last executing test programs: 7m22.421492892s ago: executing program 1 (id=2): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7m21.8208082s ago: executing program 1 (id=8): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006cc0)={0x20, 0x0, 0x7, {0x0, 0x4, 0x3, 0x101}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) 7m21.242245298s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f00000004c0)={0x40, 0x16, 0x2, "fce1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m18.25533981s ago: executing program 0 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0x200b}) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0xa7f, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x95, 0x70, 0x20000}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m17.142326936s ago: executing program 1 (id=31): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r3], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESOCT, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x1524, &(0x7f0000002280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) 7m16.346678597s ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x9, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 7m16.025055141s ago: executing program 1 (id=36): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m15.932606712s ago: executing program 0 (id=37): write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='ALT'], 0xe6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7m15.273970002s ago: executing program 1 (id=39): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 7m14.214993516s ago: executing program 32 (id=39): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 7m14.198381587s ago: executing program 0 (id=41): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) setns(0xffffffffffffffff, 0x24020000) 7m13.802864822s ago: executing program 0 (id=44): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7m13.18637935s ago: executing program 0 (id=48): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000540)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@jqfmt_vfsv0}, {@usrjquota}, {@delalloc}, {@data_writeback}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m57.921169414s ago: executing program 33 (id=48): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000540)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@jqfmt_vfsv0}, {@usrjquota}, {@delalloc}, {@data_writeback}]}, 0xee, 0x46e, &(0x7f0000000c40)="$eJzs3M1vFOUfAPDvTCnwgx+0IqIgaBWNjS8tLagcuGg08aDGRA94rG0hSKGG1kQIkWIMHg2Jd+PRxL/Ak16MejLxZvRuSIgSE9DTmnmD7bZbWth1lP18ksk+z87MPs93n3l2nplndwPoWUMR0R8R/4+InyNiICL6WjcYKh6uXTk7+eeVs5NJNBqv/5ZEEhFXr5ydrDZNysfNZWY4jUg/TIqdW8ydPnN8YmZm+lSZH50/8c7o3OkzTx07MXF0+uj0yfGDBw/sH3v2mfGnOxJnFtfVXe/P7t750psXX5k8fPGt777I6rtjT7G+OY5OGcoC/72Ra133aKcLq9mWpnSyrsaKsCZZX8+aK837/0D0xY3GG4gXP6i1ckBXZeemDe1XLzSAO1gSddcAqEd1os+uf6ul3WCgv/PDj9pdfq64AMrivlYuxZp1+TVRdDnuoYg4vPDXp9kSXboPAQDQ7Kts/PPkcuO/NHY0bbe1nEMZjIi7ImJbRNwdEdsj4p6IfNt7I+K+VZXaaDTOFanWqaGl45/00u3EdzPZ+O9QObe1ePxXjf5isK/Mbcnj70+OHJuZ3le+J8PRvyHLj61Qxtcv/Phxu3XN479sycqvxoJlPS6ta7lBNzUxP9GpQenl80WjLo0/uT4TkETEzojYtbaX3loljj3++e52G908/hV0YJ6p8VnEY0X7L0RL/JVk5fnJ0Y0xM71vtDoqlvr+hwuvtSv/tuLvgKz9Ny0+/lu2GPgjaZ6vnVt7GRd++ajtNc2tHv/rkzfyOev15XPvTczPnxqLWJ+8nOcXPT9+Y98qX22fxT+8d/n+v63cJ4v//ojIDuI9EfFARDxY1v2hiHg4IvauEP+3zz/y9q3H311Z/FPLfv5dP/4HF7f/0sShVyParMoTfce/+bJd+atr/wN5arh8Jv/8u4kVqrMocTvvHQAAAPxXpPl3/5N05Ho6TUdGiu/wb49N6czs3PwTR2bfPTlV/EZgMPrT6k7XQNP90LFkoXzFIj9e3iuu1u8v7xt/0ve/PD8yOTszVXPs0Os2t+n/mV/76q4d0HV+rwW9q7X/pzXVA/jnOf9D79L/oXfp/9C7luv/51ry5gLgzuT8D71L/4fepf9D77qF/n8n/hcY9JpV/Uh+rYnznX7BtSd+2lhn6UUijYha34SuJiL9V1RDYjWJ6s881rBXzR9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJ3AAAA//8kD+vW") ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m32.297336881s ago: executing program 4 (id=158): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x82341, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 6m29.706240867s ago: executing program 4 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x40000d0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m27.268834091s ago: executing program 4 (id=173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x24008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 6m26.923386866s ago: executing program 4 (id=177): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000700), &(0x7f0000000780)='./file0/file0\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYRESHEX], 0x3, 0x6dd, &(0x7f0000006380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) 6m24.320957672s ago: executing program 4 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6m23.586055943s ago: executing program 4 (id=188): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 6m23.0536111s ago: executing program 34 (id=188): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 3m19.794247705s ago: executing program 7 (id=712): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m18.572387412s ago: executing program 7 (id=718): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) 3m16.306313685s ago: executing program 7 (id=724): syz_open_dev$sg(0x0, 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d0000000000010902"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) 3m9.784240869s ago: executing program 7 (id=735): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) 3m8.546298047s ago: executing program 7 (id=738): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) shutdown(r0, 0x2) 3m6.914191351s ago: executing program 7 (id=745): mkdir(0x0, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}}, 0x50) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1/file4\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) 2m50.844621523s ago: executing program 35 (id=745): mkdir(0x0, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}}, 0x50) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1/file4\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) 20.879566758s ago: executing program 8 (id=1112): r0 = socket$kcm(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="201300000100", @ANYBLOB], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='tlb_flush\x00', r3, 0x0, 0x20000000000}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 20.627067302s ago: executing program 8 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x2a) unshare(0x400) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.693381086s ago: executing program 2 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12.178320734s ago: executing program 8 (id=1132): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 12.176967114s ago: executing program 6 (id=1142): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000780)="11971c1969a34a13354b4a2da41f46386deaf5807df3abdf75aca2d3238bd843170590506cc576385e6d43c3000086cba2b698b9d8e9b03f87256e59572916189dacaf694abd040c991278759e26ce26d37cc3777f5452a9673e4ee1689699aa911c0af7bf7cee3d8817a59fe22e13b447648ead5f02fac2ea0bb7421cd369f7c10dbc6b23c1c15ef824c32b8c15fa1ae80fe4e9754e6798e88705409c8526705a90949c227b93595846bee659ba30eead051fc0c951d659a3b568a7448738891f4a2071e4f1556543f76c6f382c189e0a6592cf7f864e69d846eb4843df5f01bb91addb8de8714b80ea39ad117daa9cb5084008b7dd4003f55120bae3468d0330a5b37f", 0x104, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 10.617107496s ago: executing program 5 (id=1133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x2, 0xff, 0x1, 0x8}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292100090509"], 0x0) 10.511155318s ago: executing program 2 (id=1135): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000480)='projid_map\x00') bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 9.113529758s ago: executing program 3 (id=1136): syz_open_dev$evdev(0x0, 0x7, 0x80200) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 8.056949644s ago: executing program 3 (id=1137): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) creat(&(0x7f0000000480)='./bus\x00', 0x0) 7.703422499s ago: executing program 3 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1008801, &(0x7f00000000c0)=ANY=[], 0x1, 0x1f7, &(0x7f0000000240)="$eJzsmbGLE0EUxr+Z3U2OQxQbCxsLDzzR2+xuVK654gRLQbgTtQzeekQ3iWxWSAIWwcbG0kKw9R+wsEhlYWdnq4UKgoUprUd2dnZ3knU1sgsKvh9k8s3LzJs3b2dekQVBEP8tnz99//jk8vb+eQBHsIGmsn818jFcG//h2YNzT3euPH/5/sWb/tGHs2V/DIAQq69vAni9awDhMdkXYnH2hvreB8/0dXCcVfoGGOw0VpHP9sFwS5nvanrAlAh8dnsQHNzpBr4TN27ceHHTBsRCfPMpwwGANbUE0+Ibjif3OgEQJiLwU2GJdJ3CT38qfpe/+S7HjpaC+HndfPxoGvdtZXe0/LngcJVug2FP6W00Ydt2nhJt/yfN3L9R2H/FTaJ6jnJhIbMc36rD4ZKAykQNDk3UGVglwSo+QQD/wC5WE2zZEl/ozHJiPntbnPXlr4Rq1XK/ZOECioft3XoQXK3guaGKQOmRSOoHM4EzWn0y0ysEoBX17reG48lWt9c59A/9vue1LzkXHOei15KFKGl/Uf/WZH1a1/xbJWMbrIFRJ4pCdwREoZv1vaTVKu7eq8E3OYfL+sexeTrxER8Vue3mz9dg6sPBwaTaNEqDJwiCIAiCIAiCIAiCIAiCWIX0v1icAktehCUvqkQJ3jU5+kcAAAD//7jeZPY=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x3) 7.702030809s ago: executing program 6 (id=1149): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 7.378201023s ago: executing program 5 (id=1139): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x100000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 7.348339853s ago: executing program 6 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000280)=""/252}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 6.289890609s ago: executing program 2 (id=1141): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.288995329s ago: executing program 3 (id=1143): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r5, 0x309, 0x70bd22, 0x25dfdc01, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x24040804) creat(0x0, 0x110) 6.21935849s ago: executing program 5 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2, 0x0, 0x0) 5.906742935s ago: executing program 8 (id=1145): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r1, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{@none}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000400)={0xa, 0x4}, 0xc) 5.289362054s ago: executing program 6 (id=1146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) 5.288364694s ago: executing program 5 (id=1147): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nogrpid}, {@noload}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000280)="$eJzs3V1rHNUbAPBnNtk2ffn/m0Ip6oUEemGldtMkvlQQWi9FiwW9r0syDSWbbsluShMLbS/sjTdSBBEL4gfw3sviF/BTFLRQpAS98CYym9lkm2TzuprU+f1g2nNmZnPm2Tnn7DM7u2wAhTWU/VOKeDkivkoijnVs649849DSfgvPbo9nSxKLi5/8nkSSr2vvn+T/H8krL0XEz19EnCmtbbcxNz9VrdXSmbw+3Jy+MdyYmz97bbo6mU6m10fHxs6/NTb67jtv9yzW1y//+e3Hjz44/+WphW9+fHL8QRIX42i+rTOOXbjbWRmKofw5KcfFVTuO9KCx/STZ6wNgR/rycV6ObA44Fn35qAf+++5ExCJQUInxDwXVzgPa1/Y9ug5+YTx9f+kCaG38/UvvjcRA69ro8ELy3JVRdr072IP2szZ++u3hg2yJTd6HuNOD9gDa7t6LiHP9/WvnvySf/3buXOvN442tbqNorz+wlx5l+c8b6+U/peX8J9bJf46sM3Z3YvPxX3rSg2a6yvK/99bNf5enrsG+vPa/Vs5XTq5eq6XnIuL/EXE6ygez+kb3c84vPF7stq0z/8uWrP12Lpgfx5P+g88/ZqLarO4m5k5P70W8spL/JrFm/h9o5bqrz3/2fFzeYhsn04evdtu2efydep8BL/4Q8dq653/ljlay8f3J4VZ/GG73irX+uH/yl27td4m/3PNAu8jO/+GN4x9MOu/XNrbfxvcDf6Xdtu20/x9IPm2VD+TrblWbzZmRiAPJR2vXj648tl1v75/Ff/rUxvPfev3/UER8tsX475+433XX7fX/3svin9jW+d9+4fGHn3/Xrf2tnf83W6XT+ZqtzH9bPcDdPHcAAAAAAACw35Qi4mgkpcpyuVSqVJY+33EiDpdq9UbzzNX67PWJaH1XdjDKpfad7mMdn4cYyT8P266PrqqPRcTxiPi671CrXhmv1yb2OngAAAAAAAAAAAAAAAAAAADYJ450+f5/5te+vT464B/nJ7+huDYd/734pSdgX/L6D8Vl/ENxGf9QXMY/FJfxD8Vl/ENxGf9QXMY/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5eyZXHh2e3xrD5xc252qn7z7ETamKpMz45XxuszNyqT9fpkLa2M16c3+3u1ev3GyGjM3hpupo3mcGNu/sp0ffZ688q16epkeiUt/ytRAQAAAAAAAAAAAAAAAAAAwIulMTc/Va3V0hmFroULsS8OY8eFZLOzfCHvDDtqon/vA1TYfWEg7wPLa/ZwUgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVf4OAAD//+L+L80=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1004000, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1c9, &(0x7f00000002c0)="$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") write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) 5.106821016s ago: executing program 2 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, 0x0, &(0x7f00000000c0)=0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) close(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0) 3.284646912s ago: executing program 5 (id=1150): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x400, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x21}, 0x4008000) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000000000fe, 0x0) 3.104134515s ago: executing program 8 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) socket$inet6(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) 2.327997976s ago: executing program 2 (id=1152): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x10c) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2]) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.274166372s ago: executing program 6 (id=1153): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRES64=0x0], 0x1, 0xa23, &(0x7f0000000a80)="$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") openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) 1.273586502s ago: executing program 8 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$media(&(0x7f0000000000), 0xf7, 0x40a01) pipe2$9p(&(0x7f0000000240), 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 761.361989ms ago: executing program 3 (id=1155): write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='ALT'], 0xe6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 130.388728ms ago: executing program 6 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r6}) 14.0858ms ago: executing program 5 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.83969ms ago: executing program 3 (id=1158): socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640)) 0s ago: executing program 2 (id=1159): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x2, @sync=0x0}}) kernel console output (not intermixed with test programs): directory [ 145.638159][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.684158][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.747080][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 145.915393][ T4741] bond0: (slave bond_slave_0): Releasing backup interface [ 145.975377][ T4335] device hsr_slave_0 left promiscuous mode [ 146.015400][ T4335] device hsr_slave_1 left promiscuous mode [ 146.121846][ T4733] loop2: detected capacity change from 0 to 32768 [ 146.142583][ T4733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (4733) [ 146.183029][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.224329][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.270254][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.301971][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.354702][ T4335] device bridge_slave_1 left promiscuous mode [ 146.374994][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.524366][ T4733] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.536248][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 146.580002][ T4335] device bridge_slave_0 left promiscuous mode [ 146.603677][ T4733] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 146.632588][ T4733] BTRFS info (device loop2): using free space tree [ 146.661064][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.843124][ T4335] device veth1_macvtap left promiscuous mode [ 146.889787][ T4335] device veth0_macvtap left promiscuous mode [ 146.925904][ T4335] device veth1_vlan left promiscuous mode [ 146.944231][ T4335] device veth0_vlan left promiscuous mode [ 146.950480][ T4733] BTRFS info (device loop2): enabling ssd optimizations [ 147.446454][ T4419] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 147.691226][ T4774] binder: 4773:4774 ioctl c0306201 200000000640 returned -14 [ 148.891262][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 148.964398][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.029752][ T4786] loop4: detected capacity change from 0 to 164 [ 150.194517][ T4786] isofs_fill_super: get root inode failed [ 151.410494][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 151.500044][ T4803] overlayfs: failed to clone upperpath [ 151.559236][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 151.662696][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.761469][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.431888][ T4817] loop2: detected capacity change from 0 to 2048 [ 153.267411][ T4817] loop2: p1 < > p3 [ 153.343403][ T4817] loop2: p3 size 134217728 extends beyond EOD, truncated [ 153.443571][ T4820] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 153.449938][ T4537] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.450834][ T4575] I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.481061][ T4820] loop2: detected capacity change from 0 to 1024 [ 153.503665][ T4537] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.517855][ T4820] ext2: Unknown parameter 'defcontext' [ 153.524143][ T4537] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 153.941238][ T4335] bond0 (unregistering): Released all slaves [ 154.666090][ T4537] udevd[4537]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.669605][ T4480] device veth0_vlan entered promiscuous mode [ 154.696384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.706567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.794596][ T4480] device veth1_vlan entered promiscuous mode [ 154.835870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.846690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.867015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.884172][ T4537] udevd[4537]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 154.997763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.048509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.074459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.088633][ T4480] device veth0_macvtap entered promiscuous mode [ 155.114174][ T4480] device veth1_macvtap entered promiscuous mode [ 155.228241][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.260245][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.276847][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.289690][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.307493][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.322374][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.341200][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.358022][ T4652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.397166][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.413948][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.422539][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.440333][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.464933][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.493769][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.518092][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.540073][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.568133][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.579412][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.603170][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.629640][ T4652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.642317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.673878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.696593][ T4480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.718372][ T4480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.777941][ T4480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.792915][ T4480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.820717][ T4652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.854622][ T4652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.673915][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.704750][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.718990][ T4855] binder: 4854:4855 ioctl c0306201 200000001d40 returned -14 [ 156.742571][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.751484][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.765519][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.791948][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.864342][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.911419][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.959121][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.997337][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.074858][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.109386][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.152373][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.159688][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.230582][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.255471][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.431655][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.440225][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.563390][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.618008][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.848497][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.901940][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.063913][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.464804][ T4652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.527766][ T4652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.622124][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.637931][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.655103][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.668877][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.689093][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.715577][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.742593][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.789413][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.262659][ T4896] loop5: detected capacity change from 0 to 2048 [ 160.361423][ T4896] loop5: p1 < > p3 [ 160.405006][ T4896] loop5: p3 size 134217728 extends beyond EOD, truncated [ 160.961703][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.973566][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.040634][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.200830][ T27] audit: type=1326 audit(1746473481.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.3.150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f1778e969 code=0x0 [ 163.228347][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.258043][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.614677][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.637684][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.648346][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.243928][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.261419][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.329093][ T4652] device veth0_vlan entered promiscuous mode [ 164.347942][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.376006][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.412139][ T4964] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 164.431448][ T4652] device veth1_vlan entered promiscuous mode [ 164.550196][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.586628][ T4970] loop4: detected capacity change from 0 to 512 [ 164.609856][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.651926][ T4970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 164.687307][ T4652] device veth0_macvtap entered promiscuous mode [ 164.716495][ T4652] device veth1_macvtap entered promiscuous mode [ 165.323206][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.389655][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.477057][ T4970] EXT4-fs (loop4): 1 orphan inode deleted [ 165.484807][ T4970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.501224][ T4495] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.510686][ T4970] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.555345][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.569800][ T4495] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1 [ 165.600134][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.660432][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.727563][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.743393][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.774198][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.831777][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.893221][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.924996][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.957159][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.987786][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.034582][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.076504][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.131049][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.141939][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.152786][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.164826][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.175362][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.870666][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.963632][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.974858][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 167.067343][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.286509][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.609133][ T4652] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.635735][ T4652] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.651660][ T4652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.668969][ T4652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.746307][ T5009] loop4: detected capacity change from 0 to 2048 [ 167.889454][ T5009] loop4: p1 < > p3 [ 167.915843][ T5009] loop4: p3 size 134217728 extends beyond EOD, truncated [ 167.986536][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.063407][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.255372][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.326230][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.345935][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.398537][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.516073][ T5006] kvm: emulating exchange as write [ 168.818546][ T5027] binder: 5026:5027 ioctl c0306201 2000000003c0 returned -14 [ 168.848404][ T5031] capability: warning: `syz.2.168' uses deprecated v2 capabilities in a way that may be insecure [ 168.993788][ T5031] loop2: detected capacity change from 0 to 128 [ 169.017561][ T5031] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.094392][ T5031] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.676673][ T5060] loop4: detected capacity change from 0 to 1024 [ 172.273303][ T4253] hfsplus: bad catalog entry type [ 172.486568][ T4253] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 172.506493][ T4253] hfsplus: xattr search failed [ 172.550264][ T4253] hfsplus: bad catalog entry type [ 172.598553][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 172.755136][ T4253] bridge0: port 3(syz_tun) entered disabled state [ 172.836247][ T4253] device syz_tun left promiscuous mode [ 172.845472][ T4253] bridge0: port 3(syz_tun) entered disabled state [ 172.935745][ T5091] loop5: detected capacity change from 0 to 128 [ 173.069713][ T5091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.107060][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.127750][ T5091] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.409879][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.610715][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.667775][ T4480] EXT4-fs (loop5): unmounting filesystem. [ 173.855009][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.026213][ T5125] syz.6.195 uses obsolete (PF_INET,SOCK_PACKET) [ 174.185336][ T5128] loop2: detected capacity change from 0 to 2048 [ 174.247580][ T5129] netlink: 40 bytes leftover after parsing attributes in process `syz.6.195'. [ 174.271188][ T5128] loop2: p1 < > p3 [ 174.323358][ T5128] loop2: p3 size 134217728 extends beyond EOD, truncated [ 174.808347][ T4255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.827112][ T4255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.852897][ T4255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.871931][ T4255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.881226][ T4255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.889101][ T4255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.402148][ T5143] overlayfs: failed to get inode (-116) [ 175.448514][ T5143] overlayfs: failed to get inode (-116) [ 175.521183][ T5143] overlayfs: failed to get inode (-116) [ 175.559997][ T5143] overlayfs: failed to get inode (-116) [ 176.234830][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 176.633484][ T5163] loop2: detected capacity change from 0 to 256 [ 177.103104][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 177.143333][ T5163] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 178.022122][ T1119] device hsr_slave_0 left promiscuous mode [ 178.093678][ T1119] device hsr_slave_1 left promiscuous mode [ 178.153579][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.226797][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.284491][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.292175][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.393268][ T1119] device bridge_slave_1 left promiscuous mode [ 178.399613][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.484159][ T1119] device bridge_slave_0 left promiscuous mode [ 178.490938][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.839892][ T1119] device veth1_macvtap left promiscuous mode [ 178.882431][ T1119] device veth0_macvtap left promiscuous mode [ 178.939487][ T1119] device veth1_vlan left promiscuous mode [ 178.948482][ T1119] device veth0_vlan left promiscuous mode [ 179.172868][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 180.008422][ T5207] loop5: detected capacity change from 0 to 2048 [ 180.127912][ T5207] loop5: p1 < > p3 [ 180.133969][ T5207] loop5: p3 size 134217728 extends beyond EOD, truncated [ 180.592061][ T5215] loop6: detected capacity change from 0 to 2048 [ 180.682320][ T5215] EXT4-fs: test_dummy_encryption requires encrypt feature [ 181.253330][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 181.968090][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 182.058945][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 182.155682][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.267770][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.040880][ T5228] loop5: detected capacity change from 0 to 40427 [ 183.075446][ T5228] F2FS-fs (loop5): build fault injection attr: rate: 693, type: 0x3ffff [ 183.089428][ T5228] F2FS-fs (loop5): invalid crc value [ 183.162176][ T5228] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.213139][ T5228] F2FS-fs (loop5): Start checkpoint disabled! [ 183.256539][ T5228] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 183.333122][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 183.523941][ T5232] F2FS-fs (loop5) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 183.545402][ T5232] syz.5.220: attempt to access beyond end of device [ 183.545402][ T5232] loop5: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 184.094694][ T4335] kworker/u4:7: attempt to access beyond end of device [ 184.094694][ T4335] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 184.196550][ T1119] bond0 (unregistering): Released all slaves [ 184.366351][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.374068][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.384846][ T5135] device bridge_slave_0 entered promiscuous mode [ 184.396950][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.404760][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.414137][ T5135] device bridge_slave_1 entered promiscuous mode [ 184.452420][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.467583][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.608339][ T5135] team0: Port device team_slave_0 added [ 185.699446][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.023887][ T5240] loop5: detected capacity change from 0 to 32768 [ 186.132632][ T5135] team0: Port device team_slave_1 added [ 186.429699][ T5260] loop2: detected capacity change from 0 to 256 [ 186.518301][ T5260] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 186.574252][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.618009][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.704540][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.723137][ T5260] syz.2.226: attempt to access beyond end of device [ 186.723137][ T5260] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 186.752609][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.788869][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.842677][ T5260] syz.2.226: attempt to access beyond end of device [ 186.842677][ T5260] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 186.909263][ T27] audit: type=1800 audit(1746473506.566:5): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.226" name="file1" dev="loop2" ino=1048614 res=0 errno=0 [ 186.919439][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.179487][ T5135] device hsr_slave_0 entered promiscuous mode [ 187.286117][ T5135] device hsr_slave_1 entered promiscuous mode [ 188.378646][ T5285] loop2: detected capacity change from 0 to 512 [ 188.526896][ T5285] EXT4-fs (loop2): 1 orphan inode deleted [ 188.545621][ T4493] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 188.583727][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.593849][ T4493] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:13: Failed to release dquot type 1 [ 188.606297][ T5285] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.679969][ T27] audit: type=1800 audit(1746473508.336:6): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.232" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 188.852975][ T5135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.886447][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.906924][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 188.912096][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.974787][ T5135] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.005692][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.026023][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.051376][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.058682][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.111364][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.234763][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.267384][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.317408][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.325653][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.390497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.432330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.479595][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.543846][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.555428][ T5305] loop6: detected capacity change from 0 to 4096 [ 189.625192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.670897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.702560][ T5305] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 189.752675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.862125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.913322][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.944583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.964758][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.004208][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.016885][ T5305] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 190.236667][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 191.242301][ T5338] loop6: detected capacity change from 0 to 131072 [ 191.267066][ T5338] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 191.276231][ T5338] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 191.348484][ T5338] F2FS-fs (loop6): Found nat_bits in checkpoint [ 191.398747][ T5338] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 191.406321][ T5338] F2FS-fs (loop6): Mounted with checkpoint version = 1b41e955 [ 191.582440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.606128][ T5337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 191.644776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.691766][ T5135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.807345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.843877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.930237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.960072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.056860][ T5135] device veth0_vlan entered promiscuous mode [ 195.079494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.107153][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.143858][ T5135] device veth1_vlan entered promiscuous mode [ 195.342559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.374265][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.408845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.454282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.490662][ T5135] device veth0_macvtap entered promiscuous mode [ 195.532026][ T5135] device veth1_macvtap entered promiscuous mode [ 195.644847][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.702539][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.751056][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.852794][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.895026][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.927359][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.950347][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.975959][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.995306][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.016932][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.037000][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.049903][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.068387][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.085194][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.106396][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.124885][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.144285][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.158734][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.179224][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.196954][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.209430][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.226796][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.248006][ T5390] loop6: detected capacity change from 0 to 256 [ 196.255665][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.274909][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.569079][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.599389][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.683396][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.781107][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.820539][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.912028][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.123663][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.544557][ T4301] usb 3-1: Using ep0 maxpacket: 32 [ 197.681276][ T4301] usb 3-1: config 0 has no interfaces? [ 197.763829][ T4301] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 197.802065][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.861514][ T4301] usb 3-1: Product: syz [ 197.879590][ T4301] usb 3-1: Manufacturer: syz [ 197.919904][ T4301] usb 3-1: SerialNumber: syz [ 197.952396][ T4301] usb 3-1: config 0 descriptor?? [ 198.225936][ T4300] usb 3-1: USB disconnect, device number 4 [ 200.225043][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.231529][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.705805][ T5436] loop7: detected capacity change from 0 to 40427 [ 200.731950][ T5436] F2FS-fs (loop7): build fault injection attr: rate: 693, type: 0x3ffff [ 200.743642][ T5436] F2FS-fs (loop7): invalid crc value [ 200.836917][ T5436] F2FS-fs (loop7): Found nat_bits in checkpoint [ 200.880064][ T5436] F2FS-fs (loop7): Start checkpoint disabled! [ 200.912342][ T5436] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 200.953770][ T5442] loop5: detected capacity change from 0 to 4096 [ 200.963054][ T5442] ntfs3: Bad value for 'uid' [ 201.709021][ T7] libceph: connect (1)[c::]:6789 error -101 [ 201.776793][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 201.914538][ T5455] F2FS-fs (loop7) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 201.928443][ T5455] syz.7.260: attempt to access beyond end of device [ 201.928443][ T5455] loop7: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 202.269653][ T7] libceph: connect (1)[c::]:6789 error -101 [ 202.322924][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 202.489898][ T5448] ceph: No mds server is up or the cluster is laggy [ 202.537276][ T5458] loop6: detected capacity change from 0 to 1024 [ 202.617398][ T7] libceph: connect (1)[c::]:6789 error -101 [ 202.629919][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 202.709976][ T5458] EXT4-fs: Ignoring removed orlov option [ 202.769091][ T5458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.153387][ T4788] libceph: connect (1)[c::]:6789 error -101 [ 203.161033][ T4788] libceph: mon0 (1)[c::]:6789 connect error [ 203.366913][ T5461] loop5: detected capacity change from 0 to 131072 [ 203.417480][ T5461] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 203.426137][ T5461] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 203.484284][ T5458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 203.498764][ T5461] F2FS-fs (loop5): Found nat_bits in checkpoint [ 203.589493][ T5461] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 203.596626][ T5461] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 203.835071][ T4419] kworker/u4:10: attempt to access beyond end of device [ 203.835071][ T4419] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 203.873958][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 204.444286][ T5482] loop6: detected capacity change from 0 to 256 [ 204.696534][ T5482] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 207.682207][ T5510] loop6: detected capacity change from 0 to 256 [ 207.900301][ T5514] loop7: detected capacity change from 0 to 2048 [ 207.915882][ T5506] loop6: detected capacity change from 0 to 512 [ 207.925385][ T5506] EXT4-fs: Ignoring removed bh option [ 207.964873][ T5506] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 208.024584][ T5514] loop7: p1 < > p3 [ 208.039024][ T5514] loop7: p3 size 134217728 extends beyond EOD, truncated [ 208.115909][ T5506] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.274: corrupted in-inode xattr [ 208.250323][ T5506] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.274: couldn't read orphan inode 15 (err -117) [ 208.309940][ T5506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 208.493143][ T5524] loop2: detected capacity change from 0 to 40427 [ 208.506539][ T5524] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 208.517598][ T5524] F2FS-fs (loop2): invalid crc value [ 208.576136][ T5524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.657186][ T5524] F2FS-fs (loop2): Start checkpoint disabled! [ 208.691845][ T5524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 209.021933][ T5536] F2FS-fs (loop2) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 209.035376][ T5536] syz.2.277: attempt to access beyond end of device [ 209.035376][ T5536] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 209.596744][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 209.939837][ T33] kworker/u4:2: attempt to access beyond end of device [ 209.939837][ T33] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 211.289205][ T5564] loop7: detected capacity change from 0 to 512 [ 211.461650][ T5567] device syzkaller0 entered promiscuous mode [ 211.481293][ T5564] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #16: comm syz.7.285: corrupted inode contents [ 211.514889][ T5564] EXT4-fs error (device loop7): ext4_dirty_inode:6118: inode #16: comm syz.7.285: mark_inode_dirty error [ 211.548843][ T5564] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #16: comm syz.7.285: corrupted inode contents [ 211.581711][ T5564] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.285: mark_inode_dirty error [ 211.634751][ T5564] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #16: comm syz.7.285: corrupted inode contents [ 211.661385][ T5564] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 211.679738][ T5564] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #16: comm syz.7.285: corrupted inode contents [ 211.697350][ T5564] EXT4-fs error (device loop7): ext4_truncate:4312: inode #16: comm syz.7.285: mark_inode_dirty error [ 211.721816][ T5564] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 211.784127][ T5564] EXT4-fs (loop7): 1 truncate cleaned up [ 211.814570][ T33] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 211.822993][ T5564] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 211.866124][ T33] EXT4-fs error (device loop7): ext4_release_dquot:6838: comm kworker/u4:2: Failed to release dquot type 1 [ 211.888945][ T5564] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.124666][ T5564] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 3: comm syz.7.285: lblock 0 mapped to illegal pblock 3 (length 1) [ 212.182935][ T5564] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.7.285: error -117 reading directory block [ 212.205923][ T5577] loop2: detected capacity change from 0 to 512 [ 212.258493][ T5135] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 212.267854][ T5577] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.324694][ T5135] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 212.325457][ T5577] ext4: Unknown parameter 'euid>00000000000000000000' [ 212.353631][ T5135] EXT4-fs error (device loop7): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error [ 212.379861][ T1119] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm kworker/u4:5: Invalid inode table block 34 in block_group 0 [ 212.399853][ T1119] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm kworker/u4:5: Invalid inode table block 34 in block_group 0 [ 212.419879][ T5135] EXT4-fs (loop7): unmounting filesystem. [ 212.436510][ T5135] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 212.492511][ T5135] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 212.540050][ T5135] EXT4-fs error (device loop7): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error [ 212.843264][ T27] audit: type=1326 audit(1746473532.506:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.7.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f098158e969 code=0x0 [ 214.775096][ T5607] loop6: detected capacity change from 0 to 40427 [ 214.786137][ T5607] F2FS-fs (loop6): build fault injection attr: rate: 693, type: 0x3ffff [ 214.807510][ T5607] F2FS-fs (loop6): invalid crc value [ 214.845756][ T5607] F2FS-fs (loop6): Found nat_bits in checkpoint [ 214.910227][ T5607] F2FS-fs (loop6): Start checkpoint disabled! [ 214.945510][ T5607] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 215.136215][ T5611] F2FS-fs (loop6) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 215.150126][ T5611] syz.6.292: attempt to access beyond end of device [ 215.150126][ T5611] loop6: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 215.737343][ T1119] kworker/u4:5: attempt to access beyond end of device [ 215.737343][ T1119] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 216.696018][ T5617] overlayfs: failed to clone upperpath [ 216.805532][ T5625] loop2: detected capacity change from 0 to 1024 [ 216.883083][ T5625] EXT4-fs (loop2): can't read group descriptor 0 [ 216.988622][ T5633] tipc: Started in network mode [ 217.003130][ T5633] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 217.044737][ T5633] tipc: Enabled bearer , priority 10 [ 217.302639][ T5642] binder: 5640:5642 ioctl c0306201 200000000c00 returned -14 [ 217.587435][ T5658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.966077][ T5644] loop7: detected capacity change from 0 to 32768 [ 218.173174][ T4788] tipc: Node number set to 15444650 [ 218.734461][ T5664] loop2: detected capacity change from 0 to 2048 [ 218.801402][ T5664] EXT4-fs: test_dummy_encryption requires encrypt feature [ 225.835550][ T5737] loop6: detected capacity change from 0 to 256 [ 225.851086][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'. [ 226.171421][ T5729] loop2: detected capacity change from 0 to 32768 [ 226.185560][ T5735] device vcan0 entered promiscuous mode [ 226.241556][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.324'. [ 226.574731][ T5743] netlink: 'syz.3.337': attribute type 4 has an invalid length. [ 226.954275][ T5746] netlink: 'syz.3.337': attribute type 4 has an invalid length. [ 227.021864][ T5758] loop6: detected capacity change from 0 to 256 [ 227.893166][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 227.967118][ T5758] FAT-fs (loop6): Directory bread(block 64) failed [ 228.021452][ T5758] FAT-fs (loop6): Directory bread(block 65) failed [ 228.040409][ T5758] FAT-fs (loop6): Directory bread(block 66) failed [ 228.053029][ T5758] FAT-fs (loop6): Directory bread(block 67) failed [ 228.081163][ T5758] FAT-fs (loop6): Directory bread(block 68) failed [ 228.139800][ T5758] FAT-fs (loop6): Directory bread(block 69) failed [ 228.172936][ T5758] FAT-fs (loop6): Directory bread(block 70) failed [ 228.194420][ T27] audit: type=1326 audit(1746473547.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.5.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27bc58e969 code=0x0 [ 228.220639][ T5758] FAT-fs (loop6): Directory bread(block 71) failed [ 228.238013][ T5758] FAT-fs (loop6): Directory bread(block 72) failed [ 228.251387][ T5758] FAT-fs (loop6): Directory bread(block 73) failed [ 229.585345][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 229.616336][ T5789] device vcan0 entered promiscuous mode [ 230.492018][ T5808] device syzkaller0 entered promiscuous mode [ 230.573193][ T5818] loop2: detected capacity change from 0 to 512 [ 230.634120][ T5818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.646068][ T5815] netlink: 'syz.6.344': attribute type 4 has an invalid length. [ 230.694455][ T5818] EXT4-fs warning (device loop2): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 230.770865][ T5819] netlink: 'syz.6.344': attribute type 4 has an invalid length. [ 237.800717][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 238.898326][ T5841] syz.2.348 (5841) used greatest stack depth: 20384 bytes left [ 238.961606][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.365'. [ 239.924898][ T5902] device vcan0 entered promiscuous mode [ 241.061800][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880577d3000: rx timeout, send abort [ 241.491279][ T5927] loop6: detected capacity change from 0 to 2048 [ 241.517543][ T5927] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.572297][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880577d3000: abort rx timeout. Force session deactivation [ 241.812412][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.850646][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.875507][ T5927] syz.6.376: attempt to access beyond end of device [ 241.875507][ T5927] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 241.891433][ T5940] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.903198][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.910663][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.928621][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.944464][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.955801][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 241.963913][ T4788] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 242.143344][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.151052][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.159874][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.193684][ T4788] usb 8-1: Using ep0 maxpacket: 32 [ 242.209560][ T4788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.271521][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.276115][ T4788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.279440][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.299445][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.307177][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.320267][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.328253][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.336941][ T4299] hid-generic C990:0003:007F.0002: unknown main item tag 0x0 [ 242.350059][ T4788] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 242.370851][ T4788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.373971][ T4299] hid-generic C990:0003:007F.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 242.395879][ T4788] usb 8-1: config 0 descriptor?? [ 243.011599][ T4788] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 244.208658][ T5934] loop7: detected capacity change from 0 to 2048 [ 245.182010][ T5934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.283052][ T4334] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 246.192152][ T4305] usb 8-1: USB disconnect, device number 2 [ 247.645319][ T5978] loop6: detected capacity change from 0 to 32768 [ 247.690088][ T5978] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.386 (5978) [ 247.843841][ T5978] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.894266][ T5978] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 247.933499][ T5978] BTRFS info (device loop6): using free space tree [ 248.029045][ T6027] Bluetooth: MGMT ver 1.22 [ 248.062944][ T27] audit: type=1326 audit(1746473567.716:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65e6d8e969 code=0x0 [ 248.790397][ T4255] Bluetooth: hci4: command 0x0406 tx timeout [ 248.914123][ T5978] BTRFS error (device loop6): open_ctree failed: -12 [ 249.395848][ T6062] loop6: detected capacity change from 0 to 64 [ 255.114229][ T6103] loop7: detected capacity change from 0 to 2048 [ 255.221861][ T6103] loop7: p1 < > p3 [ 255.280054][ T6103] loop7: p3 size 134217728 extends beyond EOD, truncated [ 255.316225][ T6116] tipc: Started in network mode [ 255.323638][ T6116] tipc: Node identity f2e4d9030b0b, cluster identity 4711 [ 255.330933][ T6116] tipc: Enabled bearer , priority 0 [ 255.400146][ T6123] device syzkaller0 entered promiscuous mode [ 255.587250][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.420'. [ 256.203979][ T6123] tipc: Resetting bearer [ 256.251049][ T6114] tipc: Resetting bearer [ 256.349389][ T6114] tipc: Disabling bearer [ 256.396912][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.435881][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.421'. [ 256.574667][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 258.327709][ T6147] netlink: 104 bytes leftover after parsing attributes in process `syz.7.425'. [ 261.663379][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.669953][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.885366][ T6181] binder_alloc: 6179: binder_alloc_buf failed to map page at 200000ffe000 in userspace [ 262.247225][ T6197] loop6: detected capacity change from 0 to 512 [ 262.317839][ T6197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 262.353857][ T6197] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.686685][ T6197] fuse: Bad value for 'fd' [ 263.184955][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 263.192166][ T6206] : renamed from vlan0 [ 264.271427][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 266.665396][ T6258] loop2: detected capacity change from 0 to 128 [ 266.752577][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 266.824738][ T6258] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.302857][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 268.226776][ T22] usb 7-1: config 0 has no interfaces? [ 268.234431][ T6274] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.456: Freeing blocks not in datazone - block = 37, count = 1 [ 268.254423][ T22] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 268.274084][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.282521][ T22] usb 7-1: Product: syz [ 268.301030][ T6274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 268.321057][ T22] usb 7-1: Manufacturer: syz [ 268.326447][ T22] usb 7-1: SerialNumber: syz [ 268.370731][ T22] usb 7-1: config 0 descriptor?? [ 268.389917][ T6274] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.456: mark_inode_dirty error [ 268.429861][ T6274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 268.477433][ T6274] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.456: mark_inode_dirty error [ 268.518364][ T6274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 268.629028][ T6274] EXT4-fs error (device loop2): ext4_punch_hole:4152: inode #12: comm syz.2.456: mark_inode_dirty error [ 268.696538][ T6234] loop7: detected capacity change from 0 to 40427 [ 268.721874][ T6255] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 268.774227][ T6234] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 268.783087][ T6255] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #12: comm syz.2.456: mark_inode_dirty error [ 268.792763][ T6234] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 268.855737][ T6255] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.456: Invalid block bitmap block 0 in block_group 0 [ 268.935952][ T6234] F2FS-fs (loop7): invalid crc value [ 268.960692][ T6234] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 270.281433][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 270.869915][ T4779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.191402][ T4779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.462072][ T4779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.542127][ T4779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.105762][ T4779] tipc: Left network mode [ 273.871102][ T7] usb 7-1: USB disconnect, device number 2 [ 274.035309][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.061088][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.070963][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.079335][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.087720][ T4255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.095518][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.132941][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 276.271948][ T6362] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 276.347013][ T6362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.397743][ T6370] bond1: (slave erspan0): making interface the new active one [ 276.462118][ T6370] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 276.485709][ T6373] overlayfs: failed to clone upperpath [ 276.632625][ T6365] device veth3 entered promiscuous mode [ 276.691399][ T6365] bond1: (slave veth3): Enslaving as an active interface with a down link [ 276.831338][ T6370] syz.3.478 (6370) used greatest stack depth: 19552 bytes left [ 277.776251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 279.047699][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 279.178271][ T27] audit: type=1326 audit(1746473598.836:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416b78e969 code=0x7fc00000 [ 280.882416][ T27] audit: type=1326 audit(1746473600.446:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f416b78e969 code=0x7fc00000 [ 281.059054][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 281.093034][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 281.149674][ T6421] overlayfs: failed to clone upperpath [ 281.903375][ T6437] loop7: detected capacity change from 0 to 512 [ 282.502979][ T6437] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 282.512937][ T6437] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.253615][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 285.101131][ T5135] EXT4-fs (loop7): unmounting filesystem. [ 285.403123][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 285.716401][ T27] audit: type=1804 audit(1746473605.376:12): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.502" name="/newroot/59/file1" dev="fuse" ino=1 res=1 errno=0 [ 286.534643][ T27] audit: type=1800 audit(1746473605.406:13): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.502" name="/" dev="fuse" ino=1 res=0 errno=0 [ 286.653263][ T27] audit: type=1804 audit(1746473606.096:14): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.502" name="/newroot/59/file1" dev="fuse" ino=1 res=1 errno=0 [ 286.740283][ T27] audit: type=1800 audit(1746473606.096:15): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.502" name="/" dev="fuse" ino=1 res=0 errno=0 [ 287.786434][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.831067][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.873400][ T6345] device bridge_slave_0 entered promiscuous mode [ 287.960983][ T4779] device hsr_slave_0 left promiscuous mode [ 287.990994][ T4779] device hsr_slave_1 left promiscuous mode [ 288.045724][ T4779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.099271][ T4779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.153868][ T4779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.196122][ T4779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.239711][ T4779] device bridge_slave_1 left promiscuous mode [ 288.277700][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.339968][ T4779] device bridge_slave_0 left promiscuous mode [ 288.390864][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.823297][ T4779] device veth1_macvtap left promiscuous mode [ 288.829421][ T4779] device veth0_macvtap left promiscuous mode [ 288.836461][ T4779] device veth1_vlan left promiscuous mode [ 288.842422][ T4779] device veth0_vlan left promiscuous mode [ 292.328991][ T4779] team0 (unregistering): Port device team_slave_1 removed [ 292.397964][ T4779] team0 (unregistering): Port device team_slave_0 removed [ 292.483543][ T4779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.589165][ T4779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.962986][ T4779] bond0 (unregistering): Released all slaves [ 294.071845][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.079408][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.087989][ T6345] device bridge_slave_1 entered promiscuous mode [ 294.110624][ T6526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.118609][ T6526] IPv6: NLM_F_CREATE should be set when creating new route [ 294.224413][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.278915][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.361376][ T6345] team0: Port device team_slave_0 added [ 294.398851][ T6345] team0: Port device team_slave_1 added [ 294.452622][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.459894][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.487479][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.500550][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.508691][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.535232][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.648497][ T6345] device hsr_slave_0 entered promiscuous mode [ 294.656834][ T6345] device hsr_slave_1 entered promiscuous mode [ 294.680816][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.692600][ T6345] Cannot create hsr debugfs directory [ 294.957030][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.982102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 295.007668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.016593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.029173][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.058258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.067403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.076867][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.084030][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.094189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.113959][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.123626][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.132187][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.139349][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.148247][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.167715][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.176875][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.189529][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.198411][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.213686][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.223604][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.248561][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.264015][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.283778][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.299440][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.310123][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.546016][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.555282][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.564155][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.900809][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.910103][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.937290][ T6345] device veth0_vlan entered promiscuous mode [ 295.944260][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.953895][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.964060][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.972071][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.993424][ T6345] device veth1_vlan entered promiscuous mode [ 296.018764][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.027591][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.037345][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.046451][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.057838][ T6345] device veth0_macvtap entered promiscuous mode [ 296.070939][ T6345] device veth1_macvtap entered promiscuous mode [ 296.089610][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.110302][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.121484][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.138684][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.148977][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.165635][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.178070][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.192163][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.210877][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.228517][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.238453][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.253738][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.268861][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.283340][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.297376][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.308833][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.330474][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.341570][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.357375][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.368685][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.385903][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.399689][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.414876][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.427042][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.559785][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.583081][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.593975][ T4779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.602330][ T4779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.606429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.635798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.777487][ T6606] netlink: 'syz.7.533': attribute type 12 has an invalid length. [ 296.802858][ T6606] netlink: 'syz.7.533': attribute type 29 has an invalid length. [ 296.832391][ T6606] netlink: 148 bytes leftover after parsing attributes in process `syz.7.533'. [ 296.856658][ T6606] netlink: 'syz.7.533': attribute type 2 has an invalid length. [ 296.884615][ T6613] tipc: Enabling of bearer rejected, failed to enable media [ 297.112815][ T952] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 297.302925][ T952] usb 7-1: Using ep0 maxpacket: 32 [ 297.320910][ T952] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 297.347518][ T952] usb 7-1: config 0 has no interface number 0 [ 297.369771][ T952] usb 7-1: config 0 interface 89 has no altsetting 0 [ 297.401180][ T952] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 297.413228][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.422173][ T952] usb 7-1: Product: syz [ 297.430064][ T952] usb 7-1: Manufacturer: syz [ 297.435558][ T952] usb 7-1: SerialNumber: syz [ 297.467438][ T952] usb 7-1: config 0 descriptor?? [ 297.752844][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.784685][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.838442][ T952] usb 7-1: USB disconnect, device number 3 [ 299.318070][ T6666] syz.7.523[6666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.318198][ T6666] syz.7.523[6666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.958908][ T6714] loop6: detected capacity change from 0 to 512 [ 304.026052][ T6714] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.118459][ T6714] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 304.169483][ T6714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 304.220812][ T6714] System zones: 1-12 [ 305.080909][ T6714] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.537: corrupted in-inode xattr [ 305.163534][ T6714] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.537: couldn't read orphan inode 15 (err -117) [ 305.247052][ T6714] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 305.265335][ T6731] loop7: detected capacity change from 0 to 1024 [ 305.300759][ T6731] EXT4-fs: Ignoring removed orlov option [ 305.331439][ T6731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.396443][ T6731] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 305.752299][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 306.499671][ T5135] EXT4-fs (loop7): unmounting filesystem. [ 307.967603][ T4300] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.468682][ T4300] usb 7-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 308.499494][ T4300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.522460][ T4300] usb 7-1: config 0 descriptor?? [ 308.555540][ T4300] gspca_main: tv8532-2.14.0 probing 0545:808b [ 310.522560][ T4300] usb 7-1: USB disconnect, device number 4 [ 311.539649][ T6787] loop7: detected capacity change from 0 to 1024 [ 311.603718][ T5957] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.161664][ T6816] loop6: detected capacity change from 0 to 128 [ 313.903525][ T6822] loop2: detected capacity change from 0 to 1024 [ 314.481731][ T6822] hfsplus: unable to parse mount options [ 314.591351][ T6812] tc_dump_action: action bad kind [ 314.731334][ T6838] loop7: detected capacity change from 0 to 256 [ 314.743040][ T6838] exfat: Deprecated parameter 'utf8' [ 314.748783][ T6838] exfat: Deprecated parameter 'namecase' [ 314.754800][ T6838] exfat: Deprecated parameter 'utf8' [ 314.918582][ T6838] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 314.979306][ T6838] syz.7.562: attempt to access beyond end of device [ 314.979306][ T6838] loop7: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 314.994101][ T6838] syz.7.562: attempt to access beyond end of device [ 314.994101][ T6838] loop7: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 315.022323][ T27] audit: type=1800 audit(1746473634.666:16): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.562" name="file1" dev="loop7" ino=1048629 res=0 errno=0 [ 315.789768][ T6851] loop2: detected capacity change from 0 to 256 [ 315.848341][ T6851] exfat: Deprecated parameter 'utf8' [ 315.867662][ T6851] exfat: Deprecated parameter 'utf8' [ 315.926513][ T6851] exfat: Deprecated parameter 'utf8' [ 315.954211][ T6853] loop6: detected capacity change from 0 to 2048 [ 315.967164][ T6851] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 316.300191][ T6853] loop6: p1 < > p3 [ 316.712099][ T6853] loop6: p3 size 134217728 extends beyond EOD, truncated [ 317.111769][ T6865] loop2: detected capacity change from 0 to 128 [ 317.238816][ T6865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.372831][ T6865] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.423360][ T6865] syz.2.570 (pid 6865) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 317.914651][ T6865] fscrypt (loop2, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 318.046668][ T6865] fscrypt (loop2, inode 12): Error allocating 'cts(cbc(aes))' transform: -4 [ 318.302276][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 318.698779][ T6910] loop6: detected capacity change from 0 to 16 [ 318.715590][ T6910] erofs: (device loop6): mounted with root inode @ nid 36. [ 318.729211][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.738679][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.760648][ T6910] syz.6.573: attempt to access beyond end of device [ 318.760648][ T6910] loop6: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 320.185673][ T6934] loop6: detected capacity change from 0 to 16 [ 320.247862][ T6934] erofs: (device loop6): mounted with root inode @ nid 36. [ 320.383099][ T6941] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 320.392561][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 320.403319][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 320.412898][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 320.423557][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 320.434261][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 320.444518][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 320.454425][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 320.464384][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 320.474472][ T6941] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 320.485144][ T6941] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 320.495406][ T6941] syz.6.579: attempt to access beyond end of device [ 320.495406][ T6941] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 320.509861][ T6941] syz.6.579: attempt to access beyond end of device [ 320.509861][ T6941] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 320.524446][ T6941] syz.6.579: attempt to access beyond end of device [ 320.524446][ T6941] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 320.539658][ T6941] syz.6.579: attempt to access beyond end of device [ 320.539658][ T6941] loop6: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 320.556111][ T6941] syz.6.579: attempt to access beyond end of device [ 320.556111][ T6941] loop6: rw=524288, sector=13478624040, nr_sectors = 64 limit=16 [ 320.571668][ T6941] syz.6.579: attempt to access beyond end of device [ 320.571668][ T6941] loop6: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 322.253264][ T6970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.097086][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.103556][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.835004][ T7005] hub 9-0:1.0: USB hub found [ 323.844171][ T7005] hub 9-0:1.0: 1 port detected [ 324.573369][ T7006] loop6: detected capacity change from 0 to 512 [ 324.643589][ T7006] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated! [ 324.704118][ T7006] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 324.750650][ T7006] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.597: Failed to acquire dquot type 0 [ 324.883547][ T7006] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.597: bg 0: block 64: padding at end of block bitmap is not set [ 324.975755][ T7006] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 325.057195][ T7006] EXT4-fs (loop6): 1 truncate cleaned up [ 325.074938][ T7006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 325.235132][ T7006] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.007085][ T7041] device wireguard0 entered promiscuous mode [ 326.116318][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 326.298744][ T7050] dns_resolver: Unsupported server list version (0) [ 326.520266][ T7059] loop7: detected capacity change from 0 to 128 [ 326.820566][ T7069] loop2: detected capacity change from 0 to 1024 [ 326.858143][ T7069] EXT4-fs: Ignoring removed orlov option [ 326.888710][ T7069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.031845][ T7069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 327.963338][ T27] audit: type=1800 audit(1746473647.476:17): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.612" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 327.983561][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.140913][ T7094] loop7: detected capacity change from 0 to 256 [ 328.294912][ T7094] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 328.336971][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 328.407147][ T7098] Zero length message leads to an empty skb [ 330.051368][ T27] audit: type=1800 audit(1746473648.806:18): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.618" name="file1" dev="loop7" ino=1048631 res=0 errno=0 [ 330.305943][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 330.574461][ T7116] loop2: detected capacity change from 0 to 512 [ 332.210442][ T7116] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 332.408669][ T7116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 332.524102][ T7116] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.625: corrupted in-inode xattr [ 333.703427][ T7116] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.625: couldn't read orphan inode 15 (err -117) [ 333.863896][ T7116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 334.823316][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 334.852210][ T7157] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.869324][ T7157] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.878295][ T7157] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.887165][ T7157] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.926544][ T7160] loop7: detected capacity change from 0 to 2048 [ 335.002199][ T7157] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 335.034213][ T7160] loop7: p1 < > p3 [ 335.041735][ T7160] loop7: p3 size 134217728 extends beyond EOD, truncated [ 335.258633][ T7158] loop7: detected capacity change from 0 to 512 [ 335.288238][ T7158] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.317262][ T7158] EXT4-fs (loop7): Test dummy encryption mode enabled [ 335.335897][ T7158] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 335.626215][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 336.810246][ T7158] EXT4-fs (loop7): 1 truncate cleaned up [ 336.816308][ T7158] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 337.393050][ T4299] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 337.435978][ T5135] EXT4-fs (loop7): unmounting filesystem. [ 337.615752][ T4299] usb 7-1: Using ep0 maxpacket: 8 [ 337.705374][ T4299] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.717444][ T4299] usb 7-1: config 0 has no interfaces? [ 337.723064][ T4299] usb 7-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice=40.00 [ 337.732484][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.750764][ T4299] usb 7-1: config 0 descriptor?? [ 338.918093][ T4305] usb 7-1: USB disconnect, device number 5 [ 342.033295][ T7260] loop7: detected capacity change from 0 to 32768 [ 342.650080][ T7260] XFS (loop7): Mounting V5 Filesystem [ 342.924890][ T7260] XFS (loop7): Ending clean mount [ 342.946437][ T7260] XFS (loop7): Quotacheck needed: Please wait. [ 343.103163][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 343.149430][ T7260] XFS (loop7): Quotacheck: Done. [ 344.415655][ T7303] MPTCP: addr_signal error, rm_addr=2 [ 344.450218][ T5135] XFS (loop7): Unmounting Filesystem [ 347.880781][ T7351] loop2: detected capacity change from 0 to 2048 [ 347.931151][ T7351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.725460][ T7409] loop7: detected capacity change from 0 to 8192 [ 351.712113][ T7409] binder: 7404:7409 unknown command 1074553619 [ 351.751419][ T7409] binder: 7404:7409 ioctl c0306201 200000000640 returned -22 [ 352.741114][ T7440] loop6: detected capacity change from 0 to 256 [ 353.550370][ T7445] loop6: detected capacity change from 0 to 16 [ 353.625070][ T7445] erofs: (device loop6): mounted with root inode @ nid 36. [ 353.698626][ T7440] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 353.844531][ T7440] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 353.864058][ T27] audit: type=1326 audit(1746473673.526:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1778e969 code=0x7ffc0000 [ 354.891383][ T27] audit: type=1326 audit(1746473673.526:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1778e969 code=0x7ffc0000 [ 354.913583][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.928184][ T27] audit: type=1326 audit(1746473673.526:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e969 code=0x7ffc0000 [ 354.950501][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.969822][ T27] audit: type=1326 audit(1746473673.526:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1778e969 code=0x7ffc0000 [ 355.000590][ T27] audit: type=1326 audit(1746473673.526:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1778e969 code=0x7ffc0000 [ 355.057482][ T27] audit: type=1326 audit(1746473673.526:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e56b code=0x7ffc0000 [ 355.079776][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.098997][ T27] audit: type=1326 audit(1746473673.526:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e56b code=0x7ffc0000 [ 355.135855][ T27] audit: type=1326 audit(1746473673.526:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e56b code=0x7ffc0000 [ 355.179531][ T27] audit: type=1326 audit(1746473673.526:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e56b code=0x7ffc0000 [ 355.240131][ T27] audit: type=1326 audit(1746473673.526:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f1778e56b code=0x7ffc0000 [ 355.262594][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.522346][ T7474] netlink: 224 bytes leftover after parsing attributes in process `syz.3.707'. [ 357.871270][ T7495] loop6: detected capacity change from 0 to 512 [ 357.994059][ T7495] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 358.011107][ T7495] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.796364][ T7527] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 361.846932][ T7550] loop2: detected capacity change from 0 to 16 [ 363.958038][ T7550] erofs: (device loop2): mounted with root inode @ nid 36. [ 363.981177][ T7549] syz.2.726: attempt to access beyond end of device [ 363.981177][ T7549] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 364.270763][ T7557] netlink: 'syz.3.728': attribute type 8 has an invalid length. [ 365.891648][ T7578] overlayfs: failed to clone upperpath [ 368.381017][ T7607] netlink: 104 bytes leftover after parsing attributes in process `syz.3.740'. [ 369.173828][ T7602] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 369.200089][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.255308][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 369.273076][ T7602] CIFS mount error: No usable UNC path provided in device string! [ 369.273076][ T7602] [ 369.285702][ T7602] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.393399][ T7613] loop2: detected capacity change from 0 to 128 [ 369.636263][ T7621] syz.2.741: attempt to access beyond end of device [ 369.636263][ T7621] loop2: rw=2049, sector=145, nr_sectors = 520 limit=128 [ 371.006772][ T6442] kworker/u4:18: attempt to access beyond end of device [ 371.006772][ T6442] loop2: rw=1, sector=145, nr_sectors = 520 limit=128 [ 372.097317][ T7649] input: syz0 as /devices/virtual/input/input5 [ 379.297197][ T7698] loop6: detected capacity change from 0 to 8 [ 380.007519][ T7698] SQUASHFS error: xz decompression failed, data probably corrupt [ 380.016644][ T7698] SQUASHFS error: Failed to read block 0xa8: -5 [ 380.032894][ T7698] SQUASHFS error: xz decompression failed, data probably corrupt [ 380.040721][ T7698] SQUASHFS error: Failed to read block 0xa8: -5 [ 380.054842][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 380.054862][ T27] audit: type=1800 audit(1746473699.706:52): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.759" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 380.355042][ T7705] loop2: detected capacity change from 0 to 512 [ 380.494521][ T7705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 380.536679][ T7705] ext4 filesystem being mounted at /50/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.024662][ T7720] loop6: detected capacity change from 0 to 1024 [ 381.066424][ T7720] EXT4-fs: Ignoring removed nobh option [ 381.082987][ T7720] EXT4-fs: Ignoring removed bh option [ 381.208768][ T7720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.569017][ T7720] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.720097][ T7730] netlink: 'syz.3.767': attribute type 6 has an invalid length. [ 381.959729][ T27] audit: type=1800 audit(1746473701.616:53): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.765" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 381.979870][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.985547][ T27] audit: type=1800 audit(1746473701.696:54): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.765" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 383.129391][ T7735] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.765: Allocating blocks 497-513 which overlap fs metadata [ 383.273172][ T7735] EXT4-fs (loop6): pa ffff888068be0000: logic 256, phys. 385, len 8 [ 383.282051][ T7735] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 383.343634][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 383.639282][ T7720] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 384.470406][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 384.536276][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.542624][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.632929][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 385.855031][ T7775] overlayfs: failed to clone lowerpath [ 385.874600][ T7775] overlayfs: failed to clone upperpath [ 385.882320][ T22] usb 3-1: config 0 has no interfaces? [ 385.906153][ T22] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 385.993615][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.102639][ T22] usb 3-1: Product: syz [ 387.259100][ T22] usb 3-1: Manufacturer: syz [ 387.263863][ T22] usb 3-1: SerialNumber: syz [ 387.309830][ T22] usb 3-1: config 0 descriptor?? [ 387.328535][ T4255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.339771][ T4255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.351733][ T4255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.370244][ T4255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.380059][ T4255] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 387.388391][ T4255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.157561][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 389.469533][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.493611][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 389.794512][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.849247][ T7788] device bridge_slave_0 entered promiscuous mode [ 389.946154][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.973950][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.033633][ T7788] device bridge_slave_1 entered promiscuous mode [ 390.423977][ T7788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.606029][ T7788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.809320][ T22] usb 3-1: can't set config #0, error -71 [ 390.824476][ T22] usb 3-1: USB disconnect, device number 5 [ 391.245568][ T7788] team0: Port device team_slave_0 added [ 391.573731][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 391.594378][ T7788] team0: Port device team_slave_1 added [ 391.865138][ T4419] tipc: Disabling bearer [ 391.871157][ T4419] tipc: Left network mode [ 391.878792][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.903988][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.930189][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.980126][ T7839] loop2: detected capacity change from 0 to 64 [ 392.007005][ T7788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.032427][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.047874][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.198349][ T7788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.513232][ T4270] Bluetooth: hci5: command 0x040f tx timeout [ 394.751029][ T7788] device hsr_slave_0 entered promiscuous mode [ 394.766100][ T7788] device hsr_slave_1 entered promiscuous mode [ 394.793676][ T7788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.827732][ T7788] Cannot create hsr debugfs directory [ 394.940038][ T7858] loop6: detected capacity change from 0 to 1024 [ 395.022419][ T7858] ext4: Bad value for 'min_batch_time' [ 396.603336][ T4270] Bluetooth: hci5: command 0x0419 tx timeout [ 397.223266][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 397.503191][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.537400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.589592][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.626373][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.781413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.851512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.874872][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.882530][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.912569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.948190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.978004][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.985237][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.034206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.057802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.242139][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.257130][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.298770][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.318635][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.347694][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.385446][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.494011][ T7788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.544618][ T7788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.685667][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.705213][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.741973][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.783066][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.803730][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.833560][ T7910] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 399.930204][ T7912] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 399.976692][ T7914] device veth5 entered promiscuous mode [ 400.010088][ T7914] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 402.583392][ T4419] device hsr_slave_0 left promiscuous mode [ 402.607434][ T4419] device hsr_slave_1 left promiscuous mode [ 402.632331][ T7949] loop6: detected capacity change from 0 to 256 [ 402.643546][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.667810][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.756418][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.846713][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.997164][ T4419] device bridge_slave_1 left promiscuous mode [ 403.003464][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.360996][ T4419] device bridge_slave_0 left promiscuous mode [ 403.822908][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.602888][ T4419] device veth1_macvtap left promiscuous mode [ 404.610214][ T4419] device veth0_macvtap left promiscuous mode [ 404.623698][ T4419] device veth1_vlan left promiscuous mode [ 404.642494][ T4419] device veth0_vlan left promiscuous mode [ 406.817892][ T7982] loop2: detected capacity change from 0 to 2048 [ 407.206842][ T7982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.669482][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 413.896465][ T4241] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 413.932819][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 413.940830][ T27] audit: type=1804 audit(1746473733.579:55): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.833" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 413.979356][ T27] audit: type=1800 audit(1746473733.579:56): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.833" name="/" dev="fuse" ino=1 res=0 errno=0 [ 414.001189][ T27] audit: type=1804 audit(1746473733.599:57): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.833" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 414.030288][ T27] audit: type=1800 audit(1746473733.599:58): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.833" name="/" dev="fuse" ino=1 res=0 errno=0 [ 414.092164][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 414.100148][ T4241] usb 7-1: Using ep0 maxpacket: 16 [ 414.107513][ T4241] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 414.364615][ T4241] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.378370][ T4241] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.388536][ T4241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.399392][ T4241] usb 7-1: Product: syz [ 414.406468][ T4241] usb 7-1: Manufacturer: syz [ 414.848381][ T4241] usb 7-1: SerialNumber: syz [ 414.848724][ T8051] ALSA: mixer_oss: invalid OSS volume 'u' [ 414.894637][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.125828][ T4241] usb 7-1: 0:2 : does not exist [ 415.158614][ T4241] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 415.336621][ T4241] usb 7-1: USB disconnect, device number 6 [ 415.365127][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.940667][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.303895][ T8083] loop6: detected capacity change from 0 to 256 [ 419.365807][ T8083] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 420.488293][ T27] audit: type=1800 audit(1746473739.708:59): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.845" name="file1" dev="loop6" ino=1048643 res=0 errno=0 [ 421.228780][ T4419] bond0 (unregistering): Released all slaves [ 421.612746][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.847'. [ 421.714573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.738825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.856035][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.682253][ T8114] netlink: 'syz.6.850': attribute type 1 has an invalid length. [ 422.756283][ T8114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.841493][ T8118] device veth3 entered promiscuous mode [ 422.852252][ T8118] bond1: (slave veth3): Enslaving as an active interface with a down link [ 423.063375][ T8122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 423.074880][ T8122] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 423.090777][ T8123] ip6t_srh: unknown srh invflags 7863 [ 423.953146][ T8114] bond1: (slave erspan0): making interface the new active one [ 423.994822][ T8114] device erspan0 entered promiscuous mode [ 424.025079][ T8114] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 424.185483][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 424.280059][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.854'. [ 426.321066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.333639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.677308][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.725508][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.430818][ T7788] device veth0_vlan entered promiscuous mode [ 427.450075][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.481912][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.506342][ T7788] device veth1_vlan entered promiscuous mode [ 427.521871][ T8163] loop6: detected capacity change from 0 to 512 [ 428.039722][ T8163] EXT4-fs: Ignoring removed bh option [ 428.045408][ T8163] EXT4-fs: Ignoring removed i_version option [ 428.099210][ T8163] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 428.148476][ T8163] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 428.165985][ T8163] EXT4-fs (loop6): group descriptors corrupted! [ 428.166126][ T7788] device veth0_macvtap entered promiscuous mode [ 428.243145][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.264477][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.287389][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.860'. [ 428.395683][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.409882][ T8174] binder: 8166:8174 unknown command 1074553619 [ 428.416753][ T8174] binder: 8166:8174 ioctl c0306201 200000000640 returned -22 [ 428.437729][ T7788] device veth1_macvtap entered promiscuous mode [ 428.459155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.496976][ T8169] loop2: detected capacity change from 0 to 8192 [ 428.523035][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.586364][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.648220][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.683763][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.748484][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.759089][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.768973][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.779495][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.791169][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.800483][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.810053][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.836645][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.591497][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.810425][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.831557][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.584913][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.626941][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.679526][ T8200] loop6: detected capacity change from 0 to 1024 [ 430.723208][ T8200] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 430.734056][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.747971][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.758635][ T8200] EXT4-fs (loop6): invalid journal inode [ 430.778468][ T8200] EXT4-fs (loop6): can't get journal size [ 430.807562][ T8200] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.868: blocks 48-48 from inode overlap system zone [ 430.830438][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.851536][ T8200] EXT4-fs (loop6): failed to initialize system zone (-117) [ 430.899601][ T8200] EXT4-fs (loop6): mount failed [ 430.947185][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.971578][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.396347][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.488527][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.520086][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.530462][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.628552][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.675176][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.798943][ T8216] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 431.880434][ T8216] device hsr_slave_0 left promiscuous mode [ 431.946302][ T8216] device hsr_slave_1 left promiscuous mode [ 437.496297][ T8250] loop6: detected capacity change from 0 to 128 [ 437.541096][ T8250] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 438.298041][ T8258] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 438.739673][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 440.054834][ T8280] loop6: detected capacity change from 0 to 512 [ 440.106065][ T8280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 440.136584][ T8280] EXT4-fs warning (device loop6): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 441.534390][ T8292] netlink: 'syz.8.888': attribute type 12 has an invalid length. [ 441.810336][ T8292] netlink: 'syz.8.888': attribute type 29 has an invalid length. [ 441.830144][ T8292] netlink: 148 bytes leftover after parsing attributes in process `syz.8.888'. [ 441.839677][ T8292] netlink: 'syz.8.888': attribute type 2 has an invalid length. [ 443.793011][ T8312] loop8: detected capacity change from 0 to 2048 [ 443.829590][ T8314] loop6: detected capacity change from 0 to 512 [ 443.920943][ T8312] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 445.040362][ T8312] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 445.077359][ T8312] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 445.106855][ T8312] EXT4-fs (loop8): This should not happen!! Data will be lost [ 445.106855][ T8312] [ 445.186744][ T8314] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 445.214143][ T8314] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.227167][ T8312] EXT4-fs (loop8): Total free blocks count 0 [ 445.255367][ T4779] device erspan0 left promiscuous mode [ 445.280129][ T8312] EXT4-fs (loop8): Free/Dirty block details [ 445.300252][ T8312] EXT4-fs (loop8): free_blocks=2415919104 [ 445.361660][ T8312] EXT4-fs (loop8): dirty_blocks=48 [ 445.365043][ T8335] loop2: detected capacity change from 0 to 1024 [ 445.405209][ T8312] EXT4-fs (loop8): Block reservation details [ 445.405739][ T8335] EXT4-fs: Ignoring removed orlov option [ 445.474144][ T8312] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 445.489577][ T8335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.541497][ T8335] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 445.986361][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.994884][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.015720][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 447.624871][ T7788] EXT4-fs (loop8): unmounting filesystem. [ 447.651209][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 452.977544][ T8395] overlayfs: failed to clone upperpath [ 453.285402][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 453.327339][ T8407] device vlan0 entered promiscuous mode [ 458.473761][ T8461] loop6: detected capacity change from 0 to 16 [ 458.532343][ T8461] erofs: (device loop6): mounted with root inode @ nid 36. [ 458.559046][ T4270] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 458.576185][ T8461] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 458.623857][ T27] audit: type=1800 audit(1746473778.244:60): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.925" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 459.785564][ T8484] loop8: detected capacity change from 0 to 1024 [ 459.809416][ T8484] hfsplus: unable to parse mount options [ 459.850176][ T8484] tc_dump_action: action bad kind [ 460.256773][ T8503] loop2: detected capacity change from 0 to 512 [ 460.571128][ T8503] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 460.602745][ T8503] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 460.678246][ T8503] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 460.740528][ T8503] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 460.751627][ T8503] EXT4-fs (loop2): 1 truncate cleaned up [ 460.757463][ T8503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 460.863131][ T6345] EXT4-fs (loop2): unmounting filesystem. [ 462.378273][ T8531] mmap: syz.8.937 (8531) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 463.589706][ T8548] loop6: detected capacity change from 0 to 512 [ 463.677145][ T8548] EXT4-fs: Ignoring removed nobh option [ 463.789969][ T8548] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.943: invalid indirect mapped block 256 (level 2) [ 463.938524][ T8548] EXT4-fs (loop6): 2 truncates cleaned up [ 463.962363][ T8548] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 465.416568][ T8573] tc_dump_action: action bad kind [ 465.502640][ T8510] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 472.238697][ T8642] input: syz0 as /devices/virtual/input/input6 [ 472.719357][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 472.766916][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.971'. [ 476.596087][ T8700] loop6: detected capacity change from 0 to 1024 [ 476.677599][ T8700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 476.772335][ T8700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 476.791362][ T8700] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.916380][ T8708] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 477.251650][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 477.398578][ T8722] loop8: detected capacity change from 0 to 512 [ 478.896854][ T27] audit: type=1326 audit(1746473798.541:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919498e969 code=0x7ffc0000 [ 478.919001][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.071254][ T27] audit: type=1326 audit(1746473798.591:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919498e969 code=0x7ffc0000 [ 479.159594][ T27] audit: type=1326 audit(1746473798.591:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e969 code=0x7ffc0000 [ 479.171888][ T8732] netlink: 'syz.6.985': attribute type 6 has an invalid length. [ 479.244625][ T27] audit: type=1326 audit(1746473798.591:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919498e969 code=0x7ffc0000 [ 479.365517][ T27] audit: type=1326 audit(1746473798.591:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919498e969 code=0x7ffc0000 [ 480.514023][ T27] audit: type=1326 audit(1746473798.591:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e56b code=0x7ffc0000 [ 480.693835][ T27] audit: type=1326 audit(1746473798.591:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e56b code=0x7ffc0000 [ 480.749375][ T27] audit: type=1326 audit(1746473798.591:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e56b code=0x7ffc0000 [ 480.835221][ T27] audit: type=1326 audit(1746473798.591:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e56b code=0x7ffc0000 [ 481.865786][ T27] audit: type=1326 audit(1746473798.591:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919498e56b code=0x7ffc0000 [ 482.842756][ T8775] netlink: 104 bytes leftover after parsing attributes in process `syz.8.996'. [ 484.495520][ T8795] overlayfs: failed to clone lowerpath [ 484.522022][ T8795] overlayfs: failed to clone upperpath [ 488.159971][ T8821] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 488.847498][ T8835] Cannot find add_set index 0 as target [ 489.217819][ T8856] device dummy0 entered promiscuous mode [ 489.224228][ T8856] device vlan2 entered promiscuous mode [ 489.256398][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 489.555694][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 489.568765][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.515502][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.533958][ T7] usb 3-1: Product: syz [ 490.544150][ T7] usb 3-1: Manufacturer: syz [ 490.554324][ T7] usb 3-1: SerialNumber: syz [ 491.338054][ T7] usb 3-1: config 0 descriptor?? [ 491.566155][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 491.703905][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1017'. [ 492.998983][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 493.015860][ T7] usb 3-1: USB disconnect, device number 6 [ 493.586731][ T8897] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 493.947618][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 494.370588][ T93] block nbd2: Attempted send on invalid socket [ 494.378682][ T93] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 494.396599][ T93] block nbd2: Attempted send on invalid socket [ 494.403985][ T93] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 494.416482][ T8914] Mount JFS Failure: -5 [ 495.388057][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1023'. [ 497.270640][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 498.486231][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1032'. [ 498.495324][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1032'. [ 498.542446][ T8949] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.173304][ T8997] loop6: detected capacity change from 0 to 1024 [ 507.430047][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.436514][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.556448][ T9035] loop6: detected capacity change from 0 to 512 [ 507.655336][ T9035] EXT4-fs (loop6): 1 orphan inode deleted [ 507.661273][ T9035] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 507.672910][ T9035] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.704874][ T7281] __quota_error: 26 callbacks suppressed [ 507.704892][ T7281] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 507.805266][ T7281] EXT4-fs error (device loop6): ext4_release_dquot:6838: comm kworker/u4:20: Failed to release dquot type 1 [ 509.153123][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 509.421826][ T9051] Lens B: ================= START STATUS ================= [ 509.430327][ T9051] Lens B: Focus, Absolute: 0 [ 509.437420][ T9051] Lens B: ================== END STATUS ================== [ 512.157114][ T9065] wireguard: wg1: Could not create IPv4 socket [ 513.296730][ T27] audit: type=1326 audit(1746473832.437:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc58e969 code=0x7ffc0000 [ 513.318932][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.411945][ T27] audit: type=1326 audit(1746473832.437:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc58e969 code=0x7ffc0000 [ 513.434326][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.560980][ T27] audit: type=1326 audit(1746473832.537:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f27bc58e969 code=0x7ffc0000 [ 514.534577][ T27] audit: type=1326 audit(1746473832.537:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc58e969 code=0x7ffc0000 [ 514.935150][ T27] audit: type=1326 audit(1746473832.537:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bc58e969 code=0x7ffc0000 [ 515.347235][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 517.380341][ T9096] loop8: detected capacity change from 0 to 40427 [ 517.403462][ T9096] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 517.411024][ T9096] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 517.419414][ T9096] F2FS-fs (loop8): build fault injection attr: rate: 17008, type: 0x3ffff [ 517.428076][ T9096] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x1f8 [ 517.438018][ T9096] F2FS-fs (loop8): invalid crc value [ 517.482856][ T9096] F2FS-fs (loop8): Found nat_bits in checkpoint [ 517.523330][ T9096] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 517.530691][ T9096] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 518.256197][ T7788] syz-executor: attempt to access beyond end of device [ 518.256197][ T7788] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 518.414275][ T9111] Lens B: ================= START STATUS ================= [ 518.421920][ T9111] Lens B: Focus, Absolute: 0 [ 518.426821][ T9111] Lens B: ================== END STATUS ================== [ 519.521214][ T4255] Bluetooth: hci4: Unknown advertising packet type: 0x18 [ 519.521316][ T4255] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 519.529159][ T4255] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 519.536471][ T4255] Bluetooth: hci4: Malformed LE Event: 0x0d [ 522.526064][ T9119] syz.6.1079 (9119): drop_caches: 2 [ 528.275478][ T9178] loop6: detected capacity change from 0 to 2048 [ 529.768294][ T9178] loop6: p1 < > p3 [ 529.798600][ T9178] loop6: p3 size 134217728 extends beyond EOD, truncated [ 529.837604][ T9184] loop8: detected capacity change from 0 to 256 [ 532.620590][ T9210] loop8: detected capacity change from 0 to 16 [ 532.628096][ T9207] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 532.657495][ T9210] erofs: (device loop8): mounted with root inode @ nid 36. [ 532.965284][ T4255] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 533.030810][ T9210] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 533.299043][ T27] audit: type=1800 audit(1746473852.935:102): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1106" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 533.318695][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.193023][ T9244] overlayfs: failed to clone upperpath [ 538.281481][ T9255] loop6: detected capacity change from 0 to 256 [ 539.676162][ T9265] loop2: detected capacity change from 0 to 2048 [ 539.749342][ T9265] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 539.757456][ T9265] UDF-fs: Scanning with blocksize 512 failed [ 539.773658][ T9265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.323289][ T9268] tap0: tun_chr_ioctl cmd 99999999 [ 542.073305][ T93] block nbd6: Attempted send on invalid socket [ 542.079722][ T93] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 542.096048][ T93] block nbd6: Attempted send on invalid socket [ 542.105345][ T93] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 542.119260][ T9283] Mount JFS Failure: -5 [ 543.008707][ T9289] loop6: detected capacity change from 0 to 128 [ 543.029119][ T9289] EXT4-fs: Ignoring removed nobh option [ 543.905996][ T9289] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 543.918490][ T9289] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 544.166350][ T4652] EXT4-fs (loop6): unmounting filesystem. [ 547.431266][ T4334] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 547.641020][ T4334] usb 9-1: Using ep0 maxpacket: 16 [ 547.651903][ T4334] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 547.730213][ T4334] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.743629][ T4334] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.758025][ T4334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.766417][ T4334] usb 9-1: Product: syz [ 548.378538][ T4334] usb 9-1: Manufacturer: syz [ 548.383542][ T4334] usb 9-1: SerialNumber: syz [ 548.636442][ T4334] usb 9-1: 0:2 : does not exist [ 548.665270][ T4334] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 548.717313][ T4334] usb 9-1: USB disconnect, device number 2 [ 548.907753][ T9334] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.917313][ T9334] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.926257][ T9334] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.935138][ T9334] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.970675][ T9334] team0: Port device vxlan0 added [ 549.172218][ T9331] udevd[9331]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.698645][ T9381] __vm_enough_memory: pid: 9381, comm: syz.8.1151, no enough memory for the allocation [ 554.466188][ T9388] 9pnet_fd: Insufficient options for proto=fd [ 555.329642][ T9393] loop6: detected capacity change from 0 to 1024 [ 555.438215][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.473206][ T9396] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 555.713928][ T9396] kvm: pic: level sensitive irq not supported [ 555.716340][ T9396] kvm: pic: non byte read [ 555.747556][ T9396] kvm: pic: level sensitive irq not supported [ 555.747631][ T9396] kvm: pic: non byte read [ 556.694097][ T9404] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 556.702069][ T9404] #PF: supervisor instruction fetch in kernel mode [ 556.708596][ T9404] #PF: error_code(0x0010) - not-present page [ 556.714604][ T9404] PGD 60c93067 P4D 60c93067 PUD 0 [ 556.719802][ T9404] Oops: 0010 [#1] PREEMPT SMP KASAN [ 556.725038][ T9404] CPU: 0 PID: 9404 Comm: syz.5.1157 Not tainted 6.1.137-syzkaller #0 [ 556.733129][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 556.743216][ T9404] RIP: 0010:0x0 [ 556.746734][ T9404] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 556.754130][ T9404] RSP: 0018:ffffc9000c48f398 EFLAGS: 00010246 [ 556.760236][ T9404] RAX: 1ffffffff15ec78b RBX: 000000000000000f RCX: 0000000000000000 [ 556.768334][ T9404] RDX: ffffc9000c48f440 RSI: 0000000000000001 RDI: ffff888076db8000 [ 556.776343][ T9404] RBP: ffffc9000c48f4b0 R08: dffffc0000000000 R09: ffffed100edb7008 [ 556.784354][ T9404] R10: ffffed100edb7008 R11: 1ffff1100edb7007 R12: ffffe8ffffc45cb8 [ 556.792362][ T9404] R13: ffffffff8af63c58 R14: 0000000000000000 R15: ffff888076db8000 [ 556.800372][ T9404] FS: 00007f27bd37e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 556.809343][ T9404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.815957][ T9404] CR2: ffffffffffffffd6 CR3: 000000007cdea000 CR4: 00000000003526f0 [ 556.823961][ T9404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.831959][ T9404] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 556.839961][ T9404] Call Trace: [ 556.843260][ T9404] [ 556.846215][ T9404] bond_xdp_xmit+0x309/0x520 [ 556.850867][ T9404] ? bond_xdp_xmit+0x93/0x520 [ 556.855591][ T9404] ? bond_xdp+0x840/0x840 [ 556.859955][ T9404] ? page_pool_put_defragged_page+0x5ca/0x8c0 [ 556.866057][ T9404] bq_xmit_all+0xc99/0x10d0 [ 556.870600][ T9404] ? __next_zones_zonelist+0x99/0x120 [ 556.876001][ T9404] ? rcu_is_watching+0x11/0xa0 [ 556.880797][ T9404] ? __alloc_pages+0x287/0x4e0 [ 556.885597][ T9404] ? __dev_flush+0x1b0/0x1b0 [ 556.890223][ T9404] ? zone_statistics+0x170/0x170 [ 556.895221][ T9404] ? __alloc_pages_bulk+0x49a/0x920 [ 556.900478][ T9404] ? rcu_is_watching+0x11/0xa0 [ 556.905289][ T9404] bq_enqueue+0x337/0x3d0 [ 556.909663][ T9404] dev_map_enqueue+0x1b4/0x340 [ 556.914473][ T9404] xdp_do_redirect_frame+0x30c/0x650 [ 556.919809][ T9404] bpf_test_run_xdp_live+0x9dd/0x1970 [ 556.925235][ T9404] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 556.930822][ T9404] ? xdp_convert_md_to_buff+0x330/0x330 [ 556.936421][ T9404] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 556.942707][ T9404] ? bpf_test_init+0x134/0x150 [ 556.947491][ T9404] ? xdp_convert_md_to_buff+0x5b/0x330 [ 556.952969][ T9404] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 556.958286][ T9404] ? dev_put+0x80/0x80 [ 556.962378][ T9404] ? dev_put+0x80/0x80 [ 556.966460][ T9404] bpf_prog_test_run+0x31e/0x390 [ 556.971413][ T9404] __sys_bpf+0x593/0x6d0 [ 556.975675][ T9404] ? bpf_link_show_fdinfo+0x310/0x310 [ 556.981069][ T9404] ? lock_chain_count+0x20/0x20 [ 556.985939][ T9404] __x64_sys_bpf+0x78/0x90 [ 556.990365][ T9404] do_syscall_64+0x4c/0xa0 [ 556.994802][ T9404] ? clear_bhb_loop+0x45/0xa0 [ 556.999484][ T9404] ? clear_bhb_loop+0x45/0xa0 [ 557.004172][ T9404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.010084][ T9404] RIP: 0033:0x7f27bc58e969 [ 557.014509][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.034134][ T9404] RSP: 002b:00007f27bd37e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.042560][ T9404] RAX: ffffffffffffffda RBX: 00007f27bc7b5fa0 RCX: 00007f27bc58e969 [ 557.050540][ T9404] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 557.058515][ T9404] RBP: 00007f27bc610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 557.066500][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.074481][ T9404] R13: 0000000000000000 R14: 00007f27bc7b5fa0 R15: 00007fff38caba98 [ 557.082478][ T9404] [ 557.085516][ T9404] Modules linked in: [ 557.089424][ T9404] CR2: 0000000000000000 [ 557.093606][ T9404] ---[ end trace 0000000000000000 ]--- [ 557.099071][ T9404] RIP: 0010:0x0 [ 557.102631][ T9404] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 557.109996][ T9404] RSP: 0018:ffffc9000c48f398 EFLAGS: 00010246 [ 557.116074][ T9404] RAX: 1ffffffff15ec78b RBX: 000000000000000f RCX: 0000000000000000 [ 557.124087][ T9404] RDX: ffffc9000c48f440 RSI: 0000000000000001 RDI: ffff888076db8000 [ 557.132089][ T9404] RBP: ffffc9000c48f4b0 R08: dffffc0000000000 R09: ffffed100edb7008 [ 557.140162][ T9404] R10: ffffed100edb7008 R11: 1ffff1100edb7007 R12: ffffe8ffffc45cb8 [ 557.148142][ T9404] R13: ffffffff8af63c58 R14: 0000000000000000 R15: ffff888076db8000 [ 557.156120][ T9404] FS: 00007f27bd37e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 557.165103][ T9404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.171691][ T9404] CR2: ffffffffffffffd6 CR3: 000000007cdea000 CR4: 00000000003526f0 [ 557.179678][ T9404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.187652][ T9404] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 557.195655][ T9404] Kernel panic - not syncing: Fatal exception in interrupt [ 557.203189][ T9404] Kernel Offset: disabled [ 557.207523][ T9404] Rebooting in 86400 seconds..