last executing test programs: 17.061504888s ago: executing program 3 (id=440): socket(0x10, 0x2, 0xffffffff) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.681006378s ago: executing program 3 (id=442): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0xc00, 0x40000000, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001980)={0x0, "2f40da58172985cec722bcfb7a1443b0"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000500)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@adinicb}, {@gid_forget}, {@nostrict}, {@unhide}, {@uid}, {@bs={'bs', 0x3d, 0x6d7}}, {@uid_ignore}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") timer_create(0x9, 0x0, &(0x7f00000001c0)) timer_delete(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x43}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) 11.798398358s ago: executing program 3 (id=447): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") mknod$loop(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r2}, 0x0, 0x0}, 0xffffffffffffffd9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) dup2(r1, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f00000004c0)=@ethtool_dump={0x3f}}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f0000000100)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1000000000000}) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 11.381253365s ago: executing program 3 (id=450): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x8000000000000001, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000704fcff", 0x58}], 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./bus\x00', 0x228a4, 0x0, 0x80, 0x0, &(0x7f0000000000)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='\x00', 0x0, &(0x7f0000000340)='./file0\x00') sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd344) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) 10.930736844s ago: executing program 3 (id=452): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) lstat(&(0x7f0000001300)='./file1\x00', 0x0) socket(0x840000000002, 0x3, 0xff) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x21000849, &(0x7f00000005c0)=ANY=[@ANYBLOB="6f63680200000074ec6234a70c646973636172642c646d61736b3d3030c7129306cdcc2f6af03030303030303030303030303030303030303030372c7569643d", @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861727365743d69736f3838350200312c6769643d00000000000000", @ANYRESHEX, @ANYBLOB="2cd0d5d8", @ANYRES32, @ANYBLOB="a962f20b0200c42eef2bff723985e38ebb4c85273417d5167d453983b75bc05633861fefb4e0a24811e37543ecc7c3cf877dd04261c1a3ceedefdbb2bf31f2d6e7588ec25957013f58454d8c50865b0cb56b63f27d"], 0x81, 0x14f5, &(0x7f0000004140)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000240), 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x9, @pix_mp={0x900, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x7}], {}, [], {}, {0x20, 0x4}}, 0x44, 0x0) 10.450177386s ago: executing program 2 (id=453): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@setlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r3, 0x0, 0xffffffff, 0xd}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x74, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'nicvf0\x00'}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1d61}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8a6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7fff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}]}, 0x74}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 9.282015008s ago: executing program 3 (id=456): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") r0 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file1\x00', 0x1000008, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unshare(0x400) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) fchown(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7b8c, 0x2, 0x0, 0x2229, r1, 0xff, '\x00', 0x0, r1, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fstatfs(r0, &(0x7f0000000ac0)=""/13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000980), &(0x7f0000000a40)}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xa093f5ec20b07c0a, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000803, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_SET_PROPBIT(r5, 0x5501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) write$input_event(r5, &(0x7f00000005c0), 0x200005d8) 8.79989177s ago: executing program 2 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d20680d7fdfe4b88942a31f48597e36e03b9d6579b1c599db6e466049c2d4c830345305135e65d3a895c50f80200f6c0aba61f6304000000ff"], 0xdd12}, {&(0x7f00000000c0)=ANY=[], 0x22f8}], 0x2}, 0x0) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "f0495fc4"}, @main=@item_4={0x3, 0x0, 0x0, "431742d2"}]}}, 0x0}, 0x0) 8.280845766s ago: executing program 4 (id=409): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x804060, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8, @ANYRES64], 0x1, 0x14e6, &(0x7f0000002a80)="$eJzs3Au4jdX2MPAx5pwvm6SV5LKZY46XlVwmSZJLklySJEmS3BKSJElCYpNbEpKQe5J7SG4hud9vuSfJkSRJSEgyv0enc5zz73xP/++cvs/3fXv8nmc+e479rjHXmGusvdf7rmfv9W2HQVXqVa1Yh5nhP4J//ZIGACkA0BcArgGACABKZiuZ7dLxTBrT/rM7EX+uh6Ze6QrElST9T9+k/+mb9D99k/6nb9L/9E36n75J/9M36b8Q6dnWabmvlZF+h7z/n57J63/6Jv1P36T/6Zv0P32T/qdv0v//D5h/P1X6n75J/9M36b8Q6dmVfv/5/52R8bdH7ErX8eeOK/z0E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRTpwLlxkA+Nv8StclhBBCCCGEEEKIP0/IeKUrEEIIIYQQQgghxP9+CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQCnkgL1ggcMAQQz7ID0m4AQrAjVAQCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw4NQBx6CuvAw1INHoD48Cg2gITSCxtDk38p/EbrAS9AVukEadIce8DL0hF7QG/pAX3gF+sGr0B9egwEwEAbB6zAY3oAh8CYMhWEwHN6CETASRsFoGANjYRy8DePhHZgA78JEmASTYQpMhWkwHd6DGTATZsH7MBs+gDkwF+bBfFgAH8JCWASL4SNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//F/LP/Jb8jAgIqVGjQYAbMgCmYgpkxM2bBLJgVs2ICE5gNs/39yZILc2EqpmJezIuEhIyM+TAfJjGJBbAAFsSCWBgLo0ePxbAYFsebsQSWwJJYEkthKSyNZbAMlsNyWB7LYwWsgBWxIlbCSlgFq+DdeDfeg9WxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsAG2AgbYRNsgk2xKTbDZtgCW2BLbImtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wRXwRX8KXsBtWUt2xB/bAntgTe2Mf7IOvYD98FV/F13AADsRB+Dq+jm/gEDyDQ3EYDsfhWF6NxFE4GlmNxXE4DsfjeJyAE3AiTsJJOAWn4jScjtNxBs7Emfg+zsYP8AOci3NxPi7ABbgQF+FiXIxL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/AT3I7bcSfuxN24Gz/FT/Ez/AwH4H7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHJ7H83gBn0/9uu7uQusGgLrEKKMyqAwqRaWozCqzyqKyqKwqq0qohMqmsqnsKrvKoXKoXCqXSlWpKq/Kq0iRYhWrfCqfSqqkKqAKqIIKVGFVWHnlVTFVTBVXxVUJVUKVVLeqUuo2VVqVUc19OVVOlVctfAV1p6qoKqpKqrKqoqqqqqqaqqaqq+qqhqqhaqqaqpZ6QNVW3bE3PqQudaaeGoj11SBsoBqqRqqxegMfU03VEGymmqsW6gk1DIdiK9XUt1ZPqzZqFLZVz6rR+Jxqr8ZiB/WC6qg6qc7qRdVFNfNdVTc1EburHmoK9lS9VG/VR83AyupSx6qo19QANVANUq+r+fiGGqLeVEPVMDVcvaVGqJFqlBqtxqixapx6W41X76gJ6l01UU1Sk9UUNVVNU9PVe2qGmqlmqffVbPWBmqPmqnlqvlqgPlQL1SIF8JFaoj5WS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUVvVJ2qb2q52qJ1ql9qt9qhP1V71mdqnPlf71RfqgPqLOqi+VIfUV+qw+lodUd+oo+pbdUx9p46r79UJdVKdUj+o0+pHdQbxrz/F6md1Qf2iLqqgQKNWWmujI51BZ9QpOpPOrK/SWfTVOqu+Rif0tTqbvk5n19frHDqnzqVz61SdR+fVVpN2mnWs8+n8Oqlv0AX0jbqgLqQL6yLa66K6mL5JF9c36xL6Fl1S36pL6dt0aV1Gl9Xl9O26vL5DV9B36or6Ll1JV9ZVdFV9t66m79HV9b26hr5P19T361r6AV1bP6jr6Id0Xf2wrqcf0fX1o7qBbqgb6ca6iX5MN9WP62a6uW6hn9At9ZO6lX5Kt9ZP6zb6Gd1WP6vb6ed0e/287qBf0B11J91Z/6Iv6qC76m46TXfXPfTLuqfupXvrPrqvfkX306/q/vo1PUAP1IP063qwfkMP0W/qoXqYHq7f0iP0SD1Kj9Zj9Fg9Tr+tx+t39AT9rp6oJ+nJeoqeqqfp3r+tNOu/kf/Ov8jv/+u9b9Fb9Sd6m96ud+idepferffoPXqv3qv36X16v96vD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/on/YM+rX/UZ/RZfVb/pM/r8/rCb48BGDTKaGNMZDKYjCbFZDKZzVUmi7naZDXXmIS51mQz15ns5nqTw+Q0uUxuk2rymLzGGjLOsIlNPpPfJM0NpoC50RQ0hUxhU8R4U9QUMzf9x/l/VF8T08Q0NU1NM9PMtDAtTEvT0rQyrUxr09q0MW1MW9PWtDPtTHvT3nQwHUxH09F0Np1NF9PFdDVdTZpJMz3My6an6WV6mz6mr3nF9DP9TH/T3wwwA8wgM8gMNoPNEDPEDDVDzXAz3IwwI8woM8qMMWPMODPOjDfjzQQzwUw0E81kM9lMNVPNdDPdzDAzzCwzy8w2s80cM8fMM/PMArPALDQLzWKz2CwxS8xSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMkvNVrPVbDPbzA6zw+wyu8wes8fsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBcvnfZFKlKRiUyUIcoQpUQpUeYoc5QlyhJljbJGiSgRZYuyRdmj66McUc4oV5Q7So3yRHkjG1HkIo7iKF+UP0pGN0QFohujglGhqHBUJPJR0ahYdFNUPLo5KhHdEpWMbo1KRbdFpaMyUdmoXHR7VD66I6oQ3RlVjO6KKkWVoypR1ejuqFp0T1Q9ujeqEd0X1Yzuj2pFD0S1owejOtFDUd3o4ahe9EhUP3o0ahA1jBpFjaMmf+r6IZzJ+bjvarvZNNvd9rAv2562l+1t+9i+9hXbz75q+9vX7AA70A6yr9vB9g07xL5ph9phdrh9y46wI+0oO9qOsWPtOPu2HW/fsRPsu3ainWQn2yl2qp1mp9v37Aw7086y79vZ9gM7x8618+x8u8B+aBfaRXax/cgusR/bpXaZXW5X2JV2lV1t19i1dp1dbzfYjXaT3Wy32K32E7vNbrc77E67y+62e+yndq/9zO6zn9v99gt7wP7FKvjSHrJf2cP2a3vEfmOP2m/tMfudPW6/tyfsSXvK/mBP2x/tGXvWnrM/2fP2Z3vB/mIv2nDp5P7SyzsZMpSBMlAKpVBmykxZKAtlpayUoARlo2yUnbJTDspBuSgXpVIq5aW8dAkTUz7KR0lKUgEqQAWpIBWmwuTJUzEqRsWpOJWgElSSSlIpKkWlqTSVpbJ0O91Od9AddCfdSXfRXVSZKlNVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSAGlAjakRNqAk1pabUjJpRC2pBLakltaJW1JpaUxtqQ22pLbWjdtSe2lMH6kAdqSN1ps7UhbpQV+pKaZRGPagH9aSe1Jt6U1/qS/2oH/Wn/jSABtAgGkSDaTANoSE0lIbRcHqLRtBIGkWjaQyNpXE0jsbTeJpAE2giTaTJNJmm0lSaTtNpBs2gWTSLZtNsmkNzaB7NowW0gBbSQlpMi2kJLaGltJSW03JaSStpNa2mtbSW1tN62kgbaTNtpq20lbbRNtpBO2gX7aI9tIf20l7aR/toP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HacTdIJO0Sk6TafpDJ2hc3SOztPPdIF+oYsUKMVlcpndVS6Lu9pldde4/xrncrldqsvj8jrrcric/xSTc66gK+QKuyLOu6KumLvpd3FpV8aVdeXc7a68u8NV+F1czd3jqrt7XQ13n6vq7v6nuKa739Vyj7ja7lFXxzV0dV1jV8894uq7R10D19A1co1dS/eka+Wecq3d066Ne+Z38UK3yK1169x6t8HtdZ+5c+4nd9R96867n11X1831da+4fu5V19+95ga4gb+Lh7u33Ag30o1yo90YN/Z38WQ3xU1109x0956b4Wb+Ll7gPnSz3WI3x81189z8X+NLNS12H7kl7mO31C1zy90Kt9Ktcqvdmr/XusJtcpvdFrfHfeq2ue1uh9vpdrndv8aX9rHPfe72uy/cEfeNO+i+dIfcMXfYff1rfGl/x9x37rj73p1wJ90p94M77X50Z9zZX/d/ae8/uF/cRRccMLJizYYjzsAZOYUzcWa+irPw1ZyVr+EEX8vZ+DrOztdzDs7JuTg3p3IezsuWiR0zx5yP83OSb+ACfCMX5EJcmIuw56JcjG/i4nwzl+BbuCTfyqX4Ni7NZbgsl+PbuTzfwRX4Tq7Id3ElrsxVuCrfzdX4Hq7O93INvo9r8v1cix/g2vwg1+GHuC4/zPX4Ea7Pj3IDbsiNuDE34ce4KT/Ozbg5t+AnuCU/ya34KW7NT3Mbfobb8rPcjp/j9vw8d+AXuCN34s78Infhl7grd+M07s49+GXuyb24N/fhvvwK9+NXuT+/xgN4IA/i13kwv8FD+E0eysN4OL/FI3gkj+LRPIbH8jh+m8fzOzyB3+WJPIkn8xSeytN4Or/HM3gmz+L3eTZ/wHN4LgPM5wX8IS/kRbyYP+Il/DEv5WW8nFfwSl7Fq3kNr+V1vJ438EbexJt5C2/lT3gbb+cdvJN38W7ew5/yXv6M9/HnvJ+/4AP8Fz7IX/Ih/ooP89d8hL/ho/wtH+Pv+Dh/zyf4JJ/iH/g0/8hn+Cyf45/4PP/MF/gXvsiBIcZYxTo2cRRniDPGKXGmOHN8VZwlvjrOGl8TJ+Jr42zxdXH2+Po4R5wzzhXnjlPjPHHe2MYUu5jjOM4X54+T8Q1xgfjGuGBcKC4cF4l9XDQuFt8UF49vjkvEt8Ql41vjUvFtcem4TPzIfeXi2+Py8R1xhfjOuGJ8V1wprhxXiavGd8fV4nvi6vG9cY34vrhEfH9cK34grh0/GNeJH4rrxg/H9eJH4vrxo3GDuGHcKG4cN4kfi5vGj8fN4uZxi/iJuGX8ZNwqfipuHT8dt4mf+cPjaXH3uEf8cvxyHMK9el5yfnJB8sPkwuSi5OLkR8klyY+TS5PLksuTK5Irk6uSq5NrkmuT65LrkxuSG5ObkpuTW5IhVM0IHr3y2hsf+Qw+o0/xmXxmf5XP4q/2Wf01PuGv9dn8dT67v97n8Dl9Lp/bp/o8Pq+3nrzz7GOfz+f3SX+DL+Bv9AV9IV/YF/HeF/XFfGPfxDfxTf3jvplv7lv4J/wT/kn/pH/KP+Wf9m38M76tf9a388/59v55/7x/wXf0nXxn/6Lv4l/yXX03n+bTfA/fw/f0PX1v39v39X19P9/P9/f9/QA/wA/yg/xgP9gP8UP8UD/UD/fD/Qg/wo/yo/wYP8aP8+P8eD/eT/AT/EQ/0U/2k/1UP9VP99P9DD/Dz/Kz/OyCs/0cP8fP8/P8Ar/AL/QL/WK/2C/xS/xSv9Qv98v9Sr/Sr/ar/Vq/1q/36/1Gv9Fv9pv9Vr/Vb/Pb/A6/w+/yu/wev8fv9Xv9Pr/P7/f7/QF/wB/0B/0h/5U/7L/2R/w3/qj/1h/z3/nj/nt/wp/0p/wP/rT/0Z/xZ/05/5M/73/2F/wv/qIPflzi7cT4xDuJCYl3ExMTkxKTE1MSUxPTEtMT7yVmJGYmZiXeT8xOfJCYk5ibmJeYn1iQ+DCxMLEosTjxUWJJ4uPE0sSyxPLEisTKxKpECHm2xSFfyB+S4YZQINwYCoZCoXAoEnwoGoqFm0LxcHMoEW4JJcOtoVS4LZQOZULZ8GhoEBqGRqFxaBIeC03D46FZaB5ahCdCy/BkaBWeCq3D06FNeCa0Dc+GduG50D48HzqEF0LH0Cl0Di+GLuGl0DV0C2mhe+gRXg49Q6/QO/QJfcMroV94NfQPr4UBYWAYFF4Pg8MbYUh4MwwNw8Lw8FYYEUaGUWF0GBPGhnHh7TA+vBMmhHfDxDApTA5TwtQwLUwP74UZYWaYFd4Ps8MHYU6YG+aF+WFB+DAsDIvC4vBRWBI+DkvDsrA8rAgrw6qwOqwJa8O6sD5sCBvDprA5bAlbwydhW9gedoSdYVfYHfaET8Pe8FnYFz4P+8MX4UD4SzgYvgyHwlfhcPg6HAnfhKPh23AsfBeOh+/DiXAynAo/hNPhx3AmnA3nwk/hfPg5XAi/hIvyP2tCCCGEEP8tff/gePd/8T3127gkDQCu3p778D8e1wCwMcdf571UassEADzdrcNDfxuVKqWlpf1226UaovxzASBxOT8DXI6XQQt4ElpD80y//qnC7/RSnc7zH6yfvBUg8z/kpMDl+O/rw83/cv+91MjZf7j+XICC+S/nXCr1b/Hl9Uv8T9bP2fQP1s/05TiAZv+QkwUux5fXLwaPwzPQ+p9uKYQQQgghhBBC/FUvVbbdH13fXro+TzWXczLC5fjy9WfxK1K/EEIIIYQQQggh/thznTo/9Vjr1s3byeT/xsluaZNMrszkCv9iEkIIIYQQQvzpLp/0X+lKhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKI9Ov/xMeJXek9CiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfa/wgAAP//1Wwqbg==") syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unlinkat(r2, &(0x7f0000000080)='./file1\x00', 0x200) 7.631080003s ago: executing program 4 (id=463): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x3, 0x0, 0x20000071) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0x80024322, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000000)="a4", &(0x7f0000000040)=""/100}, 0x20) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000080)=""/52, 0x34, 0xfc000000, 0x7fffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000300)=0x4) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000600), 0x40880, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@cache_none}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_user}, {@msize={'msize', 0x3d, 0x8}}, {@access_client}], [{@pcr={'pcr', 0x3d, 0x11}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@measure}]}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001000010000000000fc000000000000000000000000000000ff8cc200000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2006000000000000000000000000000000000000000000000800010000000000cddf0ded05e5ddcdfb9b8a864017645bb4273c73d64792c348445fa2bf56995a3022a78ba4e563"], 0x20}}, 0x0) 7.478062086s ago: executing program 1 (id=464): syz_usb_connect(0x3, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x44, 0xf8, 0x9b, 0x20, 0x5ac, 0x262, 0xa363, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x7, 0x0, 0x3, 0xca, 0x2}}, {{0x9, 0x4, 0x29, 0x0, 0x1, 0x68, 0xf2, 0x28, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x0, 0x6}}]}}]}}]}}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0xee01) setgroups(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x2}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x141202, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001980)={'vxcan0\x00', 0x0}) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r4) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x7fffffffffffffff) sendmsg$can_raw(r2, &(0x7f0000001a80)={&(0x7f00000019c0)={0x1d, r3}, 0x10, &(0x7f0000001a40)={&(0x7f0000001a00)=@can={{0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "153ed27275e88f1c"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654ce5e2773e92e99783e3152562a21a574f521022314da92315c13a6a696122b211e29a85e81ba7a8fb4dee770d1cacaa2fb02d5fb97676d6402513cccc770ff1a9b9d3b1454ff071d6ed6c4e84249607b64a034b8127893a00aac7ce06a0c2820f7084a8d8e61fc6868c0c2c74005af049ea328a94d5d4534aa99c49208a5f339dec460f5231d6a3e42e4b314c913da4d4127f3d8407e7edbbb044d2e034d6c14c0b86de30afe2d0b92bcaa10cb48c54576114ab1844e25eabc3a8c7906e917b052dfe31e110aaf94876488e3ef926f2d6e6cb635836cb11dbd146a83e2034b7d41ebdaa959f4f74444aceab064af4fb73b5ac964eca5e12834cc5c6d280855bc19c25ce7a5a3dd1a64c1fba0001ee7eebfd25e67ebb5ca47dd6c08543f96a01"}]}}}}}}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffff4, 0xc, 0x800000, 0x2a, 0x1b, "be882f95f3aee29a154c0f00"}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r8, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/121, 0x79}], 0x9, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/194, 0xc2}], 0x3, 0x0) 7.447203809s ago: executing program 4 (id=465): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") mknod$loop(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r2}, 0x0, 0x0}, 0xffffffffffffffd9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) dup2(r1, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f00000004c0)=@ethtool_dump={0x3f}}) 7.280920443s ago: executing program 4 (id=466): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) lstat(&(0x7f0000001300)='./file1\x00', 0x0) socket(0x840000000002, 0x3, 0xff) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x21000849, &(0x7f00000005c0)=ANY=[@ANYBLOB="6f63680200000074ec6234a70c646973636172642c646d61736b3d3030c7129306cdcc2f6af03030303030303030303030303030303030303030372c7569643d", @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861727365743d69736f3838350200312c6769643d00000000000000", @ANYRESHEX, @ANYBLOB="2cd0d5d8", @ANYRES32, @ANYBLOB="a962f20b0200c42eef2bff723985e38ebb4c85273417d5167d453983b75bc05633861fefb4e0a24811e37543ecc7c3cf877dd04261c1a3ceedefdbb2bf31f2d6e7588ec25957013f58454d8c50865b0cb56b63f27d"], 0x81, 0x14f5, &(0x7f0000004140)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000240), 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x9, @pix_mp={0x900, 0x0, 0x0, 0x0, 0x0, [], 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x7}], {}, [], {}, {0x20, 0x4}}, 0x44, 0x0) 5.422590026s ago: executing program 4 (id=469): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@setlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r3, 0x0, 0xffffffff, 0xd}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x74, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'nicvf0\x00'}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1d61}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8a6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7fff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}]}, 0x74}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 5.422146906s ago: executing program 2 (id=470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001000010000000000fc000000000000000000000000000000ff8cc200000000000000000000000200"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x84) 5.358521262s ago: executing program 2 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5, 0x11}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000ac0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a00)={@ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/45, 0x2d, 0x1, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/74, 0x4a, 0x1, 0x9}, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000a80)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x183800) read(r7, &(0x7f0000000040)=""/99, 0x63) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0x14}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.363075149s ago: executing program 1 (id=473): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x8) 4.360992199s ago: executing program 2 (id=474): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) creat(0x0, 0x24) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x450c0, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x401870cb, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 4.352649049s ago: executing program 0 (id=475): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x3, 0x0, 0x20000071) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0x80024322, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000000)="a4", &(0x7f0000000040)=""/100}, 0x20) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000080)=""/52, 0x34, 0xfc000000, 0x7fffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000300)=0x4) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000600), 0x40880, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@cache_none}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_user}, {@msize={'msize', 0x3d, 0x8}}, {@access_client}], [{@pcr={'pcr', 0x3d, 0x11}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@measure}]}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001000010000000000fc000000000000000000000000000000ff8cc200000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2006000000000000000000000000000000000000000000000800010000000000cddf0ded05e5ddcdfb9b8a864017645bb4273c73d64792c348445fa2bf56995a3022a78ba4e563"], 0x20}}, 0x0) 4.317782873s ago: executing program 0 (id=476): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket(0x10, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00') r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x8a, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f00000018c0)=0x1) close_range(r6, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x109c000, &(0x7f0000000600)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@usrquota}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff91}}, {@data_err_abort}, {@block_validity}, {@debug}], [{@audit}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") 3.187564971s ago: executing program 1 (id=477): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f00000004c0)=@ethtool_dump={0x3f}}) 3.008329647s ago: executing program 0 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xb29, 0x0, 0xfffffffe, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 2.995766788s ago: executing program 1 (id=479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf04000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r9, 0xc0984124, 0x200000000000000) r10 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x70940, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r10, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x8fc0, 0x65f40}) 2.96581274s ago: executing program 4 (id=480): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1a, 0xb, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5fbec26833459429, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000340)=[{0x3, 0x5, 0x10, 0x4}], 0x10, 0x3, @value}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000200)="12", 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x223cd1fe346f1e38, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x4}}, 0x3c) setuid(0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x119) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x90000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xe07, @empty, 0x2}, {0xa, 0x4e23, 0x3, @local, 0x2020}, r6, 0x8}}, 0x48) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x10}]}}}]}, 0x3c}}, 0x0) 1.013651681s ago: executing program 0 (id=481): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 1.012896241s ago: executing program 0 (id=482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001000010000000000fc000000000000000000000000000000ff8cc200000000000000000000000200"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x84) 1.009118462s ago: executing program 1 (id=483): bpf$MAP_CREATE(0x2000000000000013, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r5, 0x701}, 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11a4}) socket(0x10, 0x80002, 0x4) 822.352968ms ago: executing program 0 (id=484): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x17, 0x5, 0x1, 0xfffffff4, 0x14, @private0, @local, 0x0, 0x7, 0xbc2a, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000006c0)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='kfree\x00', &(0x7f0000000440)='%\x00', &(0x7f0000000480)='kfree\x00', &(0x7f00000004c0)='\xd1^\x00', &(0x7f0000000680)='\x00'], 0x0, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdef, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde4, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x7, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)='>', 0x1}], 0x1}, 0x0) 50.817326ms ago: executing program 1 (id=485): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000240), &(0x7f0000000280)=@udp6=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r5, 0x4}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240), &(0x7f0000000300)=@tcp=r4}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04040a00000000000054d64e1cf33429e26ea36f8b71679240"], 0xd) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x22, 0x2, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40082104, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) 0s ago: executing program 2 (id=486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x2, 0x400) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") r1 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x5, 0x2001) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x80047455, &(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) fallocate(r5, 0x3, 0x1b02, 0x7000) write$cgroup_type(r4, &(0x7f0000000200), 0x175d9003) open$dir(&(0x7f0000000440)='./bus\x00', 0x2, 0xc) kernel console output (not intermixed with test programs): 535][ T26] audit: type=1326 audit(1726048798.686:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.373220][ T26] audit: type=1326 audit(1726048798.686:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.397390][ T26] audit: type=1326 audit(1726048798.686:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.429987][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.437050][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.480859][ T4250] device bridge_slave_0 entered promiscuous mode [ 111.500510][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.512078][ T26] audit: type=1326 audit(1726048798.686:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.554154][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.587982][ T4250] device bridge_slave_1 entered promiscuous mode [ 111.651793][ T4268] loop3: detected capacity change from 0 to 8192 [ 111.694600][ T26] audit: type=1326 audit(1726048798.686:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.915147][ T26] audit: type=1326 audit(1726048798.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 111.944984][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.225621][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.351868][ T26] audit: type=1326 audit(1726048798.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d88caaef9 code=0x7ffc0000 [ 112.402143][ T1291] Bluetooth: hci1: command 0x0409 tx timeout [ 112.687034][ T4290] loop1: detected capacity change from 0 to 256 [ 112.781535][ T4290] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 112.799283][ T4250] team0: Port device team_slave_0 added [ 112.815509][ T4250] team0: Port device team_slave_1 added [ 113.320463][ T3694] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.367350][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.378906][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.565382][ T4301] loop3: detected capacity change from 0 to 64 [ 113.579650][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.286576][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.294499][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.384663][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.410054][ T3694] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 114.440584][ T4301] hfs: request for non-existent node 293 in B*Tree [ 114.447233][ T4301] hfs: request for non-existent node 293 in B*Tree [ 114.463516][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.477106][ T4301] hfs: get root inode failed [ 114.501202][ T3694] usb 1-1: config 0 descriptor?? [ 114.501401][ T3616] Bluetooth: hci1: command 0x041b tx timeout [ 114.544930][ T4307] dlm: no locking on control device [ 114.548322][ T4250] device hsr_slave_0 entered promiscuous mode [ 114.562334][ T3694] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 114.634388][ T4250] device hsr_slave_1 entered promiscuous mode [ 114.655005][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.696132][ T4250] Cannot create hsr debugfs directory [ 114.775529][ T4286] input: syz1 as /devices/virtual/input/input5 [ 114.969969][ T3694] gspca_sonixj: reg_w1 err -71 [ 114.974836][ T3694] sonixj: probe of 1-1:0.0 failed with error -71 [ 115.012317][ T3694] usb 1-1: USB disconnect, device number 4 [ 115.178755][ T4250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.276221][ T4250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.385816][ T4250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.487617][ T4335] loop3: detected capacity change from 0 to 512 [ 115.850830][ T4335] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.164: corrupted in-inode xattr [ 115.865261][ T4335] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.164: couldn't read orphan inode 15 (err -117) [ 115.879828][ T4335] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.530316][ T3612] Bluetooth: hci1: command 0x040f tx timeout [ 117.114462][ T4343] Cannot find set identified by id 0 to match [ 117.126289][ T4250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.213762][ T4349] device bond0 entered promiscuous mode [ 117.219328][ T4349] device bond_slave_0 entered promiscuous mode [ 117.251411][ T4349] device bond_slave_1 entered promiscuous mode [ 117.309447][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 117.332483][ T4352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 117.391424][ T4345] device bond0 left promiscuous mode [ 117.397093][ T4345] device bond_slave_0 left promiscuous mode [ 117.503042][ T4345] device bond_slave_1 left promiscuous mode [ 118.061649][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.066272][ T4361] loop0: detected capacity change from 0 to 4096 [ 118.092785][ T4364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'. [ 118.105053][ T4361] __ntfs_warning: 31 callbacks suppressed [ 118.105068][ T4361] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.200257][ T4361] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 118.227732][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.247100][ T4367] binder: 4366:4367 ioctl c018620c 0 returned -14 [ 118.279345][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.301222][ T4361] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.326855][ T4361] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 118.360942][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.375223][ T4361] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.420942][ T4361] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 118.421133][ T4361] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.421234][ T4361] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 118.421370][ T4361] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.421469][ T4361] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 118.531319][ T4361] ntfs: volume version 3.1. [ 118.636653][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.648604][ T3694] Bluetooth: hci1: command 0x0419 tx timeout [ 118.761150][ T4372] loop3: detected capacity change from 0 to 2048 [ 118.864152][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.904142][ T4377] loop2: detected capacity change from 0 to 1024 [ 118.918880][ T4372] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value [ 118.937334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.949107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.988091][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.018778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.041693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.061286][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.068364][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.010728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.280556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.300256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.320486][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.327601][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.388699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.616651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.646506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.659724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.668500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.686552][ T4387] loop1: detected capacity change from 0 to 1024 [ 120.692229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.813795][ T4250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.824612][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.853286][ T4387] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 120.865384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.886766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.931438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.310974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.319670][ T4387] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #4: comm syz.1.177: blocks 32-33 from inode overlap system zone [ 121.334338][ T4387] EXT4-fs (loop1): failed to initialize system zone (-117) [ 121.341717][ T4387] EXT4-fs (loop1): mount failed [ 121.357280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.386605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.929672][ T4416] dlm: no local IP address has been set [ 122.935571][ T4416] dlm: cannot start dlm midcomms -107 [ 123.188506][ T4409] loop3: detected capacity change from 0 to 2048 [ 123.713562][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 123.713576][ T26] audit: type=1326 audit(1726048811.076:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 123.788725][ T26] audit: type=1326 audit(1726048811.076:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 123.835718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.843732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.859088][ T26] audit: type=1326 audit(1726048811.076:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 123.862691][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.965818][ T4409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.354976][ T26] audit: type=1326 audit(1726048811.076:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 124.435510][ T26] audit: type=1326 audit(1726048811.076:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 124.649890][ T26] audit: type=1326 audit(1726048811.076:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 125.793480][ T4436] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 126.076395][ T26] audit: type=1326 audit(1726048811.076:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 126.120502][ T4441] loop0: detected capacity change from 0 to 2048 [ 126.135663][ T4443] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 126.142280][ T4443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.158152][ T4443] vhci_hcd vhci_hcd.0: Device attached [ 126.169697][ T26] audit: type=1326 audit(1726048811.076:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 126.216709][ T3725] device hsr_slave_0 left promiscuous mode [ 126.221614][ T4441] EXT4-fs (loop0): Unrecognized mount option "hash" or missing value [ 126.231004][ T3725] device hsr_slave_1 left promiscuous mode [ 126.256149][ T26] audit: type=1326 audit(1726048811.076:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 126.279520][ T3725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.303514][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.313604][ T26] audit: type=1326 audit(1726048811.076:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4417 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1a3a3ef9 code=0x7ffc0000 [ 126.346305][ T3725] device bridge_slave_1 left promiscuous mode [ 126.383400][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.408356][ T3725] device bridge_slave_0 left promiscuous mode [ 126.416001][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.473822][ T3725] device veth1_macvtap left promiscuous mode [ 126.480199][ T3725] device veth0_macvtap left promiscuous mode [ 126.486249][ T3725] device veth1_vlan left promiscuous mode [ 126.506435][ T3614] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 126.715175][ T4455] loop2: detected capacity change from 0 to 256 [ 126.875536][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.611389][ T4455] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 127.781317][ T3725] device veth0_vlan left promiscuous mode [ 129.093168][ T3725] team0 (unregistering): Port device team_slave_1 removed [ 129.110574][ T3725] team0 (unregistering): Port device team_slave_0 removed [ 129.125583][ T3725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.149126][ T3725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.256489][ T3725] bond0 (unregistering): Released all slaves [ 129.282105][ T4465] loop2: detected capacity change from 0 to 32768 [ 129.312821][ T4439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 129.333426][ T4444] vhci_hcd: connection reset by peer [ 129.360174][ T4465] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.193 (4465) [ 129.383652][ T3654] vhci_hcd: stop threads [ 129.388081][ T3654] vhci_hcd: release socket [ 129.398635][ T3654] vhci_hcd: disconnect device [ 129.461126][ T7] usb 2-1: device descriptor read/all, error -71 [ 129.513864][ T4465] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 129.631251][ T4469] loop3: detected capacity change from 0 to 128 [ 129.651682][ T4465] BTRFS info (device loop2): using free space tree [ 129.658348][ T4465] BTRFS info (device loop2): has skinny extents [ 129.944604][ T4469] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.095451][ T4469] UDF-fs: Scanning with blocksize 512 failed [ 130.128451][ T4469] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.147202][ T4469] UDF-fs: Scanning with blocksize 1024 failed [ 130.154773][ T4469] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.165226][ T4469] UDF-fs: Scanning with blocksize 2048 failed [ 130.172512][ T4469] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.182711][ T4469] UDF-fs: Scanning with blocksize 4096 failed [ 130.201389][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.224726][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.278859][ T4250] device veth0_vlan entered promiscuous mode [ 130.295782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.370708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.400851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.435472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.509892][ T4465] BTRFS info (device loop2): enabling ssd optimizations [ 130.550604][ T4500] dlm: no locking on control device [ 130.617494][ T4250] device veth1_vlan entered promiscuous mode [ 131.820403][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.831439][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.026587][ T4250] device veth0_macvtap entered promiscuous mode [ 132.090547][ T4250] device veth1_macvtap entered promiscuous mode [ 132.236678][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.279080][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.348176][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.404135][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.449925][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.571193][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.691211][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697770][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.743776][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.914079][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.099976][ T3614] vhci_hcd: vhci_device speed not set [ 133.122752][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.151332][ T4496] loop1: detected capacity change from 0 to 40427 [ 133.227873][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.260828][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.273217][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.283734][ T4496] F2FS-fs (loop1): invalid crc value [ 133.332544][ T4496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.348240][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.470006][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.509832][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.564370][ T4531] loop3: detected capacity change from 0 to 256 [ 133.570685][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.599899][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.630084][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.666616][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.763823][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.800923][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.810542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.822149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.965934][ T4531] exfat: Bad value for 'dmask' [ 134.469272][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.519798][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.616256][ T4539] cgroup: noprefix used incorrectly [ 134.630350][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.659940][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.893444][ T3805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.919933][ T3805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.994471][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.017058][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.063036][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.107523][ T4547] loop1: detected capacity change from 0 to 1024 [ 135.180152][ T3614] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 135.307646][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.709899][ T3570] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.770211][ T3614] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 135.812733][ T3614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.840347][ T3614] usb 1-1: Product: syz [ 135.850135][ T3614] usb 1-1: Manufacturer: syz [ 135.854765][ T3614] usb 1-1: SerialNumber: syz [ 135.889171][ T3614] usb 1-1: config 0 descriptor?? [ 135.959948][ T3570] usb 5-1: Using ep0 maxpacket: 32 [ 136.080079][ T3570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.098097][ T3570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.130804][ T3570] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.156005][ T3570] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.285850][ T3570] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.331930][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'. [ 136.451459][ T3570] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 136.765456][ T3570] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.862393][ T3570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.901173][ T3614] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 136.940082][ T3614] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 136.943148][ T4551] chnl_net:caif_netlink_parms(): no params data found [ 136.953856][ T3614] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 136.969872][ T3570] usb 5-1: Product: syz [ 136.974078][ T3570] usb 5-1: Manufacturer: syz [ 136.988942][ T3570] usb 5-1: SerialNumber: syz [ 137.009360][ T3614] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 137.155906][ T3614] peak_usb: probe of 1-1:0.0 failed with error -22 [ 137.298433][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.313468][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.321165][ T3570] cdc_ncm 5-1:1.0: bind() failure [ 137.361632][ T3570] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.363793][ T4551] device bridge_slave_0 entered promiscuous mode [ 137.377239][ T3570] cdc_ncm 5-1:1.1: bind() failure [ 137.403706][ T3570] usb 5-1: USB disconnect, device number 3 [ 137.424198][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.431740][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.446690][ T4551] device bridge_slave_1 entered promiscuous mode [ 137.900141][ T4524] Bluetooth: hci4: command 0x0409 tx timeout [ 138.220629][ T3615] usb 1-1: USB disconnect, device number 5 [ 138.379459][ T4551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.498606][ T4578] syz.2.216 sent an empty control message without MSG_MORE. [ 139.186467][ T4551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.244393][ T4551] team0: Port device team_slave_0 added [ 139.390640][ T4551] team0: Port device team_slave_1 added [ 140.063601][ T4524] Bluetooth: hci4: command 0x041b tx timeout [ 140.146914][ T4585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.218'. [ 140.198755][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.217869][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.279643][ T4591] loop0: detected capacity change from 0 to 512 [ 140.297642][ T4551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.980082][ T4596] trusted_key: encrypted_key: insufficient parameters specified [ 141.136411][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.143652][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.434938][ T4551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.510316][ T4551] device hsr_slave_0 entered promiscuous mode [ 141.531495][ T4591] __quota_error: 27 callbacks suppressed [ 141.531512][ T4591] Quota error (device loop0): v2_read_file_info: Free block number too big (6 >= 6). [ 141.620138][ T4602] loop2: detected capacity change from 0 to 1024 [ 141.626970][ T4591] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.645216][ T4551] device hsr_slave_1 entered promiscuous mode [ 141.655331][ T4591] EXT4-fs (loop0): mount failed [ 142.400691][ T3614] Bluetooth: hci4: command 0x040f tx timeout [ 142.449331][ T4602] hfsplus: xattr searching failed [ 142.457832][ T26] audit: type=1800 audit(1726048829.846:81): pid=4602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 142.484965][ T4602] hfsplus: xattr searching failed [ 142.488702][ T4601] netlink: 'syz.1.221': attribute type 30 has an invalid length. [ 143.571051][ T4621] loop0: detected capacity change from 0 to 1024 [ 144.242945][ T4621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.424451][ C0] eth0: bad gso: type: 1, size: 1408 [ 144.460158][ C0] eth0: bad gso: type: 1, size: 1408 [ 144.465729][ T4524] Bluetooth: hci4: command 0x0419 tx timeout [ 144.694701][ T4551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.696515][ T4633] loop0: detected capacity change from 0 to 16 [ 145.131370][ T4633] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.472998][ T4633] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 145.483016][ T4633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 145.500647][ T4633] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 145.510497][ T4633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 145.536221][ T4633] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 145.546967][ T4633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 145.558022][ T4633] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 145.569772][ T4633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 145.601380][ T4551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.604399][ T4637] loop4: detected capacity change from 0 to 2048 [ 145.618218][ T4633] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 145.628286][ T4633] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 145.697260][ T4551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.742863][ T4640] loop2: detected capacity change from 0 to 512 [ 145.750544][ T4641] loop1: detected capacity change from 0 to 256 [ 145.758624][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.803311][ T4641] FAT-fs (loop1): Unrecognized mount option "code“age=775" or missing value [ 145.818818][ T4640] capability: warning: `syz.2.235' uses 32-bit capabilities (legacy support in use) [ 145.858269][ T4551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.914882][ T4640] loop2: detected capacity change from 0 to 128 [ 146.225554][ T4650] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 146.329874][ T4640] zonefs (loop2) ERROR: Not a zoned block device [ 146.568938][ T4641] Mount JFS Failure: -22 [ 146.579855][ T4641] jfs_mount failed w/return code = -22 [ 146.949973][ T4656] netlink: 80 bytes leftover after parsing attributes in process `syz.4.237'. [ 148.041354][ T4551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.087159][ T4660] netlink: 576 bytes leftover after parsing attributes in process `syz.1.239'. [ 148.121077][ T4551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.153557][ T4551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.190101][ T4551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.346063][ T4551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.481937][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.517944][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.159938][ T4551] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.254879][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.294926][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.313869][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.320972][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.697434][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.961768][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.083224][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.091771][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.098835][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.191685][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.200922][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.260688][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.274696][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.293814][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.302906][ T4693] loop1: detected capacity change from 0 to 2048 [ 150.311002][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.319703][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.591762][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.609400][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.634013][ T4551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.653152][ T4693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.700523][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.904437][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.923495][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.123848][ T4704] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 151.855708][ T4718] loop2: detected capacity change from 0 to 1024 [ 151.889638][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.900270][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.942223][ T4551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.073553][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.130159][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.145725][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 152.677670][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.757509][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.828935][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.836863][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.847008][ T4551] device veth0_vlan entered promiscuous mode [ 152.884001][ T4551] device veth1_vlan entered promiscuous mode [ 152.988965][ T4740] loop2: detected capacity change from 0 to 128 [ 153.080016][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.163194][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.468334][ T4551] device veth0_macvtap entered promiscuous mode [ 153.616472][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.643972][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.652969][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.702109][ T4551] device veth1_macvtap entered promiscuous mode [ 153.725853][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.757014][ T4745] loop0: detected capacity change from 0 to 2048 [ 153.771049][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.797451][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.808139][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.818813][ T4746] netlink: 228 bytes leftover after parsing attributes in process `syz.1.263'. [ 153.823429][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.839292][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.855470][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.866252][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.891921][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.910080][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.925576][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.017843][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.047387][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.080819][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.089218][ T4749] sp0: Synchronizing with TNC [ 154.154394][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.195938][ T4744] [U] è [ 154.197884][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.210016][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.221123][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.232714][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.242684][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.248010][ T4757] loop4: detected capacity change from 0 to 1024 [ 154.255169][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.270533][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.542128][ T4761] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 154.911809][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.932174][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.969768][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.001224][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.075975][ T4757] hfsplus: request for non-existent node 40 in B*Tree [ 155.107824][ T4757] hfsplus: request for non-existent node 40 in B*Tree [ 155.129676][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.153175][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.188296][ T4551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.217956][ T4551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.230300][ T4551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.244693][ T4551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.430983][ T4775] tipc: Invalid UDP bearer configuration [ 155.431017][ T4775] tipc: Enabling of bearer rejected, failed to enable media [ 155.454041][ T4772] loop2: detected capacity change from 0 to 1024 [ 155.459524][ T4773] loop1: detected capacity change from 0 to 512 [ 155.473074][ T3806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.492131][ T3806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.522791][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.548906][ T4773] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 155.567866][ T3806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.581629][ T3806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.658814][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.342375][ T4792] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 156.350710][ T4792] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.274'. [ 156.363151][ T4792] bond0: (slave erspan0): Error -99 calling set_mac_address [ 156.514346][ C0] eth0: bad gso: type: 1, size: 1408 [ 156.541654][ T4786] loop3: detected capacity change from 0 to 2048 [ 157.016719][ T4786] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.030023][ T4786] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 157.041339][ T4802] loop1: detected capacity change from 0 to 256 [ 157.059836][ T3694] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 157.113516][ T4802] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 157.130665][ T4802] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 157.360130][ T3694] usb 3-1: Using ep0 maxpacket: 32 [ 157.884378][ T26] audit: type=1326 audit(1726048845.276:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.0.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x0 [ 157.909094][ T4809] dlm: no local IP address has been set [ 157.914931][ T4809] dlm: cannot start dlm midcomms -107 [ 157.936574][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 158.039966][ T3694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.061785][ T3694] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.269957][ T3694] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 158.297909][ T4817] loop0: detected capacity change from 0 to 1024 [ 158.335295][ T3694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.379132][ T3694] usb 3-1: Product: syz [ 158.387209][ T3694] usb 3-1: Manufacturer: syz [ 158.394226][ T3694] usb 3-1: SerialNumber: syz [ 158.405848][ T4821] process 'syz.3.284' launched './file0' with NULL argv: empty string added [ 158.417713][ T3694] usb 3-1: config 0 descriptor?? [ 158.441155][ T4823] xt_TCPMSS: Only works on TCP SYN packets [ 158.482228][ T4823] Cannot find set identified by id 0 to match [ 158.502575][ T4825] netlink: 576 bytes leftover after parsing attributes in process `syz.3.285'. [ 158.607216][ T4828] xt_SECMARK: invalid mode: 0 [ 159.008631][ T4828] netlink: 112 bytes leftover after parsing attributes in process `syz.1.280'. [ 159.112215][ T4835] loop3: detected capacity change from 0 to 128 [ 159.550877][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 159.599054][ T4522] usb 3-1: USB disconnect, device number 2 [ 160.953605][ T4849] loop1: detected capacity change from 0 to 1024 [ 161.142118][ T4854] loop3: detected capacity change from 0 to 1024 [ 161.209983][ T4522] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.549820][ T4522] usb 5-1: Using ep0 maxpacket: 32 [ 161.980167][ T4522] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 162.289060][ T4522] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 162.314943][ T4522] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 162.374431][ T4522] usb 5-1: config 1 has no interface number 0 [ 162.432116][ T4522] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.482445][ T4522] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.505614][ T4522] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.535110][ T4522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.579607][ T4867] loop2: detected capacity change from 0 to 1024 [ 162.646771][ T4522] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 162.705617][ T4867] hfsplus: xattr searching failed [ 162.710943][ T26] audit: type=1800 audit(1726048850.106:83): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.298" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 162.711561][ T4867] hfsplus: xattr searching failed [ 163.163760][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 163.197457][ T4885] fuse: Bad value for 'fd' [ 163.924947][ T4904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'. [ 163.950014][ T4522] snd_usb_pod 5-1:1.1: set_interface failed [ 163.962145][ T4522] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 164.002832][ T4522] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 164.019387][ T4905] xt_cgroup: path and classid specified [ 164.160814][ T4522] usb 5-1: USB disconnect, device number 4 [ 164.798245][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.847671][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.876261][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.895817][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.909846][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.927551][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.938878][ T4916] loop1: detected capacity change from 0 to 1024 [ 164.947773][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.968402][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.994213][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.009820][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.039402][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.069857][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.089355][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.107963][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.126049][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.174212][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.202559][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.303490][ T4930] loop3: detected capacity change from 0 to 512 [ 165.329584][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.410176][ T4930] EXT4-fs (loop3): Ignoring removed oldalloc option [ 165.417319][ T4930] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 165.466324][ T4916] hfsplus: xattr searching failed [ 165.493890][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.618798][ T26] audit: type=1800 audit(1726048853.006:84): pid=4916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 165.703481][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.806516][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.848014][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.856761][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.867992][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.871361][ T4937] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 165.876339][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.891503][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.899685][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.907162][ T4930] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 165.918455][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.926311][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.934392][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.942539][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.950143][ T3615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 166.023560][ T4927] loop3: detected capacity change from 0 to 2048 [ 166.040511][ T3615] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.072439][ T4927] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.315: casefold flag without casefold feature [ 166.088400][ T4927] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 166.125272][ T4942] loop4: detected capacity change from 0 to 128 [ 166.135315][ T4927] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 166.142969][ T4927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.249856][ T3617] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.481241][ T3616] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.730107][ T3617] usb 1-1: config 0 has no interfaces? [ 166.736093][ T3617] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 166.750385][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 166.803918][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.878282][ T3617] usb 1-1: config 0 descriptor?? [ 166.897330][ T4952] IPv6: Can't replace route, no match found [ 166.931927][ T3616] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 166.999438][ T3616] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.010115][ T3616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.030478][ T3616] usb 2-1: config 1 has no interface number 0 [ 167.043251][ T3616] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.066017][ T3616] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.089540][ T3616] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.098803][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.157216][ T4250] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 167.168994][ T3616] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 167.188850][ T4250] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 167.214203][ T4911] program syz.0.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.232244][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 167.262408][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 167.272170][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 167.345729][ T3694] usb 1-1: USB disconnect, device number 6 [ 168.653558][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802127f800: rx timeout, send abort [ 168.842562][ T4985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 168.850067][ T4523] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.885877][ T4985] loop0: detected capacity change from 0 to 256 [ 169.110041][ T4523] usb 4-1: Using ep0 maxpacket: 32 [ 169.163717][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802127f800: abort rx timeout. Force session deactivation [ 169.180485][ T4982] chnl_net:caif_netlink_parms(): no params data found [ 169.191321][ T3616] snd_usb_pod 2-1:1.1: set_interface failed [ 169.206573][ T3616] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 169.250380][ T4523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.372814][ T4523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.386495][ T3616] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 170.183822][ T4523] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 170.196220][ T3616] usb 2-1: USB disconnect, device number 6 [ 170.216144][ T4523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.245410][ T4523] usb 4-1: config 0 descriptor?? [ 170.465760][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.511657][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.590361][ T4982] device bridge_slave_0 entered promiscuous mode [ 170.620067][ T3614] Bluetooth: hci3: command 0x0406 tx timeout [ 170.660365][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.683916][ T26] audit: type=1326 audit(1726048858.076:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.0.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d88caaef9 code=0x0 [ 170.696916][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.751803][ T4523] wacom 0003:056A:00F0.0002: unknown main item tag 0x0 [ 170.769813][ T3617] Bluetooth: hci1: command 0x0409 tx timeout [ 170.787090][ T4982] device bridge_slave_1 entered promiscuous mode [ 170.859939][ T4523] wacom 0003:056A:00F0.0002: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.3-1/input0 [ 170.950426][ T4982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.986725][ T4982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.000303][ T5005] loop1: detected capacity change from 0 to 8192 [ 171.054942][ T4523] usb 4-1: USB disconnect, device number 5 [ 171.092841][ T5005] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.173316][ T4982] team0: Port device team_slave_0 added [ 171.263565][ T4982] team0: Port device team_slave_1 added [ 171.345865][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.353215][ T3617] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.369312][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.407028][ T4982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.433005][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.474700][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.532011][ T4982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.610336][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 171.629929][ T4982] device hsr_slave_0 entered promiscuous mode [ 171.647519][ T4982] device hsr_slave_1 entered promiscuous mode [ 171.691529][ T4982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.703700][ T4982] Cannot create hsr debugfs directory [ 171.740025][ T3617] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 171.890784][ T5027] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 172.015623][ T4982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.370118][ T3617] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.382605][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.416029][ T4982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.423324][ T3617] usb 1-1: Manufacturer: 쌂è‡ï©šíž‡í™Žè¨Ô혔뺰ힵꂒ죂钗Ｓ⋤㾊âì¼™å³ê®Žâ–žî—Œà§²ì¢¾ä„’균븮ￜꬠꑢ윶굽ẵ왫ﰬ輚킴奋ᅘꮨ탬撛㬽帟⒣딖⺚ɟ檦ꊚ뿘茩⓸ḛ浴祼倳癅â±ì‰«á˜™å·£è„ḇ뗬஺൶î½æ³«ã§±Ü—㮲ãŸé”¨î¶–.ᙽ邰퇎㺕ffi鶩婶ʥâ¾é†€ê–Œäº¶Ê†æš£è¢Žë·‹éµžå¶½æ™£à½¦ìƒ à¿™ã­ëŒ§â·ë£·ä­·ê¥îž»î¯¦ìˆ‰è²ªà¼˜Ñ™æ‰¼äŽ ê„‚ç±§ä¹·ê› [ 172.475702][ T5037] loop2: detected capacity change from 0 to 1024 [ 172.484799][ T3617] usb 1-1: SerialNumber: à°„ [ 172.550059][ T5013] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.567011][ T5037] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 172.584568][ T5037] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 172.621099][ T4982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.859521][ T3694] Bluetooth: hci1: command 0x041b tx timeout [ 173.572690][ T3617] usb 1-1: USB disconnect, device number 7 [ 173.715187][ T4982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.536029][ T5051] loop0: detected capacity change from 0 to 1024 [ 174.568565][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 174.784819][ T5051] loop0: detected capacity change from 0 to 256 [ 175.117253][ T5051] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 175.460961][ T4982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.531090][ T4982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.572377][ T4982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.747165][ T3614] Bluetooth: hci1: command 0x040f tx timeout [ 175.748001][ T4982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.050178][ T3570] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.589893][ T3570] usb 4-1: Using ep0 maxpacket: 8 [ 176.625684][ T4982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.663522][ T4982] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.671135][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.679532][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.709991][ T3570] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 176.718469][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.745683][ T3570] usb 4-1: config 179 has no interface number 0 [ 176.752824][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.761894][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.768512][ T3570] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 176.768946][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.787685][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.788213][ T3570] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 176.801779][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.833421][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.840538][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.147448][ T5077] overlayfs: failed to get inode (-116) [ 177.154478][ T5077] overlayfs: failed to get inode (-116) [ 177.160882][ T5077] overlayfs: failed to get inode (-116) [ 177.167749][ T5077] overlayfs: failed to get inode (-116) [ 177.484706][ T3570] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.496420][ T3570] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 177.583595][ T3570] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.598067][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.620141][ T3570] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.630122][ T3570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.632976][ T4982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.660112][ T5063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.687603][ T5079] xt_NFQUEUE: number of total queues is 0 [ 177.696256][ T4982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.708770][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.717955][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.726989][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.738195][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.748853][ T5081] loop0: detected capacity change from 0 to 128 [ 177.758297][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.818491][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.834888][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.846076][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.863106][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.876941][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.889107][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.918634][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.979515][ T5079] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 178.125335][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.272177][ T5081] ext4 filesystem being mounted at /proc/285/cgroup supports timestamps until 2038 (0x7fffffff) [ 178.460057][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 178.737200][ T5096] device syzkaller0 entered promiscuous mode [ 178.769627][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.787079][ T3570] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 178.811123][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.817914][ T5081] loop0: detected capacity change from 0 to 1024 [ 178.849036][ T5096] loop2: detected capacity change from 0 to 128 [ 178.876112][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.051919][ T5081] loop0: detected capacity change from 0 to 2048 [ 179.199520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.215056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.248597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.265719][ T1075] usb 4-1: USB disconnect, device number 6 [ 179.271714][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 179.271785][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.298871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.307899][ T4982] device veth0_vlan entered promiscuous mode [ 179.324034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.333088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.346409][ T4982] device veth1_vlan entered promiscuous mode [ 179.376043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.387197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.400010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.415747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.450204][ T5112] dns_resolver: Unsupported server list version (0) [ 179.611250][ T4982] device veth0_macvtap entered promiscuous mode [ 179.692578][ T4982] device veth1_macvtap entered promiscuous mode [ 179.791356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.802865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.838044][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.976889][ T5114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.979958][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.008982][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.026010][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.037235][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.050408][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.084701][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.099141][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.110547][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.121495][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.132202][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.143335][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.154649][ T4982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.165248][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.177527][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.202415][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.249879][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.259714][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.271462][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.282235][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.303687][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.314160][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.324870][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.335074][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.346326][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.358233][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.361919][ T5127] loop3: detected capacity change from 0 to 128 [ 180.376348][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.397771][ T4982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.435150][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.444347][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.461389][ T4982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.477378][ T4982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.489161][ T4982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.498291][ T4982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.544717][ T3706] device hsr_slave_0 left promiscuous mode [ 180.555168][ T3706] device hsr_slave_1 left promiscuous mode [ 180.573902][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.581643][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.591113][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.598748][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.082336][ T3706] device bridge_slave_1 left promiscuous mode [ 183.104286][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.117110][ T3706] device bridge_slave_0 left promiscuous mode [ 184.980882][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.040929][ T5133] loop1: detected capacity change from 0 to 256 [ 185.060440][ T3706] device veth1_macvtap left promiscuous mode [ 185.066644][ T3706] device veth0_macvtap left promiscuous mode [ 185.072936][ T3706] device veth1_vlan left promiscuous mode [ 185.079104][ T3706] device veth0_vlan left promiscuous mode [ 185.086431][ T5133] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 185.157423][ T5135] loop2: detected capacity change from 0 to 512 [ 185.214973][ T4551] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 185.231699][ T4551] VFS: Lookup of '. ' in vfat loop3 would have caused loop [ 185.234774][ T5135] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 185.258975][ T5135] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 185.280920][ T5135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.332628][ T5140] loop1: detected capacity change from 0 to 128 [ 185.342925][ T5135] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.363734][ T5135] EXT4-fs (loop2): 1 truncate cleaned up [ 185.369409][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,init_itable=0x000000000000007f,block_validity,quota,,errors=continue. Quota mode: writeback. [ 185.454943][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 185.470466][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 185.484583][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.499423][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.615327][ T3706] bond0 (unregistering): Released all slaves [ 185.979852][ T4523] Bluetooth: hci2: command 0x0406 tx timeout [ 186.481806][ T5146] loop0: detected capacity change from 0 to 128 [ 186.494338][ T5135] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 186.580107][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.592257][ T5146] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 186.617584][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.663927][ T3806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.685813][ T3806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.696255][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.725668][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.174642][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.756793][ T5173] loop1: detected capacity change from 0 to 8 [ 187.841478][ T5172] loop4: detected capacity change from 0 to 1024 [ 188.361234][ T5173] SQUASHFS error: zlib decompression failed, data probably corrupt [ 188.373494][ T5173] SQUASHFS error: Failed to read block 0x9b: -5 [ 188.380005][ T5173] SQUASHFS error: Unable to read metadata cache entry [99] [ 188.387289][ T5173] SQUASHFS error: Unable to read inode 0x127 [ 188.575094][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 188.633725][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 188.694487][ T3567] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 188.762342][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 188.784050][ T5160] chnl_net:caif_netlink_parms(): no params data found [ 188.785314][ T5182] loop2: detected capacity change from 0 to 512 [ 188.815518][ T5177] loop4: detected capacity change from 0 to 4096 [ 188.867624][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 188.906336][ T3567] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 188.930544][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.938121][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.948191][ T5160] device bridge_slave_0 entered promiscuous mode [ 188.949335][ T5177] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 188.956574][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.992934][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.010825][ T5160] device bridge_slave_1 entered promiscuous mode [ 189.014385][ T5182] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.383: iget: bad extended attribute block 1 [ 189.026420][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 189.053226][ T5177] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 189.072483][ T5182] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.383: couldn't read orphan inode 15 (err -117) [ 189.097129][ T5182] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 189.110513][ T5177] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.167046][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 189.170126][ T5177] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 189.202840][ T5182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7727 vs 220 free clusters [ 189.223932][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.242332][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.252116][ T3567] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 189.266815][ T5177] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.280462][ T3567] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 189.296095][ T5177] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 189.340288][ T5160] team0: Port device team_slave_0 added [ 189.381518][ T5160] team0: Port device team_slave_1 added [ 189.400963][ T5177] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.420054][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 189.426242][ T5177] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 189.537910][ T5177] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.555479][ T5177] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 189.585727][ T5177] ntfs: volume version 3.1. [ 189.593824][ T5190] loop1: detected capacity change from 0 to 512 [ 189.604334][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.618010][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.675299][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.753554][ T5194] loop2: detected capacity change from 0 to 512 [ 189.784643][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.801520][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.385: corrupted inode contents [ 189.835713][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.888186][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.899067][ T5190] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #3: comm syz.1.385: mark_inode_dirty error [ 189.956334][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.385: corrupted inode contents [ 189.975993][ T5190] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.385: mark_inode_dirty error [ 190.213931][ T5190] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.385: Failed to acquire dquot type 0 [ 190.449437][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.385: corrupted inode contents [ 190.494202][ T5190] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #16: comm syz.1.385: mark_inode_dirty error [ 190.532263][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.385: corrupted inode contents [ 190.573104][ T5190] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.385: mark_inode_dirty error [ 190.592905][ T5194] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 190.607055][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.385: corrupted inode contents [ 190.621733][ T5194] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 190.621733][ T5194] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 190.621733][ T5194] [ 190.646094][ T5190] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 190.662417][ T5194] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 190.705630][ T5190] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.385: corrupted inode contents [ 190.780347][ T5190] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.385: mark_inode_dirty error [ 190.824556][ T5160] device hsr_slave_0 entered promiscuous mode [ 190.860806][ T5160] device hsr_slave_1 entered promiscuous mode [ 190.869694][ T5160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.883849][ T5160] Cannot create hsr debugfs directory [ 190.938696][ T5190] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 191.726111][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 191.740458][ T5190] EXT4-fs (loop1): 1 truncate cleaned up [ 191.746125][ T5190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.767419][ T5190] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 191.880799][ T3567] syz-executor (3567) used greatest stack depth: 18776 bytes left [ 192.778543][ T5160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.861518][ T5214] loop2: detected capacity change from 0 to 256 [ 192.983369][ T5208] loop4: detected capacity change from 0 to 512 [ 193.786139][ T5160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.810113][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 193.823021][ T5208] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 193.946346][ T5214] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 194.134874][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.141327][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.661833][ T5160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.738754][ T5208] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 194.760879][ T5208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 194.780954][ T5208] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.024852][ T5208] __quota_error: 13 callbacks suppressed [ 195.024864][ T5208] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 195.080066][ T5208] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.127843][ T5160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.157206][ T5208] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 195.259427][ T5208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.389: bg 0: block 40: padding at end of block bitmap is not set [ 195.383492][ T5208] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 195.431927][ T5232] loop2: detected capacity change from 0 to 2048 [ 195.467531][ T5208] EXT4-fs (loop4): 1 truncate cleaned up [ 195.488244][ T5208] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,noblock_validity,norecovery,bsddf,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 195.524564][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 195.667639][ T5160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.713809][ T5160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.765750][ T5160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.856255][ T1075] Bluetooth: hci0: command 0x0409 tx timeout [ 196.028420][ T3617] Bluetooth: hci4: command 0x0419 tx timeout [ 196.370541][ T5160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.733022][ T3706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.107151][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.320063][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.889956][ T3617] Bluetooth: hci0: command 0x041b tx timeout [ 197.917296][ T5218] device bridge_slave_0 entered promiscuous mode [ 198.427817][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.435095][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.443441][ T5218] device bridge_slave_1 entered promiscuous mode [ 198.466884][ T5258] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 198.475862][ T5258] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 198.511659][ T3706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.612545][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.624179][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.652567][ T5218] team0: Port device team_slave_0 added [ 198.661588][ T5218] team0: Port device team_slave_1 added [ 198.765938][ T3706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.010598][ T5274] overlayfs: failed to get inode (-116) [ 199.017011][ T5274] overlayfs: failed to get inode (-116) [ 199.023347][ T5274] overlayfs: failed to get inode (-116) [ 199.029590][ T5274] overlayfs: failed to get inode (-116) [ 199.085764][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.148618][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.174947][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.502662][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.515079][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.522234][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.560892][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.603673][ T5276] syz.1.406 (5276): attempted to duplicate a private mapping with mremap. This is not supported. [ 199.654365][ T3706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.775845][ T5218] device hsr_slave_0 entered promiscuous mode [ 199.804721][ T5218] device hsr_slave_1 entered promiscuous mode [ 199.823953][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.834226][ T5218] Cannot create hsr debugfs directory [ 199.851675][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 200.108560][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.203612][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.210965][ T3617] Bluetooth: hci0: command 0x040f tx timeout [ 200.246093][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.317405][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.367274][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.383471][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.419460][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.426553][ T3804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.473097][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.544724][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.562375][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.583940][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.591041][ T3804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.616916][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.723543][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.782846][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.803685][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.821001][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.844184][ T5297] loop1: detected capacity change from 0 to 512 [ 200.860578][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.879246][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.902227][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.909546][ T5297] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.931173][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.955281][ T5297] EXT4-fs (loop1): group descriptors corrupted! [ 201.037025][ T5160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.050691][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.066962][ T5307] loop2: detected capacity change from 0 to 256 [ 201.108064][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.118999][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.274928][ T5313] 9pnet: p9_fd_create_tcp (5313): problem connecting socket to 127.0.0.1 [ 201.292922][ T5311] delete_channel: no stack [ 201.426501][ T5289] chnl_net:caif_netlink_parms(): no params data found [ 201.527207][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.545708][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.647144][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.767537][ T5332] loop2: detected capacity change from 0 to 1024 [ 201.855219][ T5332] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext2 [ 201.998529][ T5334] overlayfs: failed to get inode (-116) [ 202.005098][ T5334] overlayfs: failed to get inode (-116) [ 202.011503][ T5334] overlayfs: failed to get inode (-116) [ 202.017840][ T5334] overlayfs: failed to get inode (-116) [ 202.293734][ T3616] Bluetooth: hci1: command 0x0409 tx timeout [ 202.497509][ T3615] Bluetooth: hci0: command 0x0419 tx timeout [ 202.614193][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.636654][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.693621][ T5289] device bridge_slave_0 entered promiscuous mode [ 202.719044][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.726249][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.735394][ T5289] device bridge_slave_1 entered promiscuous mode [ 202.742551][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.841741][ T5342] syz.2.417[5342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.842279][ T5342] syz.2.417[5342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.386933][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.502909][ T5350] loop2: detected capacity change from 0 to 256 [ 203.510176][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.520346][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.377152][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 204.461744][ T5160] device veth0_vlan entered promiscuous mode [ 204.717471][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.932458][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.096351][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.130893][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.199605][ T5160] device veth1_vlan entered promiscuous mode [ 205.232098][ T5218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.268576][ T5289] team0: Port device team_slave_0 added [ 205.276904][ T5218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.312677][ T5289] team0: Port device team_slave_1 added [ 205.337814][ T5218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.393545][ T5218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.421177][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.435044][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.512295][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.556447][ T5160] device veth0_macvtap entered promiscuous mode [ 205.577016][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.586115][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.605337][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.618825][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.646697][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.667843][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.699278][ T5160] device veth1_macvtap entered promiscuous mode [ 205.743544][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.841459][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.854143][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.864834][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.875579][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.889183][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.900872][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.912380][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.923158][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.933350][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.944427][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.954439][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.965357][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.984538][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.996515][ T5289] device hsr_slave_0 entered promiscuous mode [ 206.013710][ T5289] device hsr_slave_1 entered promiscuous mode [ 206.026087][ T5289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.034385][ T5289] Cannot create hsr debugfs directory [ 206.058291][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.068272][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.087860][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.104999][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.116118][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.127227][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.129786][ T4524] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.138402][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.157471][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.169265][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.180385][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.190467][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.201244][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.211637][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.227576][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.240685][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.273885][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.294167][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.310848][ T5160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.332111][ T5160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.341547][ T5160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.352274][ T5160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.388735][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.429980][ T4524] usb 2-1: Using ep0 maxpacket: 32 [ 206.450947][ T4523] Bluetooth: hci1: command 0x040f tx timeout [ 206.542490][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.550735][ T4524] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 206.576447][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.586349][ T4524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.628641][ T4524] usb 2-1: config 0 descriptor?? [ 206.633537][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.694782][ T4524] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 206.714660][ T3706] device hsr_slave_0 left promiscuous mode [ 206.724920][ T3706] device hsr_slave_1 left promiscuous mode [ 206.734150][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.748073][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.761592][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.769514][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.785662][ T3706] device bridge_slave_1 left promiscuous mode [ 206.794791][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.809799][ T3706] device bridge_slave_0 left promiscuous mode [ 206.816558][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.866641][ T3706] device hsr_slave_0 left promiscuous mode [ 206.876365][ T3706] device hsr_slave_1 left promiscuous mode [ 206.893364][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.906481][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.916401][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.929457][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.938876][ T3706] device bridge_slave_1 left promiscuous mode [ 206.945338][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.964295][ T3706] device bridge_slave_0 left promiscuous mode [ 206.979873][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.017824][ T3706] device veth1_macvtap left promiscuous mode [ 207.029211][ T3706] device veth0_macvtap left promiscuous mode [ 207.035531][ T3706] device veth1_vlan left promiscuous mode [ 207.049461][ T3706] device veth0_vlan left promiscuous mode [ 207.069665][ T3706] device veth1_macvtap left promiscuous mode [ 207.078569][ T3706] device veth0_macvtap left promiscuous mode [ 207.087864][ T3706] device veth1_vlan left promiscuous mode [ 207.100067][ T3706] device veth0_vlan left promiscuous mode [ 207.743895][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 207.777940][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 207.807073][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.837367][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.956363][ T3706] bond0 (unregistering): Released all slaves [ 208.530367][ T4522] Bluetooth: hci1: command 0x0419 tx timeout [ 208.609899][ T4524] gspca_vc032x: reg_w err -71 [ 208.623576][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.662361][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.706873][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.752631][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.768362][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.778484][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.784093][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.789472][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.794888][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.800428][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.805947][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.811342][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.816792][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.822148][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.827540][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.833697][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.838959][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.844367][ T4524] gspca_vc032x: I2c Bus Busy Wait 00 [ 208.849649][ T4524] gspca_vc032x: Unknown sensor... [ 208.854936][ T4524] vc032x: probe of 2-1:0.0 failed with error -22 [ 208.871145][ T4524] usb 2-1: USB disconnect, device number 7 [ 208.891605][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 208.941562][ T5384] loop2: detected capacity change from 0 to 1024 [ 208.948754][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 208.962275][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.977276][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.067565][ T3706] bond0 (unregistering): Released all slaves [ 209.166462][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.176449][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.185019][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.192233][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.201179][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.211128][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.219840][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.226897][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.246542][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.261022][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.271487][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.291366][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.311689][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.322543][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.356639][ T5289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.369247][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.381366][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.390830][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.411666][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.421429][ T5218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.426911][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.432044][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.457193][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.465217][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.479494][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.489124][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.499152][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.508807][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.517226][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.537865][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.568287][ T5289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.677448][ T5289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.808308][ T3654] hfsplus: b-tree write err: -5, ino 4 [ 209.821116][ T5289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.852143][ T3654] hfsplus: b-tree write err: -5, ino 8 [ 211.198449][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.246463][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.487916][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.572321][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.595270][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.668583][ T5408] netlink: 'syz.3.433': attribute type 12 has an invalid length. [ 211.715449][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.723658][ T5408] 9pnet: Insufficient options for proto=fd [ 211.731503][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.752383][ T5218] device veth0_vlan entered promiscuous mode [ 211.761971][ T5289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.768488][ T5408] loop3: detected capacity change from 0 to 512 [ 211.781786][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.790091][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.999802][ T5289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.015227][ T5218] device veth1_vlan entered promiscuous mode [ 212.022331][ T5289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.030719][ T5408] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.433: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 212.041257][ T5289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.056539][ T5408] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.433: couldn't read orphan inode 15 (err -117) [ 212.069557][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.080903][ T5408] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 212.121721][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.143015][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.143964][ T5408] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.433: Directory hole found for htree leaf block 0 [ 212.159645][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.184016][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.204072][ T5218] device veth0_macvtap entered promiscuous mode [ 212.217992][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.244523][ T5218] device veth1_macvtap entered promiscuous mode [ 212.281060][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.293266][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.304291][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.317233][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.327426][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.338327][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.348426][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.359301][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.374372][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.385915][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.414907][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.429123][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.479358][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.496147][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.496168][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.496179][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.496190][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.496200][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.496211][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.496222][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.496234][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.496243][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.496255][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.497382][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.497469][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.497998][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.514167][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.514364][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.514382][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.514396][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.015844][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.031376][ T5289] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.057654][ T5289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.057678][ T5289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.165106][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.165612][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.166077][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.166365][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.166553][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.166578][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.166790][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.167062][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.167235][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.167252][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.167442][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.167838][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.168212][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.169128][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.169480][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.175247][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.175604][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.175895][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.176265][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.176525][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.204231][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.204790][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.205543][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.334112][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.347407][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.372932][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.383044][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.431772][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.432420][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.615963][ T5452] loop3: detected capacity change from 0 to 2048 [ 216.160328][ T5452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.160426][ T5452] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 216.235370][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.235505][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.296881][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.498994][ T5460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 217.286359][ T5468] loop3: detected capacity change from 0 to 2048 [ 220.487099][ T5478] loop3: detected capacity change from 0 to 1024 [ 220.591288][ T5480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.448'. [ 220.656688][ T5484] device team_slave_0 entered promiscuous mode [ 220.663548][ T5484] device team_slave_1 entered promiscuous mode [ 220.832736][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.853979][ T5488] loop3: detected capacity change from 0 to 256 [ 220.860454][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.953532][ T5489] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 220.986764][ T5489] device team_slave_0 left promiscuous mode [ 221.000373][ T5489] device team_slave_1 left promiscuous mode [ 221.176906][ T5489] device team_slave_0 entered promiscuous mode [ 221.183154][ T5489] device team_slave_1 entered promiscuous mode [ 221.199282][ T5489] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.234339][ T5489] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.248620][ T5289] device veth0_vlan entered promiscuous mode [ 221.276990][ T5492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 221.297184][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.427642][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.469601][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.522964][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.579225][ T5289] device veth1_vlan entered promiscuous mode [ 221.643366][ T5496] loop3: detected capacity change from 0 to 1024 [ 221.699663][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.718301][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.748214][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.783924][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.839615][ T5289] device veth0_macvtap entered promiscuous mode [ 221.863615][ T5496] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 221.888883][ T5496] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 221.930185][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.941902][ T5289] device veth1_macvtap entered promiscuous mode [ 221.951918][ T5482] device team_slave_0 left promiscuous mode [ 221.958097][ T5482] device team_slave_1 left promiscuous mode [ 222.116963][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.164650][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.525502][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.562468][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.610029][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.665358][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.703574][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.743371][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.753268][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.763815][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.773741][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.784201][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.797681][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.812386][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.858403][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.879008][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.910324][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.925104][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.951364][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.972563][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.989822][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.006800][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.017552][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.036457][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.050755][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.062770][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.074699][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.093603][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.134853][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.173854][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.193370][ T5522] loop3: detected capacity change from 0 to 512 [ 223.213199][ T5289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.227673][ T5289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.247870][ T5289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.267003][ T5289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.329934][ T4524] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.340331][ T5522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.357256][ T5528] netlink: 80 bytes leftover after parsing attributes in process `syz.1.460'. [ 223.370212][ T5522] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 223.452732][ T5522] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.456: Directory hole found for htree leaf block 0 [ 223.475479][ T5522] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.456: Directory hole found for htree leaf block 0 [ 223.492655][ T3805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.503962][ T3805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.530632][ T5522] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.456: Directory hole found for htree leaf block 0 [ 223.533764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.551094][ T1075] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.578743][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 223.592038][ T5534] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.456: Directory hole found for htree leaf block 0 [ 223.646499][ T3804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.673503][ T3804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.684940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.694610][ T5522] input: syz0 as /devices/virtual/input/input12 [ 223.752900][ T4524] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.776401][ T4524] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.872403][ T5538] loop4: detected capacity change from 0 to 256 [ 223.880342][ T4524] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.889385][ T4524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.910921][ T4524] usb 1-1: SerialNumber: syz [ 223.974226][ T5538] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 224.029900][ T1075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.049871][ T1075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.059638][ T1075] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 224.226987][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.287640][ T1075] usb 3-1: config 0 descriptor?? [ 224.552358][ T4524] usb 1-1: skipping empty audio interface (v1) [ 224.595377][ T4524] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 224.608189][ T5548] loop4: detected capacity change from 0 to 1024 [ 224.618044][ T4524] usb 1-1: USB disconnect, device number 8 [ 224.680035][ T4064] udevd[4064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.791677][ T1075] logitech 0003:046D:C294.0003: unknown main item tag 0x0 [ 224.798833][ T1075] logitech 0003:046D:C294.0003: item fetching failed at offset 5/7 [ 224.838042][ T1075] logitech 0003:046D:C294.0003: parse failed [ 224.844572][ T1075] logitech: probe of 0003:046D:C294.0003 failed with error -22 [ 224.847699][ T5550] loop4: detected capacity change from 0 to 1024 [ 224.880051][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 224.961595][ T5550] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 224.990615][ T5550] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 225.004325][ T3617] usb 3-1: USB disconnect, device number 3 [ 225.099953][ T5552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.467'. [ 225.256549][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 226.519975][ T21] usb 2-1: config 0 has an invalid interface number: 115 but max is 1 [ 226.536813][ T21] usb 2-1: config 0 has an invalid interface number: 41 but max is 1 [ 226.559670][ T21] usb 2-1: config 0 has no interface number 0 [ 226.579188][ T5562] netlink: 80 bytes leftover after parsing attributes in process `syz.2.470'. [ 226.608542][ T21] usb 2-1: config 0 has no interface number 1 [ 226.626408][ T21] usb 2-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 226.652371][ T21] usb 2-1: config 0 interface 115 has no altsetting 0 [ 226.748799][ T5567] binder: 5563:5567 ioctl c0306201 0 returned -14 [ 226.960497][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63 [ 227.123053][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.207328][ T21] usb 2-1: Product: syz [ 227.253807][ T21] usb 2-1: Manufacturer: syz [ 227.302827][ T21] usb 2-1: SerialNumber: syz [ 227.448998][ T21] usb 2-1: config 0 descriptor?? [ 227.623012][ T21] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.115/input/input13 [ 227.874093][ T3011] bcm5974 2-1:0.115: could not read from device [ 228.100139][ T3011] bcm5974 2-1:0.115: could not read from device [ 228.294883][ T5586] loop0: detected capacity change from 0 to 1024 [ 228.891683][ T21] usb 2-1: USB disconnect, device number 8 [ 228.898712][ T3011] bcm5974 2-1:0.115: could not read from device [ 228.910693][ T3011] bcm5974 2-1:0.115: could not read from device [ 230.181594][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'. [ 230.217545][ T5595] UHID_CREATE from different security context by process 15 (syz.4.480), this is not allowed. [ 231.059955][ T5604] netlink: 80 bytes leftover after parsing attributes in process `syz.0.482'. [ 232.032709][ T3580] Bluetooth: unknown link type 28 [ 232.075562][ T3654] device hsr_slave_0 left promiscuous mode [ 232.087112][ T3580] BUG: sleeping function called from invalid context at net/core/sock.c:3252 [ 232.096803][ T3580] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3580, name: kworker/u5:5 [ 232.106370][ T3580] 6 locks held by kworker/u5:5/3580: [ 232.111688][ T3580] #0: ffff88807d2cd938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 232.122167][ T3580] #1: ffffc90002ee7d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 232.133646][ T3580] #2: ffff88801f7dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xab/0x9b0 [ 232.143953][ T3580] #3: ffffffff8db7ac68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45f/0x9b0 [ 232.155013][ T3580] #4: ffff888078106e20 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x27c/0xad0 [ 232.164554][ T3580] #5: ffff888078db2120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x456/0xad0 [ 232.175750][ T3580] Preemption disabled at: [ 232.175762][ T3580] [<0000000000000000>] 0x0 [ 232.176909][ T5620] loop2: detected capacity change from 0 to 2048 [ 232.180204][ T3580] CPU: 0 PID: 3580 Comm: kworker/u5:5 Not tainted 5.15.166-syzkaller #0 [ 232.199232][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.209288][ T3580] Workqueue: hci3 hci_rx_work [ 232.213973][ T3580] Call Trace: [ 232.217262][ T3580] [ 232.220190][ T3580] dump_stack_lvl+0x1e3/0x2d0 [ 232.224868][ T3580] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.230495][ T3580] ? panic+0x860/0x860 [ 232.234573][ T3580] ___might_sleep+0x547/0x6a0 [ 232.239249][ T3580] ? __might_sleep+0xc0/0xc0 [ 232.244007][ T3580] ? __lock_acquire+0x1ff0/0x1ff0 [ 232.249023][ T3580] ? do_raw_spin_lock+0x14a/0x370 [ 232.254039][ T3580] ? queue_work_node+0x420/0x420 [ 232.258976][ T3580] ? __rwlock_init+0x140/0x140 [ 232.263739][ T3580] lock_sock_nested+0x5b/0x100 [ 232.268502][ T3580] sco_connect_cfm+0x456/0xad0 [ 232.273274][ T3580] ? sco_skb_put_cmsg+0x90/0x90 [ 232.278132][ T3580] ? sco_skb_put_cmsg+0x90/0x90 [ 232.282978][ T3580] hci_sync_conn_complete_evt+0x4ce/0x9b0 [ 232.288703][ T3580] hci_event_packet+0xa12/0x1550 [ 232.293643][ T3580] ? rcu_lock_release+0x20/0x20 [ 232.298498][ T3580] ? hci_send_to_monitor+0x99/0x4d0 [ 232.303691][ T3580] hci_rx_work+0x232/0x990 [ 232.308110][ T3580] process_one_work+0x8a1/0x10c0 [ 232.313055][ T3580] ? worker_detach_from_pool+0x260/0x260 [ 232.318686][ T3580] ? _raw_spin_lock_irqsave+0x120/0x120 [ 232.324225][ T3580] ? kthread_data+0x4e/0xc0 [ 232.328726][ T3580] ? wq_worker_running+0x97/0x170 [ 232.333745][ T3580] worker_thread+0xaca/0x1280 [ 232.338438][ T3580] kthread+0x3f6/0x4f0 [ 232.342499][ T3580] ? rcu_lock_release+0x20/0x20 [ 232.347341][ T3580] ? kthread_blkcg+0xd0/0xd0 [ 232.351925][ T3580] ret_from_fork+0x1f/0x30 [ 232.356364][ T3580] [ 232.379004][ T3654] device hsr_slave_1 left promiscuous mode [ 232.387330][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.450240][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.518677][ T5611] [ 232.521014][ T5611] ====================================================== [ 232.528003][ T5611] WARNING: possible circular locking dependency detected [ 232.534996][ T5611] 5.15.166-syzkaller #0 Tainted: G W [ 232.541572][ T5611] ------------------------------------------------------ [ 232.548927][ T5611] syz.1.485/5611 is trying to acquire lock: [ 232.554788][ T5611] ffff888078106e20 (&conn->lock#2){+.+.}-{2:2}, at: __sco_sock_close+0x31b/0x540 [ 232.563897][ T5611] [ 232.563897][ T5611] but task is already holding lock: [ 232.571248][ T5611] ffff88807634d120 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}, at: __sco_sock_close+0xc9/0x540 [ 232.580875][ T5611] [ 232.580875][ T5611] which lock already depends on the new lock. [ 232.580875][ T5611] [ 232.591253][ T5611] [ 232.591253][ T5611] the existing dependency chain (in reverse order) is: [ 232.600382][ T5611] [ 232.600382][ T5611] -> #2 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}: [ 232.608560][ T5611] lock_acquire+0x1db/0x4f0 [ 232.613587][ T5611] lock_sock_nested+0x44/0x100 [ 232.618853][ T5611] bt_accept_dequeue+0xfa/0x5a0 [ 232.624202][ T5611] __sco_sock_close+0xb3/0x540 [ 232.629496][ T5611] sco_sock_release+0xaf/0x310 [ 232.634841][ T5611] sock_close+0xcd/0x230 [ 232.639578][ T5611] __fput+0x3fe/0x8e0 [ 232.644056][ T5611] task_work_run+0x129/0x1a0 [ 232.649165][ T5611] exit_to_user_mode_loop+0x106/0x130 [ 232.655031][ T5611] exit_to_user_mode_prepare+0xb1/0x140 [ 232.661094][ T5611] syscall_exit_to_user_mode+0x5d/0x240 [ 232.667161][ T5611] do_syscall_64+0x47/0xb0 [ 232.672075][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.678483][ T5611] [ 232.678483][ T5611] -> #1 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 232.687570][ T5611] lock_acquire+0x1db/0x4f0 [ 232.692927][ T5611] lock_sock_nested+0x44/0x100 [ 232.698197][ T5611] sco_connect_cfm+0x456/0xad0 [ 232.703463][ T5611] hci_sync_conn_complete_evt+0x4ce/0x9b0 [ 232.709677][ T5611] hci_event_packet+0xa12/0x1550 [ 232.715137][ T5611] hci_rx_work+0x232/0x990 [ 232.720099][ T5611] process_one_work+0x8a1/0x10c0 [ 232.725544][ T5611] worker_thread+0xaca/0x1280 [ 232.730739][ T5611] kthread+0x3f6/0x4f0 [ 232.735307][ T5611] ret_from_fork+0x1f/0x30 [ 232.740225][ T5611] [ 232.740225][ T5611] -> #0 (&conn->lock#2){+.+.}-{2:2}: [ 232.747680][ T5611] validate_chain+0x1649/0x5930 [ 232.753030][ T5611] __lock_acquire+0x1295/0x1ff0 [ 232.758379][ T5611] lock_acquire+0x1db/0x4f0 [ 232.763381][ T5611] _raw_spin_lock+0x2a/0x40 [ 232.768389][ T5611] __sco_sock_close+0x31b/0x540 [ 232.773764][ T5611] __sco_sock_close+0x131/0x540 [ 232.779111][ T5611] sco_sock_release+0xaf/0x310 [ 232.784368][ T5611] sock_close+0xcd/0x230 [ 232.789106][ T5611] __fput+0x3fe/0x8e0 [ 232.793583][ T5611] task_work_run+0x129/0x1a0 [ 232.798668][ T5611] exit_to_user_mode_loop+0x106/0x130 [ 232.804535][ T5611] exit_to_user_mode_prepare+0xb1/0x140 [ 232.810577][ T5611] syscall_exit_to_user_mode+0x5d/0x240 [ 232.816624][ T5611] do_syscall_64+0x47/0xb0 [ 232.821550][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.827946][ T5611] [ 232.827946][ T5611] other info that might help us debug this: [ 232.827946][ T5611] [ 232.838153][ T5611] Chain exists of: [ 232.838153][ T5611] &conn->lock#2 --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> sk_lock-AF_BLUETOOTH [ 232.838153][ T5611] [ 232.852913][ T5611] Possible unsafe locking scenario: [ 232.852913][ T5611] [ 232.860337][ T5611] CPU0 CPU1 [ 232.865676][ T5611] ---- ---- [ 232.871018][ T5611] lock(sk_lock-AF_BLUETOOTH); [ 232.875860][ T5611] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 232.884241][ T5611] lock(sk_lock-AF_BLUETOOTH); [ 232.891582][ T5611] lock(&conn->lock#2); [ 232.895801][ T5611] [ 232.895801][ T5611] *** DEADLOCK *** [ 232.895801][ T5611] [ 232.903913][ T5611] 3 locks held by syz.1.485/5611: [ 232.908906][ T5611] #0: ffff8880713eb210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 232.919060][ T5611] #1: ffff888078db2120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_release+0x56/0x310 [ 232.930249][ T5611] #2: ffff88807634d120 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}, at: __sco_sock_close+0xc9/0x540 [ 232.940322][ T5611] [ 232.940322][ T5611] stack backtrace: [ 232.946181][ T5611] CPU: 0 PID: 5611 Comm: syz.1.485 Tainted: G W 5.15.166-syzkaller #0 [ 232.955623][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.965652][ T5611] Call Trace: [ 232.968915][ T5611] [ 232.971824][ T5611] dump_stack_lvl+0x1e3/0x2d0 [ 232.976477][ T5611] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.982100][ T5611] ? print_circular_bug+0x12b/0x1a0 [ 232.987279][ T5611] check_noncircular+0x2f8/0x3b0 [ 232.992193][ T5611] ? add_chain_block+0x850/0x850 [ 232.997104][ T5611] ? lockdep_lock+0x11f/0x2a0 [ 233.001768][ T5611] ? mark_lock+0x98/0x340 [ 233.006070][ T5611] ? _find_first_zero_bit+0xcf/0xf0 [ 233.011249][ T5611] validate_chain+0x1649/0x5930 [ 233.016120][ T5611] ? reacquire_held_locks+0x660/0x660 [ 233.021554][ T5611] ? __mod_timer+0xa8e/0xeb0 [ 233.026135][ T5611] ? __lock_acquire+0x1ff0/0x1ff0 [ 233.031131][ T5611] ? debug_object_assert_init+0x97/0x420 [ 233.036736][ T5611] ? do_raw_spin_unlock+0x137/0x8b0 [ 233.041923][ T5611] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 233.047379][ T5611] ? mark_lock+0x98/0x340 [ 233.051706][ T5611] __lock_acquire+0x1295/0x1ff0 [ 233.056538][ T5611] lock_acquire+0x1db/0x4f0 [ 233.061015][ T5611] ? __sco_sock_close+0x31b/0x540 [ 233.066019][ T5611] ? read_lock_is_recursive+0x10/0x10 [ 233.071365][ T5611] ? queue_delayed_work_on+0x171/0x250 [ 233.076801][ T5611] ? lockdep_hardirqs_on+0x94/0x130 [ 233.081978][ T5611] ? queue_delayed_work_on+0x1f9/0x250 [ 233.087415][ T5611] ? __cancel_work+0x26a/0x380 [ 233.092155][ T5611] ? delayed_work_timer_fn+0x80/0x80 [ 233.097427][ T5611] ? __cancel_work+0x2ef/0x380 [ 233.102280][ T5611] ? cancel_work+0x20/0x20 [ 233.106680][ T5611] ? __sco_sock_close+0xc9/0x540 [ 233.111603][ T5611] ? _local_bh_enable+0xa0/0xa0 [ 233.116434][ T5611] _raw_spin_lock+0x2a/0x40 [ 233.120911][ T5611] ? __sco_sock_close+0x31b/0x540 [ 233.125912][ T5611] __sco_sock_close+0x31b/0x540 [ 233.130741][ T5611] __sco_sock_close+0x131/0x540 [ 233.135577][ T5611] sco_sock_release+0xaf/0x310 [ 233.140324][ T5611] sock_close+0xcd/0x230 [ 233.144543][ T5611] ? sock_mmap+0x90/0x90 [ 233.148759][ T5611] __fput+0x3fe/0x8e0 [ 233.152719][ T5611] task_work_run+0x129/0x1a0 [ 233.157286][ T5611] exit_to_user_mode_loop+0x106/0x130 [ 233.162658][ T5611] exit_to_user_mode_prepare+0xb1/0x140 [ 233.168186][ T5611] syscall_exit_to_user_mode+0x5d/0x240 [ 233.173707][ T5611] do_syscall_64+0x47/0xb0 [ 233.178098][ T5611] ? clear_bhb_loop+0x15/0x70 [ 233.182843][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.188835][ T5611] RIP: 0033:0x7f76e1381ef9 [ 233.193242][ T5611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.212838][ T5611] RSP: 002b:00007ffd36186f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.221229][ T5611] RAX: 0000000000000000 RBX: 00007f76e153ba80 RCX: 00007f76e1381ef9 [ 233.229181][ T5611] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 233.237252][ T5611] RBP: 00007f76e153ba80 R08: 0000000000000006 R09: 00007ffd361871ff [ 233.245206][ T5611] R10: 00000000005f3cf0 R11: 0000000000000246 R12: 0000000000038d60 [ 233.253185][ T5611] R13: 00007ffd36187010 R14: 0000000000000032 R15: ffffffffffffffff [ 233.261216][ T5611] [ 233.278775][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.291116][ T5620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.307239][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.344457][ T3654] device bridge_slave_1 left promiscuous mode [ 233.386621][ T26] audit: type=1800 audit(1726048920.776:87): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.486" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 233.424233][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.463224][ T3654] device bridge_slave_0 left promiscuous mode [ 233.470611][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.477954][ T26] audit: type=1800 audit(1726048920.796:88): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.486" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 233.513386][ T3654] device hsr_slave_0 left promiscuous mode [ 233.519676][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.538604][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.548728][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.558701][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.568041][ T3654] device bridge_slave_1 left promiscuous mode [ 233.582409][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.592314][ T3654] device bridge_slave_0 left promiscuous mode [ 233.598562][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.610859][ T3654] device veth1_macvtap left promiscuous mode [ 233.616925][ T3654] device veth0_macvtap left promiscuous mode [ 233.623141][ T3654] device veth1_vlan left promiscuous mode [ 233.628930][ T3654] device veth0_vlan left promiscuous mode [ 233.656695][ T3654] device veth1_macvtap left promiscuous mode [ 233.662942][ T3654] device veth0_macvtap left promiscuous mode [ 233.668999][ T3654] device veth1_vlan left promiscuous mode [ 233.674836][ T3654] device veth0_vlan left promiscuous mode [ 233.810501][ T3654] team0 (unregistering): Port device team_slave_1 removed [ 233.820644][ T3654] team0 (unregistering): Port device team_slave_0 removed [ 233.830876][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.845083][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.885006][ T3654] bond0 (unregistering): Released all slaves [ 233.964309][ T3654] team0 (unregistering): Port device team_slave_1 removed [ 233.975736][ T3654] team0 (unregistering): Port device team_slave_0 removed [ 233.986486][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.998171][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.036516][ T3654] bond0 (unregistering): Released all slaves [ 234.049802][ T3616] Bluetooth: hci3: command 0x0409 tx timeout [ 236.129875][ T21] Bluetooth: hci3: command 0x0406 tx timeout