last executing test programs: 19.566258925s ago: executing program 2 (id=5364): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0xffffffff) 19.387289089s ago: executing program 2 (id=5366): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40)="4a29bd560f", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x88) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000640)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad5", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0x80405600, &(0x7f0000000100)={0x1, 0x0, {0x100, 0x4, 0x1012, 0x0, 0x4, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x50, r8, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x5}, [{@nsim={{0xe}, {0x2c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) 15.238091431s ago: executing program 2 (id=5374): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x550, &(0x7f0000000b80)="$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") r0 = socket$inet(0x2b, 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) sendmsg$unix(r4, &(0x7f00000016c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80442, &(0x7f0000000400)={'trans=virtio,', {[{@access_client}, {@msize={'msize', 0x3d, 0xe}}, {@access_client}, {@uname={'uname', 0x3d, 'udf\x00'}}, {@cache_loose}, {}, {@noextend}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}]}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x3) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 15.190542655s ago: executing program 1 (id=5375): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0xffffffff) lseek(r2, 0x8000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) chdir(&(0x7f0000000000)='./file0\x00') r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="925cee53ea9c34564dacc97525b57a38c87c035c46d4be67ba000d1e7e305c87e809d866bf5877f9efea024248d35d39b2d0825a7fecf21484136b0ccef26bd0e4fa6ed5fc080cc96b719e43d9c75213183847dcaa8feec4056f2ad71b6500e6f54f00ecd3e9eef27ce7f3d6a44be60d852de0be12ca41f50d504d1a339354a70e8a293f56bbf0d3e98dacb65d19fde5fcae8b4b04e6b16b59dcff6ebb7f8f43", @ANYRES8=0x0, @ANYRESHEX, @ANYRES8=r6, @ANYRES16=r7], 0x0, 0x1f4, &(0x7f0000000440)="$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") 14.241522665s ago: executing program 2 (id=5376): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[], 0xe, 0x2a9, &(0x7f0000006540)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x3}, 'port0\x00', 0xa0bf83d7d46f2cd7, 0x400, 0x3, 0x0, 0xfffffffe, 0x2000}) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e0001000000"], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 13.267016868s ago: executing program 2 (id=5377): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0xffffffff) lseek(r2, 0x8000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x10, r6, 0x0) 10.536624999s ago: executing program 1 (id=5382): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000000380)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bf5cb8031e51b257f40", 0x48}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0xde}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c0, 0x4c, 0x1a, 0x1c0, 0x73, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'wg2\x00', 'ip6gretap0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@udp={{0x30}, {[], [], 0x4}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@private2, [], @ipv4=@private, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'ipvlan1\x00', 'pimreg1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000f40)='./file0\x00') 8.719691632s ago: executing program 1 (id=5384): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40)="4a29bd560f", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x88) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000640)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad5", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0x80405600, &(0x7f0000000100)={0x1, 0x0, {0x100, 0x4, 0x1012, 0x0, 0x4, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x50, r8, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x5}, [{@nsim={{0xe}, {0x2c, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) 8.615589761s ago: executing program 4 (id=5322): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x3, 0x20000000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xef, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.474478588s ago: executing program 4 (id=5388): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x550, &(0x7f0000000b80)="$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") r0 = socket$inet(0x2b, 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) sendmsg$unix(r4, &(0x7f00000016c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80442, &(0x7f0000000400)={'trans=virtio,', {[{@access_client}, {@msize={'msize', 0x3d, 0xe}}, {@access_client}, {@uname={'uname', 0x3d, 'udf\x00'}}, {@cache_loose}, {}, {@noextend}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}]}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x3) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 6.847376631s ago: executing program 1 (id=5389): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0xffffffff) lseek(r2, 0x8000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x10, r6, 0x0) 5.993250193s ago: executing program 4 (id=5391): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="6870f038c53094b1edfba05540c3fbcd107be1021bad83bb6e88af42b2e2209284b03a6d4aa2cf5b65c8e62309de960fc279cfddc119510b1f899581ada38248cc6f0997e197bf09e647a8f8ce802fcb833ea90711ab59a9beac79fa634d8a276466790a3a4c7ae040e9ad09d5b859830cb8a93fe75021f316756e345200a6d0f0bc1015371f443b2e6f6bc17dcec3dee88f320459b9981109bd5c6e7704d68e4c271d3a13063860877edf38ab9067e70806", 0xb2}, {&(0x7f0000000600)="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", 0x14d}, {&(0x7f0000001180)="40b45d991c3dbecd3dfbd178ebd3837571244b7fe8a505456fd09154c6ce3ed4947da069d7b23b4f667650656ae46eb7c393e09b025cbbf580956bb303d7d565ce6aab2bee9137146f50db0e31a6c23afeb1fdb62250c5aba7ac9a987947760d4122924bb15ade5d0d67cb6f2992065f2fa8b106c7c29e7d5a816c7cc3396ec9626cbf7914221ddffad4d81e70095110cdd407a6f2dddfe05248cac3a390594920e3d17d8a6bc9d3ec893730bb78deea6f2a9696ddf4f5a136a9a130550c8daf8211056d5e57193f7fd90c88526d4bc0aa4c1f748a3fc111bb4aab090d8ffd53b155e71eb4355db2b19cd5212b9fea9b4710751a36e01947dff2b132bcf86746c8f1d19a297dcd07e9cad67ce6eb912036d7c42013ec1b80e78e06f10180543119f46d17eff13de6dd2eda779c6fc70c55c34923a780b94dfac01f0e11e4dfd2044dba45027c66f542fb75ab9db0e1ab1e28edb7e397d11f659043f1849fda143ba582ee723365fccbebe8c808e408f4dc05017adbe45f3717a579d52d85007d630536fd2ee4fdb18393e1f4faa371195aca54c7809aabe25b850a2b8324163b768c206d3d3fa7b64c79e8cc34032579e1ac5554129ac9dcf7591af7471a217e5376ed1e37e21b72814d0478100da6e883623c96a082c2658d6375967040021d3818f34db4b6da280fe4daeaee38e97db097cb79a4b6d636c3f6bf4c81e4a2a2634a5e25df2b0aa4813362d7b9c5ba491675062bcc93fbfb156b6c383498a978a2d26386f03e3e33d9de0ad0d6ae004765ce38b13cdd72450a125ed90cf7f3dcb4607f483ad3b22843bef46833a5c9b0111ac6fea4bfc36270591a7b19b40822607bc20af5a2640e1a36092ec507154b3886256b937779d4cd5c40af9646b99d717c6ed92d1633c6ae670ae3b99b3cc31043a13959e9d97d47ee47e5cbd009408406f54259b7af1a3237933cd1455f15ed744242bd02eb4e63e7116213aa11679c73f806aff1f8d744c3c943894d795126047db4e0d55f75f3edc9c8b17fd7085543dc51b8be61bd396582e5a0c251cff13fbfe52b94962d70d9a77d7a48820a61811555e46e8ac3c0fa277ac460cf12cdf9e03c19d5cc404d2263b8e347753c5a1be26583e6d27ad521f4bfa57f5954c5c247eec6b250f97d85e71860d302b19d4decede6998f23e2df348a78f7933aed297bb628531b921bf5f1b1609bec92a2e3b4ef7c72c6ad2c47d50166aad43ef9249bd5f610234c9d21270aaf19392e3fa59e155dd15e5602a7d4dc1e5e520e61bba01659e6632d86ce761cc8996e4111cb88a4b5c0df1c79bc9ae495ad7b276972bed9d92bd714ab762918dcab5a9bba6f62b57622ffb63a4baf19461c9eed6d9deed3eb0e290f7cbd98f6c98acbdd575d01ab98dd87e308d5e1c46b229931d2a90b5ceb64a1bd424491050ab6fec85c12acfc25d24ae3a659a6dc81a0c164b6b6d627f0ae4a821cdbf16e94e6df2288ba17181e35474d8d529a74c68a30f99f97b183e7454b5fde4ab86500a89d916db80ffba4a1da5fdd586f", 0x44b}], 0x3}}], 0x1, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x40002061, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000005c0), 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) listen(r6, 0x0) ppoll(&(0x7f00000002c0)=[{r6}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/152, 0x98}, {0x0}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x4}}], 0x1, 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0x2b, 0x3}) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) bind$can_raw(r0, &(0x7f0000000000), 0x10) close(r0) 5.745010814s ago: executing program 2 (id=5392): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0xffffffff) lseek(r2, 0x8000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) chdir(&(0x7f0000000000)='./file0\x00') r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="925cee53ea9c34564dacc97525b57a38c87c035c46d4be67ba000d1e7e305c87e809d866bf5877f9efea024248d35d39b2d0825a7fecf21484136b0ccef26bd0e4fa6ed5fc080cc96b719e43d9c75213183847dcaa8feec4056f2ad71b6500e6f54f00ecd3e9eef27ce7f3d6a44be60d852de0be12ca41f50d504d1a339354a70e8a293f56bbf0d3e98dacb65d19fde5fcae8b4b04e6b16b59dcff6ebb7f8f43", @ANYRES8=0x0, @ANYRESHEX, @ANYRES8=r6, @ANYRES16], 0x0, 0x1f4, &(0x7f0000000440)="$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") 5.152649774s ago: executing program 0 (id=5394): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.051551073s ago: executing program 3 (id=5395): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100004e20502500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x7f) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x0, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x3}]}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mlock(&(0x7f00002bf000/0x4000)=nil, 0x4000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/175, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x80, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x6, 0x800000000000002}, 0x0, 0x6e6bc0, 0x1}, {{@in6=@remote}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x8}}, 0xe4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r8, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r10, 0x205, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x70, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x881) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 4.894570526s ago: executing program 4 (id=5396): mkdirat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[{@max={'max', 0x3d, 0xffffffff}}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffff1, &(0x7f00000000c0)={&(0x7f00000005c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x2f, 0x8, 0x1, 0x0, 0x42, @remote, @remote, 0x1, 0x20, 0x2, 0xf165}}) getpid() syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaa0800aaaaaa04fa86000000ff00000000000000000000000000000000fea30000000000000000000000000043a43a7ae4156402aeb8ddc4bbd2e991da2c57c4f8b57eb4f98ea607d8b38394c07bedc917e947b2ca550000000000000300"], 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0x0, 0x8000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) read$dsp(r6, 0x0, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000003c0)={0x2, 0x2, 0x3, "3e9f5fa77987b80f59279d4ecde071f35b56ec20e45f3163e6e5cd8cc36fa1f8", 0x34343459}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000000)=ANY=[], 0x40) 4.625986709s ago: executing program 0 (id=5397): r0 = socket$kcm(0x11, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000500)="eae9a1000037017aacf30fa6c0f30fc7720dc4e118541bd3a9f4a60000660f1c460d66f30f2b2b0f09660f01df", 0x2d}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf}}) r6 = dup(r4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r6, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 4.49287099s ago: executing program 3 (id=5398): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x3, 0x20000000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xef, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.389112269s ago: executing program 0 (id=5399): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x3, 0x20000000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xef, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.317639985s ago: executing program 4 (id=5400): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0xb}]}}}]}, 0x3c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r8, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r9 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x68181, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x54b3, 0xfffffffe, 0x8, 0x10, r5, 0x7, '\x00', r4, r9, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$unix(r3, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r11 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x14342, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0xfffff6a0, 0x11, &(0x7f0000000500)=""/17, 0x0, 0x11, '\x00', r10, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0xfff, 0x6f}, 0x10, 0x19219, r9, 0x2, &(0x7f0000000700)=[r11, r9, r5, r5], &(0x7f0000000740)=[{0x4, 0x3, 0x8, 0x4}, {0x4, 0x3, 0x5, 0x9}], 0x10, 0x401, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r12, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f00000003c0)={0x81, 0x0, 0x1c14}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r14, 0x8922, &(0x7f0000000640)={'veth1_macvtap\x00', 0x63be}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4], 0x1, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffdf}]}, {0x4}]}]}}]}, 0xa0}}, 0x0) 3.387169033s ago: executing program 0 (id=5401): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[], 0xe, 0x2a9, &(0x7f0000006540)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x3}, 'port0\x00', 0xa0bf83d7d46f2cd7, 0x400, 0x3, 0x0, 0xfffffffe, 0x2000}) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000"], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 3.30965846s ago: executing program 3 (id=5402): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000940)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[], 0xe) 3.122969006s ago: executing program 4 (id=5403): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0xffffffff) lseek(r2, 0x8000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x10, r6, 0x0) 3.122365976s ago: executing program 1 (id=5404): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x550, &(0x7f0000000b80)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUcTPPOUkPOHZkO6i9QhVNUUUKE2XS2hvGDduk7UVwuxexF7N7tJewyXbS/0mA0qag7yeCc2of+/xOavknN/GxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsdyabRct8YzfXlKDubUwaO7+2Nv60AK5sa8Y0q+IlfyTXE4uZYsufbW7+mLy35zMZj/NSi4pcrL934v/u3dhcqK//ZCAT8Xm1vbTlW6382LcgZygy+cHr2to30SBaToNrUwUqGqlYt9arEeqbjwdLUexbio31E4chGrevaGK1WpZ6cJy0PYbNcfT/YV3b5Zsu6LuF1raCaPAv3W/ELmLxvOM30jbJKuTNneTA/GBiVWsnaZSa+vdTnnUAJJGxfdpVBrVqGSXSsViqVSs3KneuWvbk4cW2AfIoRbjP2gxXp/w7A0cz0Qv/4snRnxpy5KoI1+u1CSUQJoD1vf08/83t/TQfvfm/36Wv7S7ekbS/H9FRL4VuTIo/w+I5fRem7Il2/JUVqQrXenIi7FHdLqvhmjxxUgkgRhpipMuUb0lSqpSkYrY8kgWpS6RKKmLEU+0RLIskcSi0yPKlVC0OBJLIKEomRdXboiSolSlKmVRoqUgyxJIW3xpSE2cdC9rsp6+72VR1qAYdxoVBw4j3z/uOlIaMlryP47vU5/CgY/2Tz//AwAAAACAL5aV/vU9uf6fkstprW48bR9u+Nc4ogMAAAAAAJ9C+sn/bFJMJbXLYg24/gcAAAAAAJ8tK73HzhKRvFzNamtipbdL8UcAAAAAAAC+EOnn/1eSIp0D5apYO9OlcP0PAAAAAMAX4peRc+xHrfPWn39LGE5Zr1tLX1sb6dy8zsa5bLtzB/cY12es6d5O0qKSFZOTrp61clmjnUkw3/WKtVFxWLsBODsB/PQhAVyYlN/kWtbm2mpWrvbXZL3k68bTBTfw7hXFcaYnYr0U//Bs/UdJh/+r35y2crLe7RQeP++uprG8TvbyeqM3geKheRSHxPIynW8hvefiyBFPpTdi9PrNW7K23u3Ye8c/kW0+sb/HV9ND+nwjc1mrud6Mt/n9488lfRYLg0bfi6J4zJG/ketZm+vz17PiiChKo6Io7Y3i6Pfi+FGU90cxJQejKB8zCgAYl7URWciSQ3n3I85yH5fd5QOz+xuZz9rMz6Qn1smZI87o9qi8Yh8zu/1x6BlIg3Js0u/vB7Lq22SDtwP7jbySlbyF515ufC8XN7e2b65vrDzpPOk8K5XKFfu2bd8pyVQ6jF5B7gEAHCF7xo4MecbOyBbW7RFX1f/f+UpBQR7Lc+nKqiykdxuk3zg4cq/5PV9DWBhx1ZpP02T2hJeFIVd1/0nvcujvtzS07f4Yyif/iwAA4BTNDczDuffO/wsjrrv35/LhV8f5PU9rAwAAJ0OH76x8/LMVhqb1qFitFp14UaswcB+o0NQaWhk/1qG76PgNrVphEAdu4CWVh6amIxW1W60gjFU9CFUriMxSOn2g6j36PdJNx4+NG7U87URauYEfO26saiZyVav9nWeiRR2mG0ct7Zq6cZ3YBL6Kgnbo6oJSkdZ7Gpqa9mNTN0nVV63QNJ0wpx4GXrupVU1HbmhacZDtsN+X8etB2Ex3Wxj3mw0AwBmxubX9dKXb7bw4wcq4xwgAAPYjSwMAAAAAAAAAAAAAAAAAAAAAcPadxv1/VI5ZmTjjv6b+VNBnJZ73r5z/DGM+pcrIU8erEz85AThR/wYAAP//bYNNvw==") r0 = socket$inet(0x2b, 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) sendmsg$unix(r4, &(0x7f00000016c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80442, &(0x7f0000000400)={'trans=virtio,', {[{@access_client}, {@msize={'msize', 0x3d, 0xe}}, {@access_client}, {@uname={'uname', 0x3d, 'udf\x00'}}, {@cache_loose}, {}, {@noextend}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}]}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x3) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 2.545850735s ago: executing program 3 (id=5405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000280)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 1.583019356s ago: executing program 1 (id=5406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@dax_always}, {@data_err_ignore}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x432, &(0x7f0000000d80)="$eJzs281vG0UbAPBn10n7ph9vQlU+mhYIFETER9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7dpqkTl3q30/aZGZ3rJnHu2PP7HgD6Fkj2Z8kYl9E/B4Rg7VsY4GR2r+bK0vTf68sTSdRqbz1V1Itd2NlabooWrxub5Hpi0g/S+Jwi3oXLl0+N1Uuz17M8+OL598fX7h0+bm581NnZ8/OXpg8derE8YkXTk4+35E4s7huDH80f+TQa+9cfWP69NV3f/42KeJviqNDRjY6+GSl0uHqumt/XTrp62JD2JJSrZtGf7X/D0Yp1k7eYLz6aVcbB+yoSqVSeaD94eUKcA9LotstALqj+KLP5r/FdoeGHneF6y/VJkBZ3DfzrXakL9K8TH/T/LaTRiLi9PI/X2Vb7Mx9CACABt9n459nW43/0qi/L/T/fA1lKCLui4gDEXEyIg5GxP0R1bIPRsRDW6h7oMW+9eOf9Nq2AtukbPz3Yr621Tj+q43+koihUp7bX42/PzkzV549lr8no9G/O8tPbFDHD6/89kW7Y/Xjv2zL6i/Ggnk7rvXtbnzNzNTi1G2Gver6JxHDfa3iT1ZXApKIOBQRw9usY+7pb460O3br+DfQgXWmytcRT9XO/3I0xV9INl6fHP9flGePjRdXxXq//HrlzXb131b8HZCd/z0tr//V+IeS+vXaha3XceWPz9vOabZ7/e9K3m7Y9+HU4uLFiYhdyeu1Rtfvn2wqN7lWPot/9Gjr/n8g1t6JwxGRXcQPR8QjEfFo3vbHIuLxiDi6Qfw/vfzEe9uPf2dl8c9s6fyvJXZF857WidK5H79rqHRoK/Fn5/9ENTWa79nM599m2rW9qxkAAAD+e9KI2BdJOraaTtOxsdpv+A/GnrQ8v7D4zJn5Dy7M1J4RGIr+tLjTNVh3P3Qin9YX+cmm/PH8vvGXpYFqfmx6vjzT7eChx+1t0/8zf5a63Tpgx3leC3qX/g+9S/+H3qX/Q+9q0f9b/TYbuAe1+v7/uAvtAO68pv5v2Q96iPk/9C79H3qX/g89aWEgbv2QvITEukSkd0UzJHYo0e1PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74NwAA///psua/") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000000420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) ioprio_get$pid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = msgget(0x3, 0x213) semop(r4, &(0x7f0000000400)=[{0x0, 0x1000, 0x1800}], 0x1) r5 = msgget(0x2, 0x20) msgrcv(r5, &(0x7f00000004c0)={0x0, ""/8}, 0x10, 0x2, 0x3800) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/125) r6 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r6, 0x0) r7 = msgget(0x2, 0x0) msgctl$MSG_STAT(r7, 0xb, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = msgget(0x1, 0x501) msgsnd(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000001c451f6754f6ea45a86540c9048ee9ba07727c2ba7b3d1ce73b1166e8b1f00000000000000a48c2c955032af848830ba5d9a83090505ae2159efd33b080394cc0bafcd13ac67063439246450b920a1603bf1a32c48485874d49ed09f2fe5ea7cead8d4b1495b1e661a31ef4b46f8a5e708d4f50500c44b3dfc1a1e903665ce48f99a07dc6567ba83da78f8427073a4dc702c4a4277cc88303e665d75e4e7651fe1174b26b27afd52fc150ba9"], 0xf5, 0x0) msgrcv(0x0, &(0x7f0000000080), 0x69, 0x1, 0x2000) 1.568305397s ago: executing program 0 (id=5416): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[], 0xe, 0x2a9, &(0x7f0000006540)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x3}, 'port0\x00', 0xa0bf83d7d46f2cd7, 0x400, 0x3, 0x0, 0xfffffffe, 0x2000}) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000"], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 1.555351599s ago: executing program 3 (id=5407): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.487320084s ago: executing program 3 (id=5408): r0 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x227e, 0xfffffffffffffffe) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d8faebab25c9440f1e0b429560dea05fcfa134c5886328060189b9c9d245a4ec", "ddff6f80bb17115c263975c19a199a87b509ec91752b1f6b9fe52dd68897d0dd66c8047ecb3c1ccab1b385024cd3ef42", "7af3756acdedd1857ba2429edec68ec07113ef939e2683eb956c3100", {"e311f95152ce9fab74b351abd67a3e95", "f543716814ec69725136619246be0a0c"}}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000440), 0x3, 0x40010102, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ea00", 0x2) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 0s ago: executing program 0 (id=5409): r0 = socket$kcm(0x11, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000500)="eae9a1000037017aacf30fa6c0f30fc7720dc4e118541bd3a9f4a60000660f1c460d66f30f2b2b0f09660f01df", 0x2d}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf}}) r6 = dup(r4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r6, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ly recommended to keep mac addresses unique to avoid problems! [ 2284.636882][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.657693][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.673547][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.693831][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.715430][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.726358][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.739297][T25774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.867465][T18445] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2284.898189][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2284.913741][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2284.949363][T25774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.971949][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 2284.971970][ T26] audit: type=1326 audit(2000001247.802:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25896 comm="syz.1.4979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea7ee02ff9 code=0x0 [ 2284.972315][T25774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.011292][T25774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.027917][T25774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.227642][T18445] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 2285.257793][T25901] loop0: detected capacity change from 0 to 128 [ 2285.688897][ T9663] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2285.732910][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.785456][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.905509][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2285.965325][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.008207][T18445] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 2286.018938][T18445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.031397][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.046550][T18445] usb 5-1: config 0 descriptor?? [ 2286.068669][ T9663] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2286.094155][T18445] gspca_main: 0c45:8001 too many config [ 2286.098341][ T9663] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2286.193074][T25884] chnl_net:caif_netlink_parms(): no params data found [ 2286.208361][T18445] Bluetooth: hci4: command 0x0409 tx timeout [ 2286.273441][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2286.288844][ T9663] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2286.343935][ T9663] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2286.380770][ T9663] usb 2-1: Manufacturer: syz [ 2286.429646][ T9663] usb 2-1: config 0 descriptor?? [ 2286.503911][ T9663] igorplugusb 2-1:0.0: incorrect number of endpoints [ 2286.543561][T25905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'. [ 2286.885132][T25898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4979'. [ 2286.945457][T25884] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.113589][T25884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.136971][T25884] device bridge_slave_0 entered promiscuous mode [ 2288.111015][T20801] usb 5-1: USB disconnect, device number 57 [ 2288.117321][T25884] bridge0: port 2(bridge_slave_1) entered blocking state [ 2288.145815][T25884] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.154940][ T3616] usb 2-1: USB disconnect, device number 57 [ 2288.202036][T25884] device bridge_slave_1 entered promiscuous mode [ 2288.300170][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 2288.718147][T25926] program syz.0.4986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2288.766335][T25884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2288.845053][T25884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2288.942856][T25931] loop1: detected capacity change from 0 to 256 [ 2289.059937][T25935] loop0: detected capacity change from 0 to 164 [ 2289.492456][T25884] team0: Port device team_slave_0 added [ 2289.501107][T25931] FAT-fs (loop1): Directory bread(block 64) failed [ 2289.520733][T25931] FAT-fs (loop1): Directory bread(block 65) failed [ 2289.546475][T25931] FAT-fs (loop1): Directory bread(block 66) failed [ 2289.572835][T25884] team0: Port device team_slave_1 added [ 2289.589789][T25931] FAT-fs (loop1): Directory bread(block 67) failed [ 2289.597052][T25931] FAT-fs (loop1): Directory bread(block 68) failed [ 2289.646730][T25931] FAT-fs (loop1): Directory bread(block 69) failed [ 2289.661664][T25931] FAT-fs (loop1): Directory bread(block 70) failed [ 2289.669536][T25931] FAT-fs (loop1): Directory bread(block 71) failed [ 2289.677775][T25931] FAT-fs (loop1): Directory bread(block 72) failed [ 2289.685626][T25931] FAT-fs (loop1): Directory bread(block 73) failed [ 2289.983479][T25941] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.996486][T25941] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.008361][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2290.020331][T25941] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.032341][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2290.043174][T25941] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2290.051610][T25941] UDF-fs: Scanning with blocksize 512 failed [ 2290.060563][T25941] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.072955][T25941] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.084334][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2290.095194][T25941] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.106688][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2290.116418][T25941] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2290.124221][T25941] UDF-fs: Scanning with blocksize 1024 failed [ 2290.132844][T25941] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.184969][T25941] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.196210][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2290.206003][T25941] blk_update_request: I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.217201][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2290.226888][T25941] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2290.234550][T25941] UDF-fs: Scanning with blocksize 2048 failed [ 2290.241100][T25941] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2290.252308][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2290.262061][T25941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2290.271671][T25941] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2290.279329][T25941] UDF-fs: Scanning with blocksize 4096 failed [ 2290.285576][T25941] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 2290.355127][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4988'. [ 2290.401180][T18445] Bluetooth: hci4: command 0x040f tx timeout [ 2290.586113][T25948] loop2: detected capacity change from 0 to 512 [ 2290.593421][T25884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2290.610623][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2290.709183][T25948] EXT4-fs (loop2): Unrecognized mount option "obj_user=(" or missing value [ 2290.798425][T25884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2290.898555][T25884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2290.946116][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.143072][T25884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2291.306764][ T26] audit: type=1326 audit(2000001254.129:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25947 comm="syz.2.4990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27fad3eff9 code=0x0 [ 2291.452207][T25957] loop1: detected capacity change from 0 to 4096 [ 2291.622921][T25884] device hsr_slave_0 entered promiscuous mode [ 2291.699175][T25884] device hsr_slave_1 entered promiscuous mode [ 2291.721253][T25884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2291.771002][T25884] Cannot create hsr debugfs directory [ 2291.847246][T25957] tipc: Started in network mode [ 2291.883657][T25967] libceph: resolve '. [ 2291.883657][T25967] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 2291.883657][T25967] ' (ret=-3): failed [ 2291.911870][T25957] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711 [ 2292.017568][T25967] autofs4:pid:25967:autofs_fill_super: called with bogus options [ 2292.125361][T25972] loop0: detected capacity change from 0 to 2048 [ 2292.204512][T25977] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2292.262449][ T8383] device hsr_slave_0 left promiscuous mode [ 2292.412346][T25974] loop4: detected capacity change from 0 to 1024 [ 2292.426208][ T8383] device hsr_slave_1 left promiscuous mode [ 2292.438734][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2292.446471][ T6361] Bluetooth: hci4: command 0x0419 tx timeout [ 2293.203718][T25974] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2293.217103][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2293.238822][T25974] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2293.258039][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2293.267106][T25974] jbd2_journal_init_inode: Cannot locate journal superblock [ 2293.276942][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2293.286862][ T8383] device bridge_slave_1 left promiscuous mode [ 2293.297016][T25974] EXT4-fs (loop4): Could not load journal inode [ 2293.310464][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.335657][ T8383] device bridge_slave_0 left promiscuous mode [ 2293.343770][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.520775][ T8383] device veth1_macvtap left promiscuous mode [ 2293.528097][ T8383] device veth0_macvtap left promiscuous mode [ 2293.545514][ T8383] device veth1_vlan left promiscuous mode [ 2293.620038][ T8383] device veth0_vlan left promiscuous mode [ 2293.969794][T25988] loop0: detected capacity change from 0 to 256 [ 2295.267992][ T8383] team0 (unregistering): Port device team_slave_1 removed [ 2295.347247][ T8383] team0 (unregistering): Port device team_slave_0 removed [ 2295.397098][ T8383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2295.582266][ T8383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2296.328653][ T8383] bond0 (unregistering): Released all slaves [ 2296.458552][T26004] loop2: detected capacity change from 0 to 512 [ 2296.466285][T25976] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2296.511545][T26004] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 2296.511545][T26004] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2296.511545][T26004] [ 2296.532213][T26004] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2296.592657][T26004] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.5004: inline data xattr refers to an external xattr inode [ 2296.609288][T26004] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5004: couldn't read orphan inode 12 (err -117) [ 2296.622007][T26004] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 2299.400210][T25884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.660032][T26032] Falling back ldisc for ptm0. [ 2299.693105][T26034] tipc: Failed to remove unknown binding: 66,1,1/0:369982485/369982487 [ 2299.702989][T26034] tipc: Failed to remove unknown binding: 66,1,1/0:369982485/369982487 [ 2299.715314][T26034] tipc: Failed to remove unknown binding: 66,1,1/0:369982485/369982487 [ 2299.922830][T26038] loop0: detected capacity change from 0 to 128 [ 2300.716512][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 2300.731715][T26049] loop4: detected capacity change from 0 to 256 [ 2302.496818][T25884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2302.584605][T26038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2302.628971][ T26] audit: type=1804 audit(2000001265.443:1295): pid=26048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5015" name="/newroot/33/file1/file0" dev="loop4" ino=1049161 res=1 errno=0 [ 2302.705307][T26038] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038 (0x7fffffff) [ 2302.903504][T25884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2303.103716][T26056] loop4: detected capacity change from 0 to 136 [ 2303.190326][T26058] netlink: 'syz.0.5017': attribute type 2 has an invalid length. [ 2303.279642][T25884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2303.314291][T26058] netlink: 'syz.0.5017': attribute type 1 has an invalid length. [ 2303.698601][T26075] Process accounting resumed [ 2303.719411][T25884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2303.735227][T26073] loop1: detected capacity change from 0 to 2048 [ 2303.766651][T25884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2303.819360][T25884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2303.971012][T26078] loop4: detected capacity change from 0 to 164 [ 2303.988160][T26073] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 2304.005813][T25884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2304.326277][T25884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2304.394593][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2304.409955][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2304.502499][T25884] 8021q: adding VLAN 0 to HW filter on device team0 [ 2304.508905][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2304.509634][T26073] netlink: 688 bytes leftover after parsing attributes in process `syz.1.5021'. [ 2304.512725][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2304.513753][T23912] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.513799][T23912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2304.529815][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2304.540377][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2304.541060][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2304.541504][T23327] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.541543][T23327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2304.556066][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2304.571517][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2304.600782][T26084] loop2: detected capacity change from 0 to 1024 [ 2305.958193][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2305.963217][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2305.964693][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2305.965504][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2305.967590][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2306.003062][T26096] loop4: detected capacity change from 0 to 512 [ 2306.006389][T25884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2306.006418][T25884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2306.042982][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2306.043682][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2306.044410][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2306.044883][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2306.045416][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2306.139341][T26096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 2306.139415][T26096] System zones: 1-12 [ 2306.152001][T26096] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5026: invalid indirect mapped block 8 (level 2) [ 2306.152745][T26096] EXT4-fs (loop4): Remounting filesystem read-only [ 2306.153044][T26096] EXT4-fs (loop4): 1 truncate cleaned up [ 2306.153067][T26096] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 2306.465030][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2306.465185][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2306.496224][T25884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2306.554237][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2306.675092][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2306.907816][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2306.919594][ T26] audit: type=1326 audit(2000001269.741:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26103 comm="syz.2.5027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27fad3eff9 code=0x0 [ 2306.991853][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2307.052404][T25884] device veth0_vlan entered promiscuous mode [ 2307.062603][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2307.108249][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2307.243644][T25884] device veth1_vlan entered promiscuous mode [ 2307.340615][T26114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5029'. [ 2307.412361][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2307.433187][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2307.465032][T25884] device veth0_macvtap entered promiscuous mode [ 2307.495867][T25884] device veth1_macvtap entered promiscuous mode [ 2307.583457][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2307.618975][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2307.665871][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2307.721892][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2307.745089][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2307.779556][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2307.971118][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2307.982269][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2307.992880][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.003546][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.013576][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.024247][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.038593][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.054848][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.253334][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.356761][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.489249][T25884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2308.898608][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2308.909516][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.921058][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2308.944449][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.955429][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2308.969592][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.002383][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.024894][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.063460][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.105789][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.127558][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.160965][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.188942][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.239500][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.279739][T25884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.322101][T25884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.364880][T25884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2309.430657][T25884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.474485][T25884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.483437][T25884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.493422][T25884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.525400][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2309.537671][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2309.561650][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2309.595259][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2309.631209][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2309.646601][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2309.926401][T23327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2309.951534][T23327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.072884][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2310.107472][T22785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.257322][T22785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.307909][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2310.804397][T26125] loop2: detected capacity change from 0 to 32768 [ 2311.195562][T26153] Process accounting resumed [ 2312.344181][T26140] loop4: detected capacity change from 0 to 32768 [ 2312.519041][ T8383] tipc: Left network mode [ 2314.503079][T20800] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2314.817505][T26196] loop1: detected capacity change from 0 to 512 [ 2316.010271][T26196] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 2316.030495][T26196] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5055: invalid indirect mapped block 1 (level 1) [ 2316.053922][T26196] EXT4-fs (loop1): 1 truncate cleaned up [ 2316.060127][T26196] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2316.119204][T20800] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.131893][T26211] loop3: detected capacity change from 0 to 512 [ 2316.156570][T20800] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2316.173184][T20800] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2316.185241][T20800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.377576][T26211] EXT4-fs (loop3): 1 orphan inode deleted [ 2316.404887][T26211] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 2316.419582][T26217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5060'. [ 2316.436101][T26211] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 2316.628113][T26220] overlayfs: './file0' not a directory [ 2317.528724][T26230] vhci_hcd: vhci_device speed not set [ 2317.561887][T20800] usb 3-1: string descriptor 0 read error: -71 [ 2317.570832][T20800] usb 3-1: USB disconnect, device number 41 [ 2317.648563][T26232] loop0: detected capacity change from 0 to 1024 [ 2317.677634][ T8383] device hsr_slave_0 left promiscuous mode [ 2317.711130][T26232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2317.757893][T26233] loop1: detected capacity change from 0 to 512 [ 2317.767838][ T8383] device hsr_slave_1 left promiscuous mode [ 2317.788841][T26234] syz.4.5064 (26234): attempted to duplicate a private mapping with mremap. This is not supported. [ 2317.847321][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2317.896254][T26233] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 2317.922286][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2317.954109][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2317.979878][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.010078][ T8383] device bridge_slave_1 left promiscuous mode [ 2318.030607][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.061280][ T8383] device bridge_slave_0 left promiscuous mode [ 2318.083726][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.113438][ T8383] device veth1_macvtap left promiscuous mode [ 2318.123774][ T8383] device veth0_macvtap left promiscuous mode [ 2318.130637][ T8383] device veth1_vlan left promiscuous mode [ 2318.136453][ T8383] device veth0_vlan left promiscuous mode [ 2319.854727][T26257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5070'. [ 2319.866776][T26257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2320.656991][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5073'. [ 2320.843840][ T8383] team0 (unregistering): Port device team_slave_1 removed [ 2320.885881][ T8383] team0 (unregistering): Port device team_slave_0 removed [ 2320.908233][ T8383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2320.931726][ T8383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2321.026987][ T8383] bond0 (unregistering): Released all slaves [ 2321.183840][ C1] vkms_vblank_simulate: vblank timer overrun [ 2322.398534][T26281] loop1: detected capacity change from 0 to 128 [ 2322.483389][ C1] vkms_vblank_simulate: vblank timer overrun [ 2322.550441][T26283] loop0: detected capacity change from 0 to 4096 [ 2323.950647][T26292] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5082'. [ 2323.988549][T26292] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5082'. [ 2324.028229][ C1] vkms_vblank_simulate: vblank timer overrun [ 2325.395646][T26317] rdma_rxe: rxe_register_device failed with error -23 [ 2325.413275][T26317] rdma_rxe: failed to add team_slave_1 [ 2325.542980][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'. [ 2325.610850][T26320] sch_tbf: burst 88 is lower than device veth1_virt_wifi mtu (1514) ! [ 2325.858506][ T26] audit: type=1326 audit(2000001288.601:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.3.5090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03dc2a5ff9 code=0x0 [ 2326.512353][T26325] input: syz1 as /devices/virtual/input/input47 [ 2326.889966][T26339] device veth0_vlan left promiscuous mode [ 2326.958617][T18445] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2327.178568][T18445] usb 2-1: device descriptor read/64, error -71 [ 2327.798425][T26351] loop0: detected capacity change from 0 to 2048 [ 2327.890419][T18445] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2328.456591][T26351] EXT4-fs (loop0): Ignoring removed orlov option [ 2328.498504][T18445] usb 2-1: device descriptor read/64, error -71 [ 2328.594098][T26351] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 2328.638811][T18445] usb usb2-port1: attempt power cycle [ 2328.882493][ C0] vkms_vblank_simulate: vblank timer overrun [ 2329.128410][T18445] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2329.258705][T18445] usb 2-1: device descriptor read/8, error -71 [ 2329.692031][T18445] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2329.788727][T18445] usb 2-1: device descriptor read/8, error -71 [ 2329.827511][T26363] loop0: detected capacity change from 0 to 2048 [ 2329.908591][T18445] usb usb2-port1: unable to enumerate USB device [ 2331.909383][T26373] loop3: detected capacity change from 0 to 40427 [ 2331.944583][T26377] device macsec0 entered promiscuous mode [ 2331.989365][T26377] device macsec1 entered promiscuous mode [ 2332.006552][T26378] CIFS: Unable to determine destination address [ 2332.152607][T26373] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2332.160452][T26373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2332.253884][T26373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2332.313753][T26373] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2332.321304][T26373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2336.825421][T18825] Bluetooth: hci1: command 0x0409 tx timeout [ 2338.534793][T26380] chnl_net:caif_netlink_parms(): no params data found [ 2338.963020][T18825] Bluetooth: hci1: command 0x041b tx timeout [ 2339.278463][T26380] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.285889][T26380] bridge0: port 1(bridge_slave_0) entered disabled state [ 2339.309714][T26380] device bridge_slave_0 entered promiscuous mode [ 2339.526446][T26380] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.615247][T26380] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.935869][T26380] device bridge_slave_1 entered promiscuous mode [ 2340.393259][T26425] loop1: detected capacity change from 0 to 256 [ 2340.404375][T26380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2340.454557][T26380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2340.861975][T26425] exFAT-fs (loop1): bogus sector size bits : 255 [ 2340.861975][T26425] [ 2340.971454][T26425] exFAT-fs (loop1): failed to read boot sector [ 2341.320893][T26425] exFAT-fs (loop1): failed to recognize exfat type [ 2341.379808][T24614] Bluetooth: hci3: command 0x0406 tx timeout [ 2341.386318][T24614] Bluetooth: hci1: command 0x040f tx timeout [ 2341.932675][T26380] team0: Port device team_slave_0 added [ 2341.985136][T26380] team0: Port device team_slave_1 added [ 2342.015875][T26444] 9pnet: Insufficient options for proto=fd [ 2342.148111][T26442] netlink: 'syz.3.5119': attribute type 10 has an invalid length. [ 2342.231829][T26442] bond0: (slave bond_slave_0): Releasing backup interface [ 2342.314155][T26380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2342.338461][T26380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.415346][T26380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2342.525111][T26380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2342.566749][T26380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.771060][T26380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2342.903577][T26448] input: syz1 as /devices/virtual/input/input48 [ 2343.525714][T18445] Bluetooth: hci1: command 0x0419 tx timeout [ 2343.658624][T24614] Bluetooth: hci2: command 0x0409 tx timeout [ 2343.676793][ T8383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.872111][T26455] xt_ipcomp: unknown flags B [ 2343.888223][ T8383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.123444][T26458] loop3: detected capacity change from 0 to 2048 [ 2344.151363][T26440] IPv6: sit2: Disabled Multicast RS [ 2344.195597][ T8383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.241749][T26380] device hsr_slave_0 entered promiscuous mode [ 2344.252941][T26380] device hsr_slave_1 entered promiscuous mode [ 2344.270078][T26458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2344.281421][T26380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2344.328916][T26380] Cannot create hsr debugfs directory [ 2344.562708][ T8383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.854282][T26470] loop4: detected capacity change from 0 to 128 [ 2345.143832][T26428] chnl_net:caif_netlink_parms(): no params data found [ 2345.208260][T26470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2345.226762][T26470] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038 (0x7fffffff) [ 2345.362533][T26482] loop1: detected capacity change from 0 to 512 [ 2345.386286][T26465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2345.393653][T26465] IPv6: NLM_F_CREATE should be set when creating new route [ 2345.409781][T26466] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 2345.465908][T26482] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 2345.778946][T18445] Bluetooth: hci2: command 0x041b tx timeout [ 2345.969847][T26496] loop3: detected capacity change from 0 to 1024 [ 2346.249798][T26497] loop1: detected capacity change from 0 to 256 [ 2346.671791][T26428] bridge0: port 1(bridge_slave_0) entered blocking state [ 2347.287593][T26428] bridge0: port 1(bridge_slave_0) entered disabled state [ 2347.307312][T26428] device bridge_slave_0 entered promiscuous mode [ 2347.381772][T26380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.448957][T26428] bridge0: port 2(bridge_slave_1) entered blocking state [ 2347.534970][T26428] bridge0: port 2(bridge_slave_1) entered disabled state [ 2347.585021][T26428] device bridge_slave_1 entered promiscuous mode [ 2347.632159][T26482] trusted_key: encrypted_key: master key parameter 'defaulÿÿ' is invalid [ 2347.810519][T18445] Bluetooth: hci2: command 0x040f tx timeout [ 2348.457550][T26380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2348.676842][T26518] loop4: detected capacity change from 0 to 1024 [ 2348.704010][T26380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2348.812254][T26428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2348.853530][T26428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2349.030688][T26528] loop3: detected capacity change from 0 to 128 [ 2349.061214][T26380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.172860][T26428] team0: Port device team_slave_0 added [ 2349.192982][T26428] team0: Port device team_slave_1 added [ 2349.223987][T26528] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2349.238800][T26528] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2349.314799][T26428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2349.341092][T26428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2349.379029][T26428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2349.448191][ T26] audit: type=1800 audit(2000001312.273:1298): pid=26531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5133" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 2349.468126][T26541] overlayfs: missing 'lowerdir' [ 2349.481007][T26428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2349.488004][T26428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2349.529416][T26528] 9pnet: Insufficient options for proto=fd [ 2349.548351][T26543] loop1: detected capacity change from 0 to 128 [ 2349.563874][T26540] loop4: detected capacity change from 0 to 16 [ 2349.576853][T26428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2349.620012][T26543] FAT-fs (loop1): invalid media value (0x00) [ 2349.632665][T26540] erofs: (device loop4): mounted with root inode @ nid 36. [ 2349.667651][T26543] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 2349.695794][T26543] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2349.707139][T26540] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2349.903289][T26543] loop1: detected capacity change from 0 to 256 [ 2349.908504][ T6361] Bluetooth: hci2: command 0x0419 tx timeout [ 2350.016077][T26549] binder: 26548:26549 ioctl 4018620d 0 returned -22 [ 2350.083060][T26543] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2350.205746][T26428] device hsr_slave_0 entered promiscuous mode [ 2350.276524][T26428] device hsr_slave_1 entered promiscuous mode [ 2350.322299][T26428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2350.345033][T26428] Cannot create hsr debugfs directory [ 2350.514849][T26543] exFAT-fs (loop1): hint_cluster is invalid (17) [ 2350.573129][T26380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2350.599486][T26543] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 2350.660118][T26543] exFAT-fs (loop1): Filesystem has been set read-only [ 2350.679480][T26380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2350.740670][T26380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2350.785638][T26380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2351.397257][T26380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2351.520227][ T8383] device hsr_slave_0 left promiscuous mode [ 2351.552299][ T8383] device hsr_slave_1 left promiscuous mode [ 2351.597262][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2351.630560][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2351.659906][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2351.667402][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2351.693969][ T8383] device bridge_slave_1 left promiscuous mode [ 2351.702833][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.734942][ T8383] device bridge_slave_0 left promiscuous mode [ 2351.757331][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.771373][ T8383] device veth1_macvtap left promiscuous mode [ 2351.802367][ T8383] device veth0_macvtap left promiscuous mode [ 2351.830552][ T8383] device veth1_vlan left promiscuous mode [ 2352.212424][T26585] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 2353.015125][T26595] ptrace attach of "./syz-executor exec"[26593] was attempted by "./syz-executor exec"[26595] [ 2353.872521][ T8383] team0 (unregistering): Port device team_slave_1 removed [ 2354.290961][ T8383] team0 (unregistering): Port device team_slave_0 removed [ 2354.368793][ T8383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2354.438869][ T8383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2354.713640][T26605] fuse: Bad value for 'fd' [ 2354.726503][T26605] loop1: detected capacity change from 0 to 16 [ 2354.873206][ T8383] bond0 (unregistering): Released all slaves [ 2354.893499][T26605] erofs: (device loop1): mounted with root inode @ nid 36. [ 2354.986117][T26604] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 2355.008978][T26604] attempt to access beyond end of device [ 2355.008978][T26604] loop1: rw=0, want=304, limit=16 [ 2355.025533][T26380] 8021q: adding VLAN 0 to HW filter on device team0 [ 2355.032303][T26604] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 2355.059856][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2355.070334][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2355.139500][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2355.159358][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2355.193268][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2355.200411][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2355.227160][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2355.286328][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2355.300299][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 2355.307388][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2355.375883][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2355.409328][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2355.431337][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2355.445664][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2355.481321][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2355.509491][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2355.828234][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2356.119795][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2356.158963][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2356.190033][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2356.215180][T26380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2356.269795][T26380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2356.290676][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2356.311561][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2356.545797][T26428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2356.593632][T26428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2356.649403][T26428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2356.690701][T26622] tap0: tun_chr_ioctl cmd 1074025677 [ 2356.709133][T26622] tap0: linktype set to 147 [ 2356.724429][T26428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2356.888160][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2356.906872][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2356.957009][T26380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2357.102702][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2357.122019][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2357.271708][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2357.302071][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2357.503159][ T26] audit: type=1326 audit(2000001320.333:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2357.631756][T26645] loop1: detected capacity change from 0 to 128 [ 2357.673298][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2358.118778][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2358.464668][ T26] audit: type=1326 audit(2000001320.363:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.491601][T26380] device veth0_vlan entered promiscuous mode [ 2358.507001][T26428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2358.520636][T26380] device veth1_vlan entered promiscuous mode [ 2358.534225][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2358.573540][ T26] audit: type=1326 audit(2000001320.363:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.590101][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2358.617865][ T26] audit: type=1326 audit(2000001320.363:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.648572][ T26] audit: type=1326 audit(2000001320.363:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.764853][ T26] audit: type=1326 audit(2000001320.363:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.852211][ T26] audit: type=1326 audit(2000001320.363:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2358.868948][T26428] 8021q: adding VLAN 0 to HW filter on device team0 [ 2359.215061][T26380] device veth0_macvtap entered promiscuous mode [ 2359.501674][ T26] audit: type=1326 audit(2000001320.363:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2359.560864][ T26] audit: type=1326 audit(2000001320.823:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2359.608275][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2360.102306][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2360.148166][T24432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.155282][T24432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2360.173469][ T26] audit: type=1326 audit(2000001320.923:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26641 comm="syz.4.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501721cff9 code=0x7ffc0000 [ 2360.222333][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2360.252005][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2360.291516][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2360.339558][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2360.387664][T24432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.394820][T24432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2360.450922][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2360.534116][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2360.628892][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2360.671078][T26380] device veth1_macvtap entered promiscuous mode [ 2360.729805][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2360.754015][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2360.778833][T26674] loop4: detected capacity change from 0 to 2048 [ 2360.828889][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2360.884669][T26674] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 2360.907346][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2360.934607][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2360.953211][T26674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2360.982187][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2361.050150][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2361.076630][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2361.136385][T26428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2361.169457][T26428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2361.207553][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.235660][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.269940][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.308879][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.329906][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.358461][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.398492][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.411923][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.463864][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.508938][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.596485][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.618617][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.649808][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.686444][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.715045][T26380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2361.741047][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2361.804852][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2361.853273][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2361.891015][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2361.940851][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2361.974547][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.990108][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.021600][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.049901][T26704] loop3: detected capacity change from 0 to 256 [ 2362.064111][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.098066][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.119766][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.144689][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.160292][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.171746][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.182142][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.193186][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.203670][T26380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.214878][T26380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.237804][T26380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2362.263457][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5154'. [ 2362.290866][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2362.309425][T26704] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2362.332651][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2362.378624][T26380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.445318][T26380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.505630][T26380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.544639][T26380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.602383][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2362.637362][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2362.740333][T26428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2362.933583][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2362.971080][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2362.989026][T20796] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2363.083195][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.092968][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2363.109872][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2363.148376][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2363.152499][T26428] device veth0_vlan entered promiscuous mode [ 2363.211805][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2363.244452][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2363.291547][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2363.352554][T26428] device veth1_vlan entered promiscuous mode [ 2363.365675][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.369994][T20796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.402531][T20796] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2363.442562][T20796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.461663][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2363.481323][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2363.505197][T20796] usb 5-1: config 0 descriptor?? [ 2363.540649][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2363.542404][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2363.571719][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2363.584884][T26428] device veth0_macvtap entered promiscuous mode [ 2363.614462][T20796] rndis_wlan 5-1:0.0: skipping garbage [ 2363.620816][T20796] usb 5-1: bad CDC descriptors [ 2363.635198][T20796] rndis_host 5-1:0.0: skipping garbage [ 2363.641568][T20796] usb 5-1: bad CDC descriptors [ 2363.645153][T26428] device veth1_macvtap entered promiscuous mode [ 2363.737940][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2363.757567][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2363.789224][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2363.835097][T26733] loop3: detected capacity change from 0 to 2048 [ 2363.924360][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2363.924759][T26733] EXT4-fs (loop3): Unrecognized mount option "measure" or missing value [ 2363.992268][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.022342][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.033807][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.044447][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.058885][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.157183][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.168530][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.181181][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.199876][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.945575][T20796] usb 5-1: USB disconnect, device number 58 [ 2364.966362][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.993985][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.007408][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.020446][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.031127][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.053923][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.147161][T26428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2365.205043][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2365.235899][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2365.250584][T26751] loop2: detected capacity change from 0 to 256 [ 2365.293024][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.324915][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.361316][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.401161][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.500563][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.532882][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.562290][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.596415][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.628791][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.671515][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.697938][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.739425][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.760426][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.773112][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.785556][T26428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.797138][T26428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.839241][T26428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2365.848192][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2365.865095][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2365.902237][T26759] loop4: detected capacity change from 0 to 512 [ 2365.911483][T26751] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2365.931477][T26428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.980108][T26428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.007492][T26428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.025119][T26428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.331291][T26762] autofs4:pid:26762:autofs_fill_super: called with bogus options [ 2366.341974][T26759] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2366.367813][T26759] __quota_error: 43 callbacks suppressed [ 2366.367832][T26759] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=4 [ 2366.398175][T26759] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 2366.426920][T26759] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 2366.439659][T26759] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5161: bg 0: block 64: padding at end of block bitmap is not set [ 2366.606302][T26759] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 2366.641612][T26759] EXT4-fs (loop4): 1 orphan inode deleted [ 2366.700952][T26759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2368.034846][T22785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.131339][T22785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.210400][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2368.341058][ T3895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.355395][ T3895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.386647][T22785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2369.896277][T26793] binder: 26788:26793 ioctl c018620c 20000000 returned -14 [ 2369.931230][T26791] loop2: detected capacity change from 0 to 2048 [ 2370.098295][T26796] loop4: detected capacity change from 0 to 512 [ 2370.215475][T26794] loop2: detected capacity change from 0 to 2048 [ 2370.279382][T26794] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2370.280921][T26796] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5171: inode #1: comm syz.4.5171: iget: illegal inode # [ 2370.302969][T26396] udevd[26396]: incorrect nilfs2 checksum on /dev/loop2 [ 2370.311849][T26796] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5171: error while reading EA inode 1 err=-117 [ 2370.361056][T26796] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.5171: inode #1: comm syz.4.5171: iget: illegal inode # [ 2370.373741][T26490] udevd[26490]: incorrect nilfs2 checksum on /dev/loop2 [ 2370.390739][T26796] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5171: error while reading EA inode 1 err=-117 [ 2370.413479][T26807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2370.435552][T26796] EXT4-fs (loop4): 1 orphan inode deleted [ 2370.457108][T26810] loop0: detected capacity change from 0 to 512 [ 2370.478449][T26796] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 2370.516539][T26803] loop1: detected capacity change from 0 to 4096 [ 2370.548577][T26810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2370.652905][ T26] audit: type=1804 audit(2000001333.483:1352): pid=26796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5171" name=2F6E6577726F6F742F37352FE91F7189591E9233614B2F66696C65302F627573 dev="loop4" ino=19 res=1 errno=0 [ 2370.676830][ T26] audit: type=1804 audit(2000001333.503:1353): pid=26796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5171" name=2F6E6577726F6F742F37352FE91F7189591E9233614B2F66696C65302F627573 dev="loop4" ino=19 res=1 errno=0 [ 2370.683348][ T26] audit: type=1804 audit(2000001333.513:1354): pid=26796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5171" name=2F6E6577726F6F742F37352FE91F7189591E9233614B2F66696C65302F627573 dev="loop4" ino=19 res=1 errno=0 [ 2370.683781][T26810] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.5174: bad orphan inode 16 [ 2370.686361][T26810] ext4_test_bit(bit=15, block=4) = 0 [ 2370.686384][T26810] EXT4-fs (loop0): 1 orphan inode deleted [ 2370.686406][T26810] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback. [ 2370.777712][ T26] audit: type=1804 audit(2000001333.603:1355): pid=26796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5171" name=2F6E6577726F6F742F37352FE91F7189591E9233614B2F66696C65302F627573 dev="loop4" ino=19 res=1 errno=0 [ 2370.777898][ T26] audit: type=1800 audit(2000001333.603:1356): pid=26794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5170" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2370.793882][ T26] audit: type=1800 audit(2000001333.623:1357): pid=26794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5170" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2370.827754][T26803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2370.829522][T26796] can: request_module (can-proto-0) failed. [ 2370.902930][T26814] netlink: 'syz.2.5170': attribute type 2 has an invalid length. [ 2370.902949][T26814] netlink: 'syz.2.5170': attribute type 1 has an invalid length. [ 2370.904446][T26815] loop3: detected capacity change from 0 to 1764 [ 2371.031902][T26816] 9pnet: p9_fd_create_tcp (26816): problem binding to privport [ 2371.081999][ T26] audit: type=1326 audit(2000001333.913:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.0.5174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x0 [ 2371.187378][T26815] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2371.264423][ T8383] device hsr_slave_0 left promiscuous mode [ 2371.265022][ T8383] device hsr_slave_1 left promiscuous mode [ 2371.265726][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2371.265802][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2371.266639][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2371.266676][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2371.273967][ T8383] device bridge_slave_1 left promiscuous mode [ 2371.274110][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2371.401862][ T8383] device bridge_slave_0 left promiscuous mode [ 2371.402036][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2371.444328][ T8383] device veth1_macvtap left promiscuous mode [ 2371.444371][ T8383] device veth0_macvtap left promiscuous mode [ 2371.444429][ T8383] device veth1_vlan left promiscuous mode [ 2371.444475][ T8383] device veth0_vlan left promiscuous mode [ 2371.544320][T26822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2371.568685][T26822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2371.569197][T26822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2372.065017][ T26] audit: type=1326 audit(2000001334.893:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.0.5177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x0 [ 2372.185372][T26837] loop3: detected capacity change from 0 to 1024 [ 2372.426930][T26837] loop3: detected capacity change from 0 to 2048 [ 2372.442139][ T8383] team0 (unregistering): Port device team_slave_1 removed [ 2372.486543][ T8383] team0 (unregistering): Port device team_slave_0 removed [ 2372.500863][ T8383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2372.540987][ T8383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2372.628910][T26837] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 2372.651322][T26837] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 2372.946453][ T8383] bond0 (unregistering): Released all slaves [ 2374.168270][T26861] kAFS: No cell specified [ 2375.346600][T26854] loop0: detected capacity change from 0 to 512 [ 2375.379510][T26854] loop0: detected capacity change from 512 to 11 [ 2376.345456][ T26] audit: type=1326 audit(2000001339.173:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26851 comm="syz.2.5183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f886ff9 code=0x0 [ 2376.560694][T26884] loop3: detected capacity change from 0 to 2048 [ 2377.857577][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 2377.860971][T26890] loop0: detected capacity change from 0 to 8192 [ 2377.923880][T26897] netlink: 'syz.1.5194': attribute type 10 has an invalid length. [ 2377.975856][T26897] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2377.989371][T26898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5193'. [ 2378.216314][T26890] loop0: detected capacity change from 0 to 1024 [ 2379.120004][T26920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5199'. [ 2379.249029][T26923] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 2379.281122][T26925] loop2: detected capacity change from 0 to 256 [ 2379.319103][T26925] exfat: Unknown parameter 'ë ©' [ 2379.350212][T26927] netlink: 'syz.0.5201': attribute type 8 has an invalid length. [ 2379.475916][T26927] loop0: detected capacity change from 0 to 512 [ 2379.849360][T26940] loop2: detected capacity change from 0 to 512 [ 2380.771601][ T26] audit: type=1326 audit(2000001343.603:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26946 comm="syz.3.5207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03dc2a5ff9 code=0x0 [ 2380.839404][T26940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2380.888716][T26940] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 2381.025474][T26953] loop0: detected capacity change from 0 to 1024 [ 2381.104151][T26934] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 2381.196197][T26934] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 2381.218488][T26934] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.5205: Failed to acquire dquot type 0 [ 2382.261855][T26959] loop4: detected capacity change from 0 to 40427 [ 2382.288365][T26950] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 208: padding at end of block bitmap is not set [ 2382.317198][T26959] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2382.325242][T26959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2382.354697][T26959] F2FS-fs (loop4): invalid crc value [ 2382.387128][T26959] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2382.469146][T26953] loop0: detected capacity change from 0 to 1024 [ 2382.559577][T26959] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2382.566748][T26959] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2382.594815][ T26] audit: type=1804 audit(2000001345.423:1362): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5209" name="/newroot/81/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 2382.965424][T26953] loop0: detected capacity change from 0 to 128 [ 2383.004100][T26972] loop2: detected capacity change from 0 to 1024 [ 2383.063032][T26974] loop1: detected capacity change from 0 to 512 [ 2383.075385][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5208'. [ 2383.265076][T26972] loop2: detected capacity change from 0 to 2048 [ 2383.359790][T26974] EXT4-fs (loop1): 1 orphan inode deleted [ 2383.365671][T26974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2383.439661][T26974] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 2383.460342][T26972] UDF-fs: bad mount option "adin" or missing value [ 2385.556604][T26992] loop0: detected capacity change from 0 to 256 [ 2385.909521][T27003] loop3: detected capacity change from 0 to 1024 [ 2385.962423][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5212'. [ 2386.114998][T27003] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 2386.164431][T27003] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 2386.174937][T27003] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 2386.184503][T27003] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 2386.297145][T27003] netlink: 'syz.3.5218': attribute type 10 has an invalid length. [ 2386.416394][T27003] team0: Port device netdevsim0 added [ 2386.422721][T27010] netlink: 'syz.3.5218': attribute type 10 has an invalid length. [ 2386.456819][T27012] loop0: detected capacity change from 0 to 256 [ 2386.514174][T27010] team0: Port device netdevsim0 removed [ 2386.561823][T27010] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2386.581278][T27009] loop1: detected capacity change from 0 to 2048 [ 2386.621211][T27012] Process accounting resumed [ 2386.873114][T27009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2387.038854][T20800] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2387.189681][T27025] loop3: detected capacity change from 0 to 47 [ 2387.308816][T20800] usb 5-1: Using ep0 maxpacket: 16 [ 2387.389505][T15179] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2387.425654][T27025] MINIX-fs: bad superblock or unable to read bitmaps [ 2387.439166][T20800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.466604][T20800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2387.492209][T20800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2387.537901][T20800] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2387.584507][T20800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.599834][T20800] usb 5-1: config 0 descriptor?? [ 2387.809220][T15179] usb 2-1: not running at top speed; connect to a high speed hub [ 2388.574398][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2388.582141][T15179] usb 2-1: config 1 interface 0 altsetting 118 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2388.774338][T15179] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2388.792161][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2388.805949][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2388.814408][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2388.823070][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2388.848545][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2389.480647][T27042] syz.3.5229[27042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2389.480744][T27042] syz.3.5229[27042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2389.776562][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2389.810142][T27044] loop2: detected capacity change from 0 to 256 [ 2389.832786][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2389.848503][T15179] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 2389.863526][T15179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.874340][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2389.892380][T20800] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 2389.900833][T15179] usb 2-1: Product: Ðœ [ 2389.920278][T20800] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 2389.965995][T20800] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2389.980994][T15179] usb 2-1: can't set config #1, error -71 [ 2389.992375][T15179] usb 2-1: USB disconnect, device number 62 [ 2390.016477][T20800] microsoft 0003:045E:07DA.001C: no inputs found [ 2390.035239][T20800] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 2390.081091][T20796] usb 5-1: USB disconnect, device number 59 [ 2390.174430][T27046] loop4: detected capacity change from 0 to 512 [ 2390.259653][T27046] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 2390.259653][T27046] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2390.259653][T27046] [ 2390.466278][T27046] EXT4-fs (loop4): 1 orphan inode deleted [ 2390.489692][T27046] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 2390.512392][T27052] loop1: detected capacity change from 0 to 8192 [ 2390.599491][T27046] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 2395.039362][T27102] loop1: detected capacity change from 0 to 256 [ 2395.056935][T27097] loop2: detected capacity change from 0 to 1024 [ 2395.141702][T27097] hfsplus: creator requires a 4 character value [ 2395.147995][T27097] hfsplus: unable to parse mount options [ 2396.473698][T27116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5249'. [ 2396.579041][T27097] loop2: detected capacity change from 0 to 2048 [ 2396.641739][ C1] vkms_vblank_simulate: vblank timer overrun [ 2396.653432][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5251'. [ 2396.673739][T27126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5249'. [ 2396.705426][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 2396.749071][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 2396.806192][T27097] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2396.834763][T27097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2397.108431][T18445] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2397.279184][ C1] vkms_vblank_simulate: vblank timer overrun [ 2397.296188][T24614] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2397.538423][T18445] usb 5-1: Using ep0 maxpacket: 16 [ 2397.660354][T18445] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2397.728718][T24614] usb 2-1: Using ep0 maxpacket: 32 [ 2397.759690][T18445] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2397.876337][T18445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.885886][T24614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2397.930732][T24614] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2398.058833][T18445] usb 5-1: config 0 descriptor?? [ 2398.263120][T18445] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2398.289044][T24614] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2398.327449][T24614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.369010][T24614] usb 2-1: Product: syz [ 2398.379245][T24614] usb 2-1: Manufacturer: syz [ 2398.390664][T24614] usb 2-1: SerialNumber: syz [ 2398.412252][T24614] usb 2-1: config 0 descriptor?? [ 2398.614080][T24614] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 2398.853230][T26396] udevd[26396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2399.696623][T27152] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5259'. [ 2399.779711][T24614] usb 5-1: USB disconnect, device number 60 [ 2400.042173][T18445] usb 2-1: USB disconnect, device number 63 [ 2400.059289][ T26] audit: type=1326 audit(2000001362.883:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.2.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f886ff9 code=0x7fc00000 [ 2400.542926][T27161] fuse: Bad value for 'fd' [ 2400.594935][T27170] loop2: detected capacity change from 0 to 256 [ 2400.814051][T27173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5265'. [ 2400.886028][T27173] Invalid ELF header len 6 [ 2401.148527][T27182] tmpfs: Bad value for 'gid' [ 2402.016083][T27189] loop1: detected capacity change from 0 to 512 [ 2402.081424][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'. [ 2403.302271][T27189] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5269: bg 0: block 248: padding at end of block bitmap is not set [ 2403.349625][T27189] Quota error (device loop1): write_blk: dquota write failed [ 2404.223299][T27189] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2404.317853][T27189] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.5269: Failed to acquire dquot type 1 [ 2404.391356][ C1] vkms_vblank_simulate: vblank timer overrun [ 2404.403873][T27212] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 2404.466256][T27189] EXT4-fs (loop1): 1 truncate cleaned up [ 2404.485495][T27189] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2404.508939][T27189] ext4 filesystem being mounted at /171/bus supports timestamps until 2038 (0x7fffffff) [ 2404.517862][T27212] loop0: detected capacity change from 0 to 512 [ 2404.530598][T27217] block nbd2: NBD_DISCONNECT [ 2404.757748][T27212] loop0: detected capacity change from 0 to 2048 [ 2404.817868][T27222] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz.1.5269: deleted inode referenced: 12 [ 2404.989827][T27229] loop2: detected capacity change from 0 to 8 [ 2405.109272][T24089] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2405.209825][T24089] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2405.299501][T27236] loop0: detected capacity change from 0 to 1024 [ 2405.340260][T27237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5284'. [ 2405.357389][T27237] Invalid ELF header len 6 [ 2405.388675][T27238] loop3: detected capacity change from 0 to 256 [ 2405.496586][T27236] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 2405.528071][T27236] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 2405.582672][T27239] tmpfs: Bad value for 'gid' [ 2405.603216][T27236] EXT4-fs (loop0): write access unavailable, cannot proceed (try mounting with noload) [ 2406.167626][T27245] loop2: detected capacity change from 0 to 1024 [ 2406.274440][T27245] JBD2: no valid journal superblock found [ 2406.291440][T27245] EXT4-fs (loop2): error loading journal [ 2406.477733][T27247] [U] ^C [ 2406.755927][T27257] loop3: detected capacity change from 0 to 8 [ 2406.870337][T27259] loop0: detected capacity change from 0 to 16 [ 2406.961257][T27265] No such timeout policy "syz1" [ 2407.018888][T27259] /dev/loop0: Can't open blockdev [ 2407.054063][T27250] chnl_net:caif_netlink_parms(): no params data found [ 2407.102604][T27259] loop0: detected capacity change from 0 to 512 [ 2407.432127][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 2407.792764][T27250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2407.810704][T27250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.378518][ T23] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2408.386808][ T23] Bluetooth: hci3: Injecting HCI hardware error event [ 2408.399243][T14487] Bluetooth: hci3: hardware error 0x00 [ 2408.530343][T27250] device bridge_slave_0 entered promiscuous mode [ 2408.551804][T27250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2408.617556][T27281] loop2: detected capacity change from 0 to 256 [ 2408.624673][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 2408.652358][T27250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.666130][T27250] device bridge_slave_1 entered promiscuous mode [ 2408.741646][T27250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2408.773255][T27250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2408.980138][T27287] tipc: Started in network mode [ 2408.985475][T27287] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 2408.996594][T27287] tipc: Enabling of bearer rejected, failed to enable media [ 2409.035312][T27250] team0: Port device team_slave_0 added [ 2409.045216][T27250] team0: Port device team_slave_1 added [ 2409.125690][T27250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2409.145789][T27250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2409.173616][T27250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2409.189788][T27250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2409.196859][T27250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2409.223517][T27250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2409.321269][T27250] device hsr_slave_0 entered promiscuous mode [ 2409.339845][T27250] device hsr_slave_1 entered promiscuous mode [ 2409.355968][T27250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2409.396943][T27250] Cannot create hsr debugfs directory [ 2410.390278][T27299] loop2: detected capacity change from 0 to 8 [ 2410.713614][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 2410.745689][T27250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.063158][T27250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.899450][T27250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.012348][T27250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.285291][T27250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2412.313740][T27250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2412.325236][T27250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2412.350564][T27250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2412.614652][T27250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2412.681477][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2412.700040][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2412.763416][T27250] 8021q: adding VLAN 0 to HW filter on device team0 [ 2412.773468][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2412.774223][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2412.774670][T19183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.774708][T19183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2412.776113][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2412.798513][ T3613] Bluetooth: hci0: command 0x040f tx timeout [ 2412.810238][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2412.810995][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2412.811402][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.811439][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.811946][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2412.826011][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2412.866906][T27317] loop0: detected capacity change from 0 to 1024 [ 2412.876867][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2412.880195][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2412.881120][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2412.881998][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2412.882786][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2412.883400][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2412.884062][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2412.901741][T27250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2413.030715][T27250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2413.062480][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2413.071903][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2413.210042][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2413.217724][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2413.233396][T27250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.257410][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2413.266722][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2413.293648][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2413.302324][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2413.311423][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2413.319757][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2413.330390][T27250] device veth0_vlan entered promiscuous mode [ 2413.350585][T27250] device veth1_vlan entered promiscuous mode [ 2413.374067][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2413.382768][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2413.391497][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2413.400462][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2413.412048][T27250] device veth0_macvtap entered promiscuous mode [ 2413.430757][T27250] device veth1_macvtap entered promiscuous mode [ 2413.454568][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.465981][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.476533][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.487437][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.497870][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.511681][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.521987][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.533333][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.544447][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.555416][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.565724][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.576810][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.587488][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.598563][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.608606][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2413.620811][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.633476][T27250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.643139][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2413.659296][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2413.667402][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2413.676789][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2413.690714][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.758993][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.788367][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.799941][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.810186][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.820986][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.831799][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.846046][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.856503][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.867431][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.877639][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.889600][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.901227][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.912330][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.922754][T27250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.933897][T27250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.947026][T27250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.965046][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2413.985843][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2414.005855][T27326] [U] ^C [ 2414.007412][T27250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.032812][T27334] loop3: detected capacity change from 0 to 256 [ 2414.040188][T27250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.050689][T27250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.062439][T27250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.249648][T27337] loop2: detected capacity change from 0 to 1024 [ 2414.404334][T19183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2414.422408][T19183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.483891][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2414.543672][T27337] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 2414.559793][T27337] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 2414.568085][T27337] EXT4-fs (loop2): write access will be enabled during recovery [ 2414.578687][T19183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2414.584349][T27337] JBD2: no valid journal superblock found [ 2414.590348][T19183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.650230][T27342] binder: 27338:27342 ioctl c0306201 20000680 returned -14 [ 2414.745898][T23327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2415.187180][ T3613] Bluetooth: hci0: command 0x0419 tx timeout [ 2415.327607][T27337] EXT4-fs (loop2): error loading journal [ 2415.571245][T27351] loop3: detected capacity change from 0 to 8 [ 2415.893018][T27361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5325'. [ 2415.906852][ T26] audit: type=1326 audit(2000001378.723:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2416.455100][ T26] audit: type=1326 audit(2000001378.723:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2416.752436][T27370] loop1: detected capacity change from 0 to 256 [ 2416.785932][ T26] audit: type=1326 audit(2000001378.723:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2417.715698][ T26] audit: type=1326 audit(2000001378.723:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2417.745821][ T26] audit: type=1326 audit(2000001378.723:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2417.826934][ T26] audit: type=1326 audit(2000001378.723:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2417.947095][ T26] audit: type=1326 audit(2000001378.723:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2417.952139][ T3613] Bluetooth: hci5: command 0x0409 tx timeout [ 2417.988572][ T26] audit: type=1326 audit(2000001378.723:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2418.000856][T27356] chnl_net:caif_netlink_parms(): no params data found [ 2418.766159][ T26] audit: type=1326 audit(2000001378.723:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2418.955948][ T26] audit: type=1326 audit(2000001378.733:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27354 comm="syz.0.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x7ffc0000 [ 2419.316938][ T8383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.487154][T27356] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.529754][T27356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.537803][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5337'. [ 2419.539631][T27356] device bridge_slave_0 entered promiscuous mode [ 2419.552823][T27399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5337'. [ 2419.574374][T27399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5337'. [ 2419.585493][T27399] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5337'. [ 2419.596888][ T8383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.623985][T27356] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.642956][T27356] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.658083][T27356] device bridge_slave_1 entered promiscuous mode [ 2419.798808][ T8383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.822064][T27356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2419.893311][T27356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2420.072336][ T3613] Bluetooth: hci5: command 0x041b tx timeout [ 2420.420628][T27417] fuse: Bad value for 'fd' [ 2423.373013][ T9663] Bluetooth: hci5: command 0x040f tx timeout [ 2423.521552][ T8383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2423.732404][T27356] team0: Port device team_slave_0 added [ 2423.756701][T27434] loop1: detected capacity change from 0 to 8 [ 2423.791469][T27356] team0: Port device team_slave_1 added [ 2423.958431][T27438] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.001193][T27438] binder: 27433:27438 ioctl 4018620d 200001c0 returned -16 [ 2424.014544][T27441] loop0: detected capacity change from 0 to 256 [ 2424.034363][T27442] binder: 27433:27442 ioctl c0306201 20000480 returned -22 [ 2424.145959][ C1] vkms_vblank_simulate: vblank timer overrun [ 2424.163360][T27356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2424.410982][ C1] vkms_vblank_simulate: vblank timer overrun [ 2424.445263][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2424.549536][T27356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2424.640744][T27356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2424.648043][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2424.752217][T27356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2425.330029][T27356] device hsr_slave_0 entered promiscuous mode [ 2425.337108][T27356] device hsr_slave_1 entered promiscuous mode [ 2425.347338][T27356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2425.363066][T27462] loop3: detected capacity change from 0 to 2048 [ 2425.695231][T20794] Bluetooth: hci5: command 0x0419 tx timeout [ 2425.711201][T27356] Cannot create hsr debugfs directory [ 2426.034823][T27462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2426.424461][T27480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2428.582653][T27504] loop0: detected capacity change from 0 to 256 [ 2428.729173][T27356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2428.786736][T27356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2428.814169][T27356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2428.864794][ T8383] device hsr_slave_0 left promiscuous mode [ 2428.896338][ T8383] device hsr_slave_1 left promiscuous mode [ 2428.919891][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2428.978178][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.077771][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.112200][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.176409][ T8383] device bridge_slave_1 left promiscuous mode [ 2429.215034][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.259562][ T8383] device bridge_slave_0 left promiscuous mode [ 2429.299330][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2429.360123][ T8383] device veth1_macvtap left promiscuous mode [ 2429.366207][ T8383] device veth0_macvtap left promiscuous mode [ 2429.422742][ T8383] device veth1_vlan left promiscuous mode [ 2429.459837][ T8383] device veth0_vlan left promiscuous mode [ 2429.700990][T27527] loop0: detected capacity change from 0 to 2048 [ 2429.754048][T27530] loop1: detected capacity change from 0 to 2048 [ 2429.990723][T27530] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 2430.039086][T27530] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 2430.930755][T27250] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 2431.591697][ T8383] team0 (unregistering): Port device team_slave_1 removed [ 2431.639653][ T8383] team0 (unregistering): Port device team_slave_0 removed [ 2431.690579][ T8383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2431.727255][ T8383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2433.337651][ T8383] bond0 (unregistering): Released all slaves [ 2433.363935][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 2433.363948][ T26] audit: type=1326 audit(2000001396.193:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27554 comm="syz.0.5372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b57e7ff9 code=0x0 [ 2433.414070][T27356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2433.565973][T27561] loop2: detected capacity change from 0 to 164 [ 2433.808113][T27356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2434.116134][T27572] print_req_error: 2 callbacks suppressed [ 2434.116177][T27572] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.134561][T27572] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.145908][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2434.156834][T27572] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.168252][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2434.177967][T27572] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2434.185750][T27572] UDF-fs: Scanning with blocksize 512 failed [ 2434.194920][T27572] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.207291][T27572] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.218719][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2434.229572][T27572] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.241092][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2434.250837][T27572] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2434.258623][T27572] UDF-fs: Scanning with blocksize 1024 failed [ 2434.267265][T27572] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.279507][T27572] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.291040][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2434.301631][T27572] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.312977][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2434.322851][T27572] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2434.330663][T27572] UDF-fs: Scanning with blocksize 2048 failed [ 2434.338854][T27572] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2434.351178][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2434.361729][T27572] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 2434.371544][T27572] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 2434.379312][T27572] UDF-fs: Scanning with blocksize 4096 failed [ 2434.431996][T27572] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 2434.539792][T27570] loop1: detected capacity change from 0 to 8 [ 2434.551585][T27356] 8021q: adding VLAN 0 to HW filter on device team0 [ 2434.580178][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2434.601314][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2434.650801][T27574] loop2: detected capacity change from 0 to 256 [ 2434.673662][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2434.689650][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2434.740780][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.747966][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2434.916656][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2435.006501][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2435.055926][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.063061][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2435.107618][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2435.249369][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2435.260446][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2435.270865][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2435.293497][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2435.306606][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2435.319110][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2435.333329][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2435.352907][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2435.375881][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2435.386102][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2435.399749][T27356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2435.409679][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2435.825049][T27356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.853813][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2435.869310][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2436.312758][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2436.435742][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2436.670803][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2436.680827][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2436.693960][T27356] device veth0_vlan entered promiscuous mode [ 2436.952494][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2436.974275][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2437.017174][T27356] device veth1_vlan entered promiscuous mode [ 2437.067373][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2437.083774][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2437.103830][T27356] device veth0_macvtap entered promiscuous mode [ 2437.115716][T27356] device veth1_macvtap entered promiscuous mode [ 2437.154579][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.186501][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.320919][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.382156][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.405832][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.440657][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.478837][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.524510][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.544075][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.579818][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.606086][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.636614][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.657885][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.685821][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.717148][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.739425][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.763501][T27356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2437.784894][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2437.811433][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2437.843393][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2437.874885][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2437.910882][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2437.944316][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.999089][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.037353][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.082878][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.130004][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.154962][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.187632][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.219867][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.270393][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.315939][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.354518][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.388541][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.405914][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.417530][T27356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.432425][T27356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.513790][T27356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.617593][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2438.638040][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2438.728939][T27356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.769390][T27356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.812588][T27356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.830366][T27614] loop1: detected capacity change from 0 to 2048 [ 2438.860107][T27356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.959445][T27615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2439.840256][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.871544][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.927466][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.959787][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.970176][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2440.001463][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2441.280578][T27632] loop3: detected capacity change from 0 to 256 [ 2441.386756][T27638] loop0: detected capacity change from 0 to 512 [ 2441.395963][T27636] loop4: detected capacity change from 0 to 164 [ 2442.607771][T27644] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2442.615498][T27644] UDF-fs: Scanning with blocksize 512 failed [ 2442.650264][T27644] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2442.657772][T27644] UDF-fs: Scanning with blocksize 1024 failed [ 2442.666289][T27644] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2442.673758][T27644] UDF-fs: Scanning with blocksize 2048 failed [ 2442.687038][T27644] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2442.694762][T27644] UDF-fs: Scanning with blocksize 4096 failed [ 2443.854654][T27661] binder: Bad value for 'max' [ 2443.902242][T27659] loop2: detected capacity change from 0 to 8 [ 2443.918130][T27662] dlm: plock device version mismatch: kernel (1.2.0), user (314645249.2892448523.1886894762) [ 2444.061624][ T8383] tipc: Left network mode [ 2445.488031][T27672] netlink: 'syz.4.5400': attribute type 11 has an invalid length. [ 2445.515381][T27681] loop0: detected capacity change from 0 to 256 [ 2445.856131][T27685] loop1: detected capacity change from 0 to 164 [ 2446.822421][T27691] print_req_error: 2 callbacks suppressed [ 2446.822440][T27691] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.839521][T27691] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.850623][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2446.860387][T27691] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.871495][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 2446.881062][T27691] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 2446.888808][T27691] UDF-fs: Scanning with blocksize 512 failed [ 2446.895277][T27691] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.906429][T27691] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.917524][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2446.927356][T27691] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.938522][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 2446.948073][T27691] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 2446.955723][T27691] UDF-fs: Scanning with blocksize 1024 failed [ 2446.962246][T27691] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.973421][T27691] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2446.984711][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2446.994451][T27691] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2447.005750][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 2447.015334][T27691] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 2447.022981][T27691] UDF-fs: Scanning with blocksize 2048 failed [ 2447.029423][T27691] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2447.040657][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2447.050395][T27691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 2447.059959][T27691] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 2447.067708][T27691] UDF-fs: Scanning with blocksize 4096 failed [ 2447.073803][T27691] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 2447.205119][T27695] loop0: detected capacity change from 0 to 256 [ 2447.270316][T27699] loop1: detected capacity change from 0 to 512 [ 2447.350602][T27699] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 2447.350658][T27699] EXT4-fs (loop1): can't mount with both data=journal and dax [ 2447.493291][ T8383] bond0: (slave wlan1): Releasing backup interface [ 2447.506751][T27701] loop3: detected capacity change from 0 to 8192 [ 2447.719699][T27701] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 2447.744268][T27701] REISERFS (device loop3): using ordered data mode [ 2447.760003][T27701] reiserfs: using flush barriers [ 2447.776936][T27701] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2447.801793][T27701] REISERFS (device loop3): checking transaction log (loop3) [ 2448.822964][T20796] ------------[ cut here ]------------ [ 2448.832322][T20796] WARNING: CPU: 0 PID: 20796 at net/wireless/core.h:220 disconnect_work+0x236/0x320 [ 2448.842901][T20796] Modules linked in: [ 2448.846912][T20796] CPU: 0 PID: 20796 Comm: kworker/0:8 Not tainted 5.15.167-syzkaller #0 [ 2448.857076][T20796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2448.880118][T20796] Workqueue: events disconnect_work [ 2448.886540][T20796] RIP: 0010:disconnect_work+0x236/0x320 [ 2448.907347][T20796] Code: 08 48 89 df e8 8b ae 18 f8 48 8b 1b 4c 39 fb 74 75 e8 5e e4 ce f7 e9 77 fe ff ff e8 54 e4 ce f7 e9 5e ff ff ff e8 4a e4 ce f7 <0f> 0b e9 d1 fe ff ff e8 3e e4 ce f7 0f 0b eb b1 48 c7 c1 44 94 e9 [ 2449.004050][T20796] RSP: 0018:ffffc90003167c10 EFLAGS: 00010293 [ 2449.017624][T20796] RAX: ffffffff89b17626 RBX: ffff888078b5cca0 RCX: ffff888025f6d940 [ 2449.037859][T27701] REISERFS (device loop3): Using tea hash to sort names [ 2449.061573][T27701] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 2449.087571][T20796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2449.123349][T20796] RBP: 0000000000000000 R08: ffffffff89b174ea R09: fffffbfff1b463a6 [ 2449.155353][T20796] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078b5cc90 [ 2449.166623][T20796] R13: ffff888077cc5128 R14: dffffc0000000000 R15: ffff8880211b8cf0 [ 2449.197285][T20796] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 2449.234663][T20796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2449.256444][T20796] CR2: 0000000000000000 CR3: 0000000079e7b000 CR4: 00000000003526f0 [ 2449.282117][T20796] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2449.291318][T20796] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2449.302421][T20796] Call Trace: [ 2449.309063][T20796] [ 2449.312431][T20796] ? __warn+0x15b/0x300 [ 2449.321261][T20796] ? disconnect_work+0x236/0x320 [ 2449.332410][T20796] ? report_bug+0x1b7/0x2e0 [ 2449.348163][T20796] ? handle_bug+0x3d/0x70 [ 2449.357459][T20796] ? exc_invalid_op+0x16/0x40 [ 2449.374553][T20796] ? asm_exc_invalid_op+0x16/0x20 [ 2449.386891][T20796] ? disconnect_work+0xfa/0x320 [ 2449.395627][T20796] ? disconnect_work+0x236/0x320 [ 2449.405854][T20796] ? disconnect_work+0x236/0x320 [ 2449.412516][T20796] process_one_work+0x8a1/0x10c0 [ 2449.420276][T20796] ? worker_detach_from_pool+0x260/0x260 [ 2449.429498][T20796] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2449.436630][T20796] ? kthread_data+0x4e/0xc0 [ 2449.452954][T20796] ? wq_worker_running+0x97/0x170 [ 2449.464533][T20796] worker_thread+0xaca/0x1280 [ 2449.473753][T20796] kthread+0x3f6/0x4f0 [ 2449.480679][T20796] ? rcu_lock_release+0x20/0x20 [ 2449.485928][T20796] ? kthread_blkcg+0xd0/0xd0 [ 2449.523070][T20796] ret_from_fork+0x1f/0x30 [ 2449.527839][T20796] [ 2449.539861][T20796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2449.547275][T20796] CPU: 0 PID: 20796 Comm: kworker/0:8 Not tainted 5.15.167-syzkaller #0 [ 2449.555621][T20796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2449.565708][T20796] Workqueue: events disconnect_work [ 2449.570944][T20796] Call Trace: [ 2449.574239][T20796] [ 2449.577188][T20796] dump_stack_lvl+0x1e3/0x2d0 [ 2449.581893][T20796] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 2449.587557][T20796] ? panic+0x860/0x860 [ 2449.591668][T20796] ? disconnect_work+0x210/0x320 [ 2449.596632][T20796] ? disconnect_work+0x210/0x320 [ 2449.601600][T20796] panic+0x318/0x860 [ 2449.605525][T20796] ? __warn+0x16a/0x300 [ 2449.609695][T20796] ? fb_is_primary_device+0xd0/0xd0 [ 2449.614935][T20796] ? ret_from_fork+0x1f/0x30 [ 2449.619553][T20796] ? disconnect_work+0x236/0x320 [ 2449.624510][T20796] __warn+0x2b2/0x300 [ 2449.628515][T20796] ? disconnect_work+0x236/0x320 [ 2449.633470][T20796] report_bug+0x1b7/0x2e0 [ 2449.637829][T20796] handle_bug+0x3d/0x70 [ 2449.641997][T20796] exc_invalid_op+0x16/0x40 [ 2449.646527][T20796] asm_exc_invalid_op+0x16/0x20 [ 2449.651398][T20796] RIP: 0010:disconnect_work+0x236/0x320 [ 2449.656966][T20796] Code: 08 48 89 df e8 8b ae 18 f8 48 8b 1b 4c 39 fb 74 75 e8 5e e4 ce f7 e9 77 fe ff ff e8 54 e4 ce f7 e9 5e ff ff ff e8 4a e4 ce f7 <0f> 0b e9 d1 fe ff ff e8 3e e4 ce f7 0f 0b eb b1 48 c7 c1 44 94 e9 [ 2449.676599][T20796] RSP: 0018:ffffc90003167c10 EFLAGS: 00010293 [ 2449.682703][T20796] RAX: ffffffff89b17626 RBX: ffff888078b5cca0 RCX: ffff888025f6d940 [ 2449.690700][T20796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2449.698701][T20796] RBP: 0000000000000000 R08: ffffffff89b174ea R09: fffffbfff1b463a6 [ 2449.706704][T20796] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078b5cc90 [ 2449.714699][T20796] R13: ffff888077cc5128 R14: dffffc0000000000 R15: ffff8880211b8cf0 [ 2449.722704][T20796] ? disconnect_work+0xfa/0x320 [ 2449.727590][T20796] ? disconnect_work+0x236/0x320 [ 2449.732568][T20796] process_one_work+0x8a1/0x10c0 [ 2449.737543][T20796] ? worker_detach_from_pool+0x260/0x260 [ 2449.743203][T20796] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2449.748774][T20796] ? kthread_data+0x4e/0xc0 [ 2449.753299][T20796] ? wq_worker_running+0x97/0x170 [ 2449.758344][T20796] worker_thread+0xaca/0x1280 [ 2449.763071][T20796] kthread+0x3f6/0x4f0 [ 2449.767170][T20796] ? rcu_lock_release+0x20/0x20 [ 2449.772036][T20796] ? kthread_blkcg+0xd0/0xd0 [ 2449.776659][T20796] ret_from_fork+0x1f/0x30 [ 2449.781118][T20796] [ 2449.784427][T20796] Kernel Offset: disabled [ 2449.789480][T20796] Rebooting in 86400 seconds..