys_unlink+0x45/0x50 [ 449.229958][T10669] start_this_handle+0x747/0x1570 [ 449.234990][T10669] ? jbd2__journal_start+0x5c0/0x5c0 [ 449.240278][T10669] ? slab_post_alloc_hook+0x73/0x380 [ 449.245582][T10669] ? jbd2__journal_start+0x144/0x5c0 [ 449.250864][T10669] ? rcu_is_watching+0x11/0xa0 [ 449.255635][T10669] ? jbd2__journal_start+0x144/0x5c0 [ 449.260916][T10669] ? kmem_cache_alloc+0x128/0x280 [ 449.265938][T10669] jbd2__journal_start+0x2d1/0x5c0 [ 449.271067][T10669] __ext4_journal_start_sb+0x175/0x370 [ 449.276529][T10669] __ext4_unlink+0x3a7/0xae0 [ 449.281123][T10669] ? __ext4_read_dirblock+0x880/0x880 [ 449.286491][T10669] ? clear_nonspinnable+0x60/0x60 [ 449.291517][T10669] ext4_unlink+0x1a9/0x530 [ 449.295945][T10669] vfs_unlink+0x359/0x5f0 [ 449.300274][T10669] do_unlinkat+0x4a3/0x950 [ 449.304686][T10669] ? fsnotify_link_count+0xf0/0xf0 [ 449.309792][T10669] ? strncpy_from_user+0x209/0x370 [ 449.314913][T10669] __x64_sys_unlink+0x45/0x50 [ 449.319585][T10669] do_syscall_64+0x3b/0xb0 [ 449.323997][T10669] ? clear_bhb_loop+0x15/0x70 [ 449.328669][T10669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.334558][T10669] RIP: 0033:0x7f12e8189657 [ 449.338976][T10669] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 449.358576][T10669] RSP: 002b:00007fff48325738 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 2024/06/13 14:08:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 449.366986][T10669] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12e8189657 [ 449.374952][T10669] RDX: 00007fff48325760 RSI: 00007fff483257f0 RDI: 00007fff483257f0 [ 449.382940][T10669] RBP: 00007fff483257f0 R08: 0000000000000000 R09: 0000000000000000 [ 449.390902][T10669] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff483268a0 [ 449.398867][T10669] R13: 00007f12e81e6636 R14: 000000000006d567 R15: 0000000000000020 [ 449.406838][T10669] [ 449.409919][ C0] vkms_vblank_simulate: vblank timer overrun