last executing test programs: 1m19.901505243s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) 1m18.984518059s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0xfffffffffffffe94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2b, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x16, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x40) (async) r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x3, &(0x7f00000002c0)="d5", 0x1) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_lower}, {@nonumtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8no}, {@uni_xlateno}]}, 0x5, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0xa5) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f00000000c0)={0x0, 0xfffa}, 0x2) 1m17.643083073s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76502bed382b4c6d9b1a5de6e4fab9bf471003eb9f0121be23a2fcfc7c53abfada40f11805b9ef165c9f74cea6f5ecee9e7778a17336adb2f946893a2d974ec0047d7b90f6a537854be789642e"], 0x118) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0xffff, 0x7, 0x1, 0x7c, 0x7, "2a45d3658d522bc36c101fbb78d4bebe", 0x8, 0x1, 0x6, 0x0, 0x1, 0xaf, 0x40}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x7, 0x3032344d, 0x4, 0xfff, 0x2, @stepwise={{0x2, 0x2}, {0x47f, 0xc5}, {0xff000000, 0x401}}}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000400)={{0x2, @default}, [@null, @null, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x45) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) (async) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="76502bed382b4c6d9b1a5de6e4fab9bf471003eb9f0121be23a2fcfc7c53abfada40f11805b9ef165c9f74cea6f5ecee9e7778a17336adb2f946893a2d974ec0047d7b90f6a537854be789642e"], 0x118) (async) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0xffff, 0x7, 0x1, 0x7c, 0x7, "2a45d3658d522bc36c101fbb78d4bebe", 0x8, 0x1, 0x6, 0x0, 0x1, 0xaf, 0x40}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x7, 0x3032344d, 0x4, 0xfff, 0x2, @stepwise={{0x2, 0x2}, {0x47f, 0xc5}, {0xff000000, 0x401}}}) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) bind$ax25(r5, &(0x7f0000000400)={{0x2, @default}, [@null, @null, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x45) (async) 1m16.424190614s ago: executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00') syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0) read(r5, &(0x7f0000001580)=""/4114, 0x1012) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 44.392569932s ago: executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00') syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0) read(r5, &(0x7f0000001580)=""/4114, 0x1012) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 22.107848789s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0), 0xff13) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0xb8, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000044001a80400004"], 0x64}}, 0x0) 18.593652693s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0206800002000056"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x408, &(0x7f0000000440)={[{@nodatacow}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x36]}}, {@max_inline={'max_inline', 0x3d, [0x31, 0x33, 0x39, 0x38, 0x78, 0x38, 0x0]}}, {@rescan_uuid_tree}, {@noenospc_debug}, {@nobarrier}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7ff}) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '', [], 0xa, "2acf9615"}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r3 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x1e}) 16.642611319s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001500000000000000640000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) poll(&(0x7f00000020c0)=[{r4, 0x80}, {0xffffffffffffffff, 0x200}], 0x2, 0xf5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16.516546468s ago: executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000092970000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000001e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/softnet_stat\x00') syz_emit_ethernet(0x519, &(0x7f0000001fc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4e3, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x87, 0x4e, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x100, [0xa0, 0x20, 0x10000]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x0, 0x9d, "72ebc60c9d64a1cb16f338e705cf89d3d6f54ddbf6db78731a38c0080b6cfcec4e54ae4d3a1bbb1abc49f4d96ef9492fb9bf5e5aa4456d48cc1cf9769f9f2db1afae56897985bac1e7821a77663a8f6c35170a292650fd78650fa435f5e02ba2dec1b04c8dd567eff1c5d0156ea1f8e8432637d1681818bceffbdcb1459f0c4ddd437bd1f72f2881160d36105bc4baef79fc6bc2799096427a5e3bc425"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x6, 0x5, [0x2, 0x9, 0x59ae4f69, 0x6, 0x7fffffff, 0x8000000000000000, 0x7, 0x3, 0x1, 0x2]}}, @generic={0x0, 0xeb, "779e3337a1ae03e6c4ccc4deef24908c45855eb671f7e4b5b80a43afb0424a01b332a61f22feaade82685f2d2df1fd3df966207ed74edf25e39aa86fba0ab513092b9bbb637371d3ea3733eee74666a8a7faefb1dc2785d5176bb4d75745128a20624d3e2b35677d371eef207c95990be3733b749907704c8ba2a9b19e74d5b0f4c1d98356bf416122583f3527eca109719c2e7d5aad64093d8620314b11d30753e08555fce3202c34ba30ad57eaf56fe088b0b6d922366e1645eee5316f672794ad30229487ca220cb4016e4a1ab2df6002ab6988223ba8a1abcfaa71feff2e9bcc7c1e7d1ebb08645fac"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0xb72, 0x2, 0x0, 0x4]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfb, 0x8000, [0x9, 0x8000, 0x4, 0xfffffffffffffff8, 0x3]}}]}, @hopopts={0x3a, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x4e, "1e3bbf09f017ccc677b5af92f94e1ffde3efa32e86ae26e64288b49227ab02a956cf2e26fdc8722c86d66f690820b9330bf7a97fd8d93bd28740c38aae812847aca6429dcf5fcf335c9ae3604aa2"}, @ra={0x5, 0x2, 0xfe01}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x6c, 0x12, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @mcast2]}, @dstopts={0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x8000}}]}, @srh={0x8, 0xc, 0x4, 0x6, 0x8, 0x68, 0xffff, [@empty, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xc, 0x1, 0x33, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a896579269748e254c1e4a8a8b3f0a060000000000000034066d42ca0a5c15b37adac15084dbaf736b41e5af030200"/65}, {0x0, 0x1, "000000050000000026000400"}, {}]}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r8, 0x0) read(r5, &(0x7f0000001580)=""/4114, 0x1012) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0x2c, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff1}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 10.913884564s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000100000000b4febbdb0000850000e06c00000095f832"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write(r0, &(0x7f0000001780)="5dc4ee8c991240a8867bec1c5f676aeb8350c5ed94a66fc3fc66fd28ff894d6a986773e05f1589c566ad7e6a22f9b3a6c97f6dd4e65f52c4ed2e5360c5cd0883e75e182b39b50a8b0efce2c57b5ccf9088d1188f6c2a7020a74b00d3181e5707c9cfcdd490c654dc073853b063f3f2fc305f922a8a43b0af21ca86d05606f4db0ff45a68449037387d88e2a0958bfdd4b6c5458aaa810d82ff207e3522543f143458a06628bc7f36c035ed6f442aea48e5a0bb87d6b52645e3eda8f5340d06367d8eab407e3f2954924872a4ab9d8a27e26318acdf0740dddc8c0ac17db2017c", 0xe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 9.037189569s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup(r5) fanotify_mark(r4, 0x1, 0x48001059, r6, 0x0) ftruncate(r5, 0xdcb) sendfile(r5, r6, 0x0, 0x80000000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x3, 0x6ed, &(0x7f0000000900)="$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") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7}, [@RTA_GATEWAY={0x8, 0x1e, @multicast2}]}, 0x24}}, 0x0) sync_file_range(r0, 0x4, 0x5, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 7.514051953s ago: executing program 1: syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000f00)='./file0\x00', 0x4000450, &(0x7f0000000340)=ANY=[], 0x1, 0xefb, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f18591bb90dd1e0464d31ff30a7e5b227e08a2ee0643e735c3cd21b6e743176c8eefd41693"], 0xfc}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60efc7000030210000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./bus\x00') recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x2001) unlinkat(r0, &(0x7f0000005440)='./bus\x00', 0x200) 4.287279455s ago: executing program 3: socket$kcm(0x10, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x28, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call, @snprintf, @jmp={0x5, 0x0, 0xc, 0x6, 0x0, 0x1}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x68, &(0x7f00000002c0)=""/104, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x80, 0x3, 0x2}, 0x10, 0x254dc, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x100}, 0x90) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f0000000640)=0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601040000000000000000f5ff00060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040810}, 0x8000) 3.89045824s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r5}, 0x10) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 3.73006661s ago: executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 3.302274255s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x104, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x39, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8"]}]}, 0x104}}, 0x0) 3.205520831s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5450, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) 3.109192329s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) 2.782031026s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 2.718669974s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000009e00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 2.588513407s ago: executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)={0x3, 0x0, [{0x0, 0xb9, &(0x7f0000000800)=""/185}, {0x0, 0xab, &(0x7f0000000d00)=""/171}, {0x4000, 0x5a, &(0x7f0000000b00)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 2.301067222s ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r3) 2.118828149s ago: executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x1e, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'netdevsim0\x00', @random='\x00\x00\x00 \x00'}) 1.934348574s ago: executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mlockall(0x1) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc)) 1.700782065s ago: executing program 0: socket$kcm(0x10, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x28, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call, @snprintf, @jmp={0x5, 0x0, 0xc, 0x6, 0x0, 0x1}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x68, &(0x7f00000002c0)=""/104, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x80, 0x3, 0x2}, 0x10, 0x254dc, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x100}, 0x90) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f0000000640)=0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000040601040000000000000000f5ff00060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040810}, 0x8000) 1.665846671s ago: executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 1.120777486s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) 804.888518ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 503.294184ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0xd28ab64e462fd206, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2024/06/01 08:00:25 fuzzer started 2024/06/01 08:00:26 dialing manager at 10.128.0.169:30024 [ 164.731196][ T5045] cgroup: Unknown subsys name 'net' [ 164.954745][ T5045] cgroup: Unknown subsys name 'rlimit' 2024/06/01 08:01:14 starting 5 executor processes [ 210.891177][ T5047] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 213.424046][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.444010][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.465076][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.498013][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.513765][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.524790][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.548013][ T5078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.557787][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.568189][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.577177][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.593599][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.603614][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.605539][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.612585][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.624728][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.628718][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.643300][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.643622][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.659895][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.693629][ T5073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.720235][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.745038][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.756477][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.767131][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.186524][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.207765][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.217193][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.231105][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.242603][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.251912][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.956468][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 215.349912][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 215.372241][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 215.713829][ T5086] Bluetooth: hci1: command tx timeout [ 215.741529][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 215.762129][ T5086] Bluetooth: hci3: command tx timeout [ 215.767773][ T5086] Bluetooth: hci0: command tx timeout [ 215.922180][ T5086] Bluetooth: hci2: command tx timeout [ 216.148460][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.156423][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.166222][ T5081] bridge_slave_0: entered allmulticast mode [ 216.175445][ T5081] bridge_slave_0: entered promiscuous mode [ 216.324195][ T5086] Bluetooth: hci4: command tx timeout [ 216.387218][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.395107][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.402994][ T5081] bridge_slave_1: entered allmulticast mode [ 216.412001][ T5081] bridge_slave_1: entered promiscuous mode [ 216.466270][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.476617][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.485929][ T5077] bridge_slave_0: entered allmulticast mode [ 216.495090][ T5077] bridge_slave_0: entered promiscuous mode [ 216.594231][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 216.614851][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.622900][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.630559][ T5077] bridge_slave_1: entered allmulticast mode [ 216.639556][ T5077] bridge_slave_1: entered promiscuous mode [ 216.650131][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.658976][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.666979][ T5076] bridge_slave_0: entered allmulticast mode [ 216.675115][ T5076] bridge_slave_0: entered promiscuous mode [ 216.739407][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.816700][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.824600][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.832562][ T5076] bridge_slave_1: entered allmulticast mode [ 216.841466][ T5076] bridge_slave_1: entered promiscuous mode [ 216.893099][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.988865][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.059195][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.067074][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.074927][ T5072] bridge_slave_0: entered allmulticast mode [ 217.084132][ T5072] bridge_slave_0: entered promiscuous mode [ 217.145744][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.198053][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.205923][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.213601][ T5072] bridge_slave_1: entered allmulticast mode [ 217.221562][ T5072] bridge_slave_1: entered promiscuous mode [ 217.240206][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.353012][ T5081] team0: Port device team_slave_0 added [ 217.378303][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.438092][ T5077] team0: Port device team_slave_0 added [ 217.454172][ T5081] team0: Port device team_slave_1 added [ 217.477512][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.528620][ T5077] team0: Port device team_slave_1 added [ 217.668228][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.764471][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.773890][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.801610][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.806669][ T5086] Bluetooth: hci1: command tx timeout [ 217.842017][ T5086] Bluetooth: hci0: command tx timeout [ 217.849326][ T5086] Bluetooth: hci3: command tx timeout [ 217.900150][ T5076] team0: Port device team_slave_0 added [ 217.918280][ T5076] team0: Port device team_slave_1 added [ 217.948166][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.955690][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.983290][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.004111][ T50] Bluetooth: hci2: command tx timeout [ 218.029556][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.037022][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.063808][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.234210][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.241471][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.268617][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.286677][ T5072] team0: Port device team_slave_0 added [ 218.351624][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.359301][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.385897][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.400994][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.408861][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.412250][ T50] Bluetooth: hci4: command tx timeout [ 218.417678][ T5091] bridge_slave_0: entered allmulticast mode [ 218.430713][ T5091] bridge_slave_0: entered promiscuous mode [ 218.448636][ T5072] team0: Port device team_slave_1 added [ 218.456632][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.466037][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.473993][ T5091] bridge_slave_1: entered allmulticast mode [ 218.483104][ T5091] bridge_slave_1: entered promiscuous mode [ 218.532238][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.539426][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.566512][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.684560][ T5081] hsr_slave_0: entered promiscuous mode [ 218.694991][ T5081] hsr_slave_1: entered promiscuous mode [ 218.795517][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.850363][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.857675][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.884548][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.934377][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.052341][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.059601][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.086275][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.125327][ T5077] hsr_slave_0: entered promiscuous mode [ 219.140506][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.147285][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.160556][ T5077] hsr_slave_1: entered promiscuous mode [ 219.169490][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.177526][ T5077] Cannot create hsr debugfs directory [ 219.228463][ T5076] hsr_slave_0: entered promiscuous mode [ 219.237213][ T5076] hsr_slave_1: entered promiscuous mode [ 219.247332][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.256137][ T5076] Cannot create hsr debugfs directory [ 219.355254][ T5091] team0: Port device team_slave_0 added [ 219.441651][ T5091] team0: Port device team_slave_1 added [ 219.718690][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.726063][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.753372][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.782884][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.790047][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.816767][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.838836][ T5072] hsr_slave_0: entered promiscuous mode [ 219.847845][ T50] Bluetooth: hci1: command tx timeout [ 219.855336][ T5072] hsr_slave_1: entered promiscuous mode [ 219.863720][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.871445][ T5072] Cannot create hsr debugfs directory [ 219.932127][ T50] Bluetooth: hci3: command tx timeout [ 219.937152][ T5086] Bluetooth: hci0: command tx timeout [ 220.093246][ T5086] Bluetooth: hci2: command tx timeout [ 220.482386][ T5086] Bluetooth: hci4: command tx timeout [ 220.503317][ T5091] hsr_slave_0: entered promiscuous mode [ 220.512773][ T5091] hsr_slave_1: entered promiscuous mode [ 220.520711][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.528656][ T5091] Cannot create hsr debugfs directory [ 220.739096][ T5077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.816753][ T5077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.848123][ T5077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.906494][ T5077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.058406][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.131351][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.155229][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.190603][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.464379][ T5076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.535429][ T5076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.561101][ T5072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.595590][ T5072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.616596][ T5072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.637446][ T5076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.656615][ T5076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.706213][ T5072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.924105][ T5086] Bluetooth: hci1: command tx timeout [ 222.008192][ T5086] Bluetooth: hci0: command tx timeout [ 222.016724][ T50] Bluetooth: hci3: command tx timeout [ 222.090508][ T5091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.173615][ T5086] Bluetooth: hci2: command tx timeout [ 222.179462][ T5091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.205151][ T5091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.247601][ T5091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.479829][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.592641][ T5086] Bluetooth: hci4: command tx timeout [ 222.780740][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.808216][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.924385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.932327][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.982601][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.060120][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.182755][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.190524][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.210500][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.218414][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.253432][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.261177][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.317216][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.473337][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.639652][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.701562][ T5077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.714787][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.749672][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.757476][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.835989][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.843790][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.957879][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.971453][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.979281][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.110617][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.187881][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.195675][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.291279][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.444975][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.452825][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.579783][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.587707][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.679296][ T5072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.664102][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.185728][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.280340][ T5077] veth0_vlan: entered promiscuous mode [ 226.431552][ T5077] veth1_vlan: entered promiscuous mode [ 226.498359][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.780801][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.863110][ T5077] veth0_macvtap: entered promiscuous mode [ 226.896464][ T5081] veth0_vlan: entered promiscuous mode [ 226.939360][ T5077] veth1_macvtap: entered promiscuous mode [ 226.966600][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.053436][ T5081] veth1_vlan: entered promiscuous mode [ 227.166840][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.280017][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.440075][ T5077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.454685][ T5077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.465209][ T5077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.474468][ T5077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.516457][ T5072] veth0_vlan: entered promiscuous mode [ 227.615079][ T5072] veth1_vlan: entered promiscuous mode [ 227.689463][ T5081] veth0_macvtap: entered promiscuous mode [ 227.729694][ T5091] veth0_vlan: entered promiscuous mode [ 227.846990][ T5081] veth1_macvtap: entered promiscuous mode [ 227.879379][ T5091] veth1_vlan: entered promiscuous mode [ 228.053155][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.065046][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.080187][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.145555][ T5072] veth0_macvtap: entered promiscuous mode [ 228.207940][ T5072] veth1_macvtap: entered promiscuous mode [ 228.242787][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.253684][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.268944][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.384822][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.395639][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.406192][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.415399][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.450347][ T5091] veth0_macvtap: entered promiscuous mode [ 228.492855][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.504881][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.515187][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.525952][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.540996][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.588682][ T5091] veth1_macvtap: entered promiscuous mode [ 228.704650][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.717039][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.730034][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.741505][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.751656][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.762541][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.777900][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.831380][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.842318][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.854839][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.866903][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.889376][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.027404][ T5072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.037986][ T5072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.047559][ T5072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.056737][ T5072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.166344][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.177234][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.187501][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.198419][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.210234][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.224209][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.239279][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.425930][ T5076] veth0_vlan: entered promiscuous mode [ 229.534688][ T5091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.543975][ T5091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.553280][ T5091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.562416][ T5091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.598838][ T5076] veth1_vlan: entered promiscuous mode [ 229.972533][ T5076] veth0_macvtap: entered promiscuous mode [ 230.055727][ T5076] veth1_macvtap: entered promiscuous mode [ 230.304460][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.315295][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.325526][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.336378][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.346555][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.357329][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.367598][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.378439][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.393773][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.791632][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.804912][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.815198][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.825951][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.836122][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.846905][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.857109][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.867857][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.884463][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.191456][ T5076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.202022][ T5076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.211043][ T5076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.220523][ T5076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.624027][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.632143][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.893648][ T5132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.903553][ T5132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.733300][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.741384][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.962312][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.970382][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.011972][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.020036][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.252352][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.260416][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.417132][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.425631][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.634201][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.642379][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.886268][ T5257] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.244030][ T5132] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 237.638099][ T5273] tmpfs: Bad value for 'mpol' [ 237.672556][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 237.690553][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 237.711708][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 237.722042][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.839159][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.935168][ T5132] usb 1-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 237.945694][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.954766][ T5132] usb 1-1: Product: syz [ 237.959173][ T5132] usb 1-1: Manufacturer: syz [ 237.964287][ T5132] usb 1-1: SerialNumber: syz [ 238.010521][ T5132] usb 1-1: config 0 descriptor?? [ 238.069498][ T5132] sierra 1-1:0.0: Sierra USB modem converter detected [ 238.264501][ T5275] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 238.305994][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.314397][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.493847][ T5132] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 238.663938][ T5132] usb 1-1: USB disconnect, device number 2 [ 238.679842][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.688379][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.792068][ T5132] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 238.808776][ T5132] sierra 1-1:0.0: device disconnected [ 239.188747][ T5284] loop3: detected capacity change from 0 to 512 [ 239.433682][ T5284] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 239.474426][ T5284] EXT4-fs (loop3): 2 truncates cleaned up [ 239.480438][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.519820][ T5284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 239.556421][ T5294] overlayfs: missing 'lowerdir' [ 239.605636][ T5290] loop1: detected capacity change from 0 to 256 [ 239.638401][ T5290] FAT-fs (loop1): Unrecognized mount option "shortn" or missing value [ 239.732829][ T779] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 239.756036][ T5294] loop0: detected capacity change from 0 to 1024 [ 239.882089][ T5072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.910898][ T5294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.972683][ T779] usb 5-1: Using ep0 maxpacket: 32 [ 240.133126][ T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.144971][ T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.155214][ T779] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.164878][ T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.275431][ T779] usb 5-1: config 0 descriptor?? [ 240.348452][ T779] hub 5-1:0.0: USB hub found [ 241.488120][ T5303] loop3: detected capacity change from 0 to 40427 [ 241.513070][ T779] hub 5-1:0.0: 1 port detected [ 241.593836][ T5303] F2FS-fs (loop3): invalid crc value [ 241.689182][ T5303] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.956077][ T779] hub 5-1:0.0: activate --> -90 [ 241.973484][ T5303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.024043][ T5289] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 242.716758][ T5072] syz-executor.3: attempt to access beyond end of device [ 242.716758][ T5072] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.353114][ T779] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 243.572399][ T29] audit: type=1326 audit(1717228906.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x0 [ 244.592730][ T5328] loop2: detected capacity change from 0 to 40427 [ 245.514438][ T5126] usb 5-1: USB disconnect, device number 2 [ 246.106601][ T5337] loop4: detected capacity change from 0 to 256 [ 246.267413][ T5343] pim6reg1: entered promiscuous mode [ 246.278972][ T5343] pim6reg1: entered allmulticast mode [ 246.528209][ T5342] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.732251][ T779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 246.880109][ T5352] loop0: detected capacity change from 0 to 256 [ 246.954241][ T5352] FAT-fs (loop0): Unrecognized mount option "codepage=<66" or missing value [ 247.146039][ T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.158582][ T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.169606][ T779] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 247.179095][ T779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.375757][ T779] usb 2-1: config 0 descriptor?? [ 247.802589][ T5135] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 247.892023][ T5343] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 248.009016][ T5354] loop4: detected capacity change from 0 to 40427 [ 248.048930][ T5354] F2FS-fs (loop4): invalid crc value [ 248.057865][ T5356] loop3: detected capacity change from 0 to 128 [ 248.097326][ T5354] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.108474][ T5356] befs: (loop3): No write support. Marking filesystem read-only [ 248.199915][ T5356] befs: (loop3): invalid magic header [ 248.282820][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.294276][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.304836][ T5135] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 248.314216][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.370372][ T5135] usb 1-1: config 0 descriptor?? [ 248.400599][ T5354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.717453][ T5076] syz-executor.4: attempt to access beyond end of device [ 248.717453][ T5076] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.793634][ T779] wacom 0003:056A:0014.0001: Unknown device_type for 'HID 056a:0014'. Assuming pen. [ 248.869306][ T779] wacom 0003:056A:0014.0001: hidraw0: USB HID v0.00 Device [HID 056a:0014] on usb-dummy_hcd.1-1/input0 [ 248.885201][ T779] input: Wacom Graphire3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0014.0001/input/input5 [ 249.184334][ T5135] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 249.500504][ T5368] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 249.608271][ T5352] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.621596][ T5352] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 249.632911][ T5352] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 249.723886][ T5135] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 249.741275][ T5135] usb 1-1: USB disconnect, device number 3 [ 249.789113][ T5374] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 249.895251][ T5370] loop3: detected capacity change from 0 to 128 [ 250.026052][ T5370] befs: (loop3): invalid magic header [ 250.268225][ T5126] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 251.078234][ T5379] loop2: detected capacity change from 0 to 164 [ 251.311988][ T779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 251.557111][ T780] usb 2-1: USB disconnect, device number 2 [ 251.893002][ T779] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 251.906725][ T779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.916355][ T779] usb 4-1: Product: syz [ 251.920757][ T779] usb 4-1: Manufacturer: syz [ 251.925743][ T779] usb 4-1: SerialNumber: syz [ 251.985082][ T779] usb 4-1: config 0 descriptor?? [ 252.011525][ T5386] loop0: detected capacity change from 0 to 512 [ 252.047293][ T779] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 252.059945][ T5386] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.066799][ T5386] EXT4-fs: Ignoring removed bh option [ 252.205165][ T5386] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 252.257342][ T5386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 252.264195][ T5386] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 252.277615][ T5386] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 252.300226][ T5386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 252.323249][ T5386] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 252.425981][ T5386] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 252.475369][ T5392] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.536913][ T5386] EXT4-fs (loop0): 1 truncate cleaned up [ 252.543304][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.693213][ T5395] ptrace attach of "/root/syz-executor.2 exec"[5077] was attempted by "/root/syz-executor.2 exec"[5395] [ 252.808642][ T779] i2c i2c-1: failure reading functionality [ 252.847968][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.977549][ T779] i2c i2c-1: connected i2c-tiny-usb device [ 253.162532][ T779] usb 4-1: USB disconnect, device number 2 [ 253.467285][ T5395] loop2: detected capacity change from 0 to 32768 [ 253.490133][ T5395] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5395) [ 253.900841][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.396691][ T5399] loop1: detected capacity change from 0 to 40427 [ 254.452390][ T5399] F2FS-fs (loop1): invalid crc value [ 254.481280][ T5395] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.495133][ T5395] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 254.506878][ T5395] BTRFS info (device loop2): disk space caching is enabled [ 254.535450][ T5399] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.818253][ T5399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.030514][ T5091] syz-executor.1: attempt to access beyond end of device [ 255.030514][ T5091] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.054872][ T5395] BTRFS info (device loop2): rebuilding free space tree [ 255.107320][ T5395] BTRFS info (device loop2): disabling free space tree [ 255.114791][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.124902][ T5395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.495191][ T5132] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 255.963096][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.109376][ T5077] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.637499][ T5430] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.743448][ T5429] delete_channel: no stack [ 256.939060][ T5428] loop4: detected capacity change from 0 to 40427 [ 256.952492][ T5132] usb 4-1: Using ep0 maxpacket: 32 [ 256.979070][ T5428] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(2304) [ 256.988524][ T5428] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 257.006952][ T5428] F2FS-fs (loop4): invalid crc value [ 257.019826][ T5428] F2FS-fs (loop4): invalid crc value [ 257.032024][ T5428] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 257.619778][ T5132] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 257.628813][ T5132] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 257.642076][ T5132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 257.651318][ T5132] usb 4-1: config 1 has no interface number 0 [ 257.659617][ T5132] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.671087][ T5132] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 257.684799][ T5132] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 257.694334][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.876692][ T5132] usb 4-1: can't set config #1, error -71 [ 257.908189][ T5132] usb 4-1: USB disconnect, device number 3 [ 258.309708][ T5438] vlan2: entered promiscuous mode [ 258.315248][ T5438] dummy0: entered promiscuous mode [ 258.321483][ T5438] vlan2: entered allmulticast mode [ 258.327062][ T5438] dummy0: entered allmulticast mode [ 258.500238][ T5438] dummy0: left allmulticast mode [ 258.505671][ T5438] dummy0: left promiscuous mode [ 258.792115][ T5130] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.165462][ T5130] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.178999][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.262856][ T5130] usb 4-1: config 0 descriptor?? [ 259.322840][ T5130] cp210x 4-1:0.0: cp210x converter detected [ 259.342300][ T5126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 259.602294][ T5126] usb 3-1: Using ep0 maxpacket: 8 [ 259.742521][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.754039][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.760254][ T5449] loop4: detected capacity change from 0 to 512 [ 259.764425][ T5126] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 259.780087][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.869949][ T5126] usb 3-1: config 0 descriptor?? [ 259.900924][ T5449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 259.915200][ T5449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.032820][ T5130] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 260.040925][ T5130] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 260.110277][ T5449] EXT4-fs (loop4): orphan cleanup on readonly fs [ 260.135642][ T5130] usb 4-1: cp210x converter now attached to ttyUSB0 [ 260.208082][ T5449] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: bad e_name length [ 260.263428][ T5130] usb 4-1: USB disconnect, device number 4 [ 260.282654][ T5449] EXT4-fs (loop4): Remounting filesystem read-only [ 260.289790][ T5449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.426444][ T5130] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.437276][ T5130] cp210x 4-1:0.0: device disconnected [ 260.466733][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.901196][ T5126] wacom 0003:056A:0343.0003: unknown main item tag 0x0 [ 260.991628][ T5126] wacom 0003:056A:0343.0003: hidraw0: USB HID v0.00 Device [HID 056a:0343] on usb-dummy_hcd.2-1/input0 [ 261.133488][ T5126] usb 3-1: USB disconnect, device number 2 [ 261.174961][ T5463] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 261.495083][ T5465] loop3: detected capacity change from 0 to 512 [ 261.519484][ T5465] ======================================================= [ 261.519484][ T5465] WARNING: The mand mount option has been deprecated and [ 261.519484][ T5465] and is ignored by this kernel. Remove the mand [ 261.519484][ T5465] option from the mount to silence this warning. [ 261.519484][ T5465] ======================================================= [ 261.559052][ T5465] EXT4-fs: Ignoring removed orlov option [ 261.566798][ T5465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.591014][ T5470] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.717183][ T5465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.747318][ T5469] loop4: detected capacity change from 0 to 512 [ 261.783069][ T5469] /dev/loop4: Can't open blockdev [ 261.867072][ T5465] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 261.875880][ T5465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 261.914975][ T5465] EXT4-fs (loop3): orphan cleanup on readonly fs [ 261.918851][ T5469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.921644][ T5465] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 261.948233][ T5465] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.964601][ T5465] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 261.996621][ T5465] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 262.019457][ T5465] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 262.048492][ T5465] EXT4-fs (loop3): 1 truncate cleaned up [ 262.054567][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.118271][ T5474] loop1: detected capacity change from 0 to 1024 [ 262.137765][ C1] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 262.303518][ T5466] delete_channel: no stack [ 262.386241][ T5474] hfsplus: xattr searching failed [ 262.402082][ T29] audit: type=1800 audit(1717228925.580:3): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 263.399098][ T5483] loop1: detected capacity change from 0 to 512 [ 263.608744][ T5483] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 263.697520][ T5483] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 263.717861][ T5483] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.821114][ T5487] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 263.838612][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.838754][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.861961][ T5483] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.914694][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.927157][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.938849][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.949890][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 263.960955][ T5489] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 264.020773][ T5483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 312: padding at end of block bitmap is not set [ 264.158032][ T5483] overlayfs: failed to verify upper root origin [ 264.528218][ T5091] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 264.658015][ T5497] vlan2: entered promiscuous mode [ 264.663505][ T5497] dummy0: entered promiscuous mode [ 264.669709][ T5497] vlan2: entered allmulticast mode [ 264.675278][ T5497] dummy0: entered allmulticast mode [ 264.860307][ T5497] dummy0: left allmulticast mode [ 264.865886][ T5497] dummy0: left promiscuous mode [ 265.267747][ T779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 265.517278][ T5499] loop2: detected capacity change from 0 to 4096 [ 265.609921][ T5499] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 265.672711][ T779] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.682387][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.739947][ T5510] loop4: detected capacity change from 0 to 512 [ 265.753723][ T5510] /dev/loop4: Can't open blockdev [ 265.764949][ T779] usb 1-1: config 0 descriptor?? [ 265.845080][ T779] cp210x 1-1:0.0: cp210x converter detected [ 265.979942][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 266.107576][ T29] audit: type=1800 audit(1717228929.230:4): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 266.612337][ T779] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 266.620574][ T779] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 266.683033][ T779] usb 1-1: cp210x converter now attached to ttyUSB0 [ 266.778215][ T5518] loop4: detected capacity change from 0 to 64 [ 266.832703][ T779] usb 1-1: USB disconnect, device number 4 [ 266.910331][ T5072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.933390][ T779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.944187][ T779] cp210x 1-1:0.0: device disconnected [ 267.074651][ T3758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.188552][ T3758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.278819][ T5520] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.343442][ T5519] delete_channel: no stack [ 267.453497][ T3758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.652417][ T3758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.191637][ T3758] bridge_slave_1: left allmulticast mode [ 268.197781][ T3758] bridge_slave_1: left promiscuous mode [ 268.204740][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.254601][ T5529] loop2: detected capacity change from 0 to 8 [ 268.272201][ T3758] bridge_slave_0: left allmulticast mode [ 268.278112][ T3758] bridge_slave_0: left promiscuous mode [ 268.290616][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.592009][ T5529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 268.600215][ T5529] SQUASHFS error: Failed to read block 0x13e: -5 [ 268.612670][ T5529] SQUASHFS error: Unable to read metadata cache entry [13c] [ 268.620305][ T5529] SQUASHFS error: Unable to read directory block [13c:26] [ 268.704655][ T5529] tipc: Can't bind to reserved service type 0 [ 269.143635][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.234204][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.323965][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.334977][ T3758] bond0 (unregistering): Released all slaves [ 269.793619][ T5537] loop0: detected capacity change from 0 to 512 [ 269.844315][ T5537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.882965][ T5537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 269.913502][ T5537] EXT4-fs (loop0): Remounting filesystem read-only [ 269.921007][ T5537] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 269.940255][ T5537] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 269.950707][ T5537] EXT4-fs (loop0): 1 orphan inode deleted [ 269.956772][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.080360][ T5537] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.295325][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.503991][ T5546] loop4: detected capacity change from 0 to 512 [ 270.513275][ T5546] /dev/loop4: Can't open blockdev [ 270.753352][ T3758] hsr_slave_0: left promiscuous mode [ 270.799929][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 270.814324][ T3758] hsr_slave_1: left promiscuous mode [ 270.865142][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.873023][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.953746][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.961472][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.109725][ T3758] veth1_macvtap: left promiscuous mode [ 271.115682][ T3758] veth0_macvtap: left promiscuous mode [ 271.121699][ T3758] veth1_vlan: left promiscuous mode [ 271.127543][ T3758] veth0_vlan: left promiscuous mode [ 271.506844][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.520495][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.537222][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.654921][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.682844][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.693085][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.062152][ T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.290813][ T5572] loop1: detected capacity change from 0 to 64 [ 272.305346][ T5572] hfs: unable to parse mount options [ 272.510987][ T3758] team0 (unregistering): Port device team_slave_1 removed [ 272.660227][ T780] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.670158][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.740739][ T3758] team0 (unregistering): Port device team_slave_0 removed [ 272.759904][ T780] usb 3-1: config 0 descriptor?? [ 272.811200][ T780] cp210x 3-1:0.0: cp210x converter detected [ 272.891640][ T5566] delete_channel: no stack [ 273.280408][ T5560] vlan2: entered promiscuous mode [ 273.285900][ T5560] dummy0: entered promiscuous mode [ 273.292700][ T5560] vlan2: entered allmulticast mode [ 273.298034][ T5560] dummy0: entered allmulticast mode [ 273.394411][ T5560] dummy0: left allmulticast mode [ 273.399728][ T5560] dummy0: left promiscuous mode [ 273.546294][ T5569] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.802474][ T780] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 273.810546][ T780] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 273.853997][ T5082] Bluetooth: hci0: command tx timeout [ 273.966527][ T780] usb 3-1: cp210x converter now attached to ttyUSB0 [ 274.068254][ T780] usb 3-1: USB disconnect, device number 3 [ 274.158961][ T780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.187974][ T780] cp210x 3-1:0.0: device disconnected [ 275.313391][ T5602] loop2: detected capacity change from 0 to 512 [ 275.334448][ T5602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.397281][ T5557] chnl_net:caif_netlink_parms(): no params data found [ 275.476480][ T5602] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 275.496166][ T5602] EXT4-fs (loop2): Remounting filesystem read-only [ 275.504207][ T5602] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 275.514797][ T5602] EXT4-fs (loop2): 1 orphan inode deleted [ 275.520777][ T5602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.570775][ T5602] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.715076][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.922254][ T5082] Bluetooth: hci0: command tx timeout [ 276.500992][ T5617] loop2: detected capacity change from 0 to 512 [ 276.658375][ T5617] /dev/loop2: Can't open blockdev [ 277.116077][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 277.863921][ T5632] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 277.883532][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.891249][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.899525][ T5557] bridge_slave_0: entered allmulticast mode [ 277.908874][ T5557] bridge_slave_0: entered promiscuous mode [ 277.945036][ T5630] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 278.022202][ T5082] Bluetooth: hci0: command tx timeout [ 278.081032][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.089298][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.097796][ T5557] bridge_slave_1: entered allmulticast mode [ 278.107295][ T5557] bridge_slave_1: entered promiscuous mode [ 278.643896][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.777044][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.913848][ T5636] loop1: detected capacity change from 0 to 4096 [ 279.002123][ T5636] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.070478][ T5557] team0: Port device team_slave_0 added [ 279.071231][ T5636] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 279.154515][ T5557] team0: Port device team_slave_1 added [ 279.289846][ T5646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.632005][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.639183][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.669552][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.028780][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.038275][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.068504][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.084181][ T5082] Bluetooth: hci0: command tx timeout [ 280.583549][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.590254][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.818846][ T5557] hsr_slave_0: entered promiscuous mode [ 280.862131][ T5557] hsr_slave_1: entered promiscuous mode [ 280.877382][ T5557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.889391][ T5557] Cannot create hsr debugfs directory [ 280.980442][ T3758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.174165][ T3758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.455653][ T3758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.650114][ T3758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.228285][ T3758] bridge_slave_1: left allmulticast mode [ 282.234772][ T3758] bridge_slave_1: left promiscuous mode [ 282.241309][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.269460][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.283365][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.302783][ T3758] bridge_slave_0: left allmulticast mode [ 282.308690][ T3758] bridge_slave_0: left promiscuous mode [ 282.320525][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.331403][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.383001][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.476718][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.489365][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.051128][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.107336][ T5680] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.108250][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.189552][ T3758] bond0 (unregistering): Released all slaves [ 283.486756][ T5680] can: request_module (can-proto-0) failed. [ 283.920392][ T5684] loop0: detected capacity change from 0 to 512 [ 283.965435][ T5684] /dev/loop0: Can't open blockdev [ 284.073756][ T5690] binder: 5687:5690 ioctl 4018620d 20000100 returned -22 [ 284.088806][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 284.308512][ T3758] hsr_slave_0: left promiscuous mode [ 284.334498][ T3758] hsr_slave_1: left promiscuous mode [ 284.353595][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.368347][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.402839][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.410973][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.438556][ T3758] veth1_macvtap: left promiscuous mode [ 284.444734][ T3758] veth0_macvtap: left promiscuous mode [ 284.450649][ T3758] veth1_vlan: left promiscuous mode [ 284.456431][ T3758] veth0_vlan: left promiscuous mode [ 284.693973][ T5086] Bluetooth: hci1: command tx timeout [ 285.440207][ T3758] team0 (unregistering): Port device team_slave_1 removed [ 285.580622][ T3758] team0 (unregistering): Port device team_slave_0 removed [ 286.286521][ T780] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 286.552104][ T780] usb 1-1: Using ep0 maxpacket: 32 [ 286.652845][ T5557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.730148][ T5086] Bluetooth: hci1: command tx timeout [ 286.733182][ T5557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.799169][ T5557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.833384][ T5557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.926065][ T5718] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 286.926200][ T5718] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 286.933531][ T5718] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 287.492876][ T5671] chnl_net:caif_netlink_parms(): no params data found [ 288.809187][ T5086] Bluetooth: hci1: command tx timeout [ 289.393473][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.510836][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.520333][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.534009][ T5671] bridge_slave_0: entered allmulticast mode [ 289.543448][ T5671] bridge_slave_0: entered promiscuous mode [ 289.612072][ T780] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.654122][ T5557] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.682337][ T780] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 289.692816][ T780] usb 1-1: can't read configurations, error -71 [ 289.727427][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.735279][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.761148][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.769088][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.777033][ T5671] bridge_slave_1: entered allmulticast mode [ 289.792202][ T5671] bridge_slave_1: entered promiscuous mode [ 289.844678][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.852504][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.965176][ T5736] loop2: detected capacity change from 0 to 4096 [ 290.064202][ T5736] ntfs3: Unknown parameter '0x0000000000000000' [ 290.222006][ T5126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 290.229542][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.256344][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.569043][ T5671] team0: Port device team_slave_0 added [ 290.623227][ T5671] team0: Port device team_slave_1 added [ 290.716987][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.728805][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 290.740346][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 290.750575][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.760657][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.882375][ T5086] Bluetooth: hci1: command tx timeout [ 290.997673][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.006143][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.035696][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.092531][ T5126] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 291.102083][ T5126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.110351][ T5126] usb 2-1: Product: syz [ 291.115894][ T5126] usb 2-1: Manufacturer: syz [ 291.123837][ T5126] usb 2-1: SerialNumber: syz [ 291.214263][ T5126] usb 2-1: config 0 descriptor?? [ 291.268853][ T5736] loop2: detected capacity change from 0 to 4096 [ 291.317998][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.329557][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.345296][ T5736] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 291.356982][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.407321][ T5126] sierra 2-1:0.0: Sierra USB modem converter detected [ 291.521479][ T5736] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 291.557336][ T5736] ntfs3: loop2: Failed to load $AttrDef (-2) [ 291.592703][ T5126] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 291.653007][ T5126] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 291.733274][ T5126] usb 2-1: USB disconnect, device number 3 [ 291.806128][ T5126] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 291.876865][ T5126] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 291.887262][ T5126] sierra 2-1:0.0: device disconnected [ 292.120837][ T5671] hsr_slave_0: entered promiscuous mode [ 292.193972][ T5671] hsr_slave_1: entered promiscuous mode [ 292.272874][ T5671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.280950][ T5671] Cannot create hsr debugfs directory [ 292.913438][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.493834][ T5768] loop2: detected capacity change from 0 to 4096 [ 293.524768][ T5557] veth0_vlan: entered promiscuous mode [ 293.672973][ T5557] veth1_vlan: entered promiscuous mode [ 293.687338][ T5772] loop1: detected capacity change from 0 to 2048 [ 293.714188][ T5772] udf: Unknown parameter '01777777777777777777777' [ 294.104236][ T5777] syz-executor.1 (pid 5777) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 294.214735][ T5557] veth0_macvtap: entered promiscuous mode [ 294.281016][ T5671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.315632][ T5777] fscrypt (sda1, inode 1953): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 294.330798][ T5777] fscrypt (sda1, inode 1953): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 294.388048][ T5557] veth1_macvtap: entered promiscuous mode [ 294.537721][ T5671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.716291][ T5671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.886710][ T5671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.027186][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.040031][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.051484][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.064627][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.075205][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.085986][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.101389][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.439282][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.451680][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.462759][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.473578][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.483813][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.494580][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.507860][ T5798] loop2: detected capacity change from 0 to 128 [ 295.509671][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.633619][ T5160] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.641263][ T5798] affs: No valid root block on device loop2 [ 295.808905][ T5557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.818314][ T5557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.827571][ T5557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.839998][ T5557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.952853][ T5160] usb 2-1: Using ep0 maxpacket: 32 [ 296.539485][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.759101][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.900333][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.900834][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.041974][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.042471][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.239903][ T5671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.240026][ T5671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.523289][ T5135] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.663694][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 297.784212][ T5135] usb 1-1: Using ep0 maxpacket: 16 [ 297.914896][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.915045][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.072665][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 298.072825][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 298.072998][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 298.073143][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.073285][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 298.113045][ T5135] usb 1-1: New USB device found, idVendor=506f, idProduct=be92, bcdDevice=b8.ea [ 298.113206][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.113382][ T5135] usb 1-1: Product: syz [ 298.113471][ T5135] usb 1-1: Manufacturer: syz [ 298.113562][ T5135] usb 1-1: SerialNumber: syz [ 298.121607][ T5135] usb 1-1: config 0 descriptor?? [ 298.236229][ T25] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 298.236396][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.236525][ T25] usb 3-1: Product: syz [ 298.236628][ T25] usb 3-1: Manufacturer: syz [ 298.236732][ T25] usb 3-1: SerialNumber: syz [ 298.248445][ T25] usb 3-1: config 0 descriptor?? [ 298.297670][ T25] sierra 3-1:0.0: Sierra USB modem converter detected [ 298.444874][ T5132] usb 1-1: USB disconnect, device number 7 [ 298.524037][ T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 298.551073][ T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 298.559187][ T25] usb 3-1: USB disconnect, device number 4 [ 298.591045][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 298.603518][ T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 298.604796][ T25] sierra 3-1:0.0: device disconnected [ 298.953871][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.642674][ T5160] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.736209][ T5160] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 299.744321][ T5160] usb 2-1: can't read configurations, error -71 [ 300.810098][ T29] audit: type=1326 audit(1717228963.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.833135][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.840837][ T29] audit: type=1326 audit(1717228963.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.863661][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.873531][ T29] audit: type=1326 audit(1717228963.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.896797][ T29] audit: type=1326 audit(1717228963.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.919915][ T29] audit: type=1326 audit(1717228963.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.943007][ T29] audit: type=1326 audit(1717228963.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.965853][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.975542][ T29] audit: type=1326 audit(1717228963.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 300.998327][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.004885][ T29] audit: type=1326 audit(1717228963.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bc7cee9 code=0x7ffc0000 [ 301.028143][ T29] audit: type=1326 audit(1717228963.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb77bc7ec67 code=0x7ffc0000 [ 301.051048][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.061458][ T29] audit: type=1326 audit(1717228963.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb77bc7ebdc code=0x7ffc0000 [ 301.084368][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.254695][ T5852] fuse: Unknown parameter '00000000000000000000' [ 301.580410][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.111462][ T5671] veth0_vlan: entered promiscuous mode [ 302.276220][ T5671] veth1_vlan: entered promiscuous mode [ 302.375198][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.453810][ T5875] usb usb5: usbfs: process 5875 (syz-executor.0) did not claim interface 0 before use [ 302.653667][ T5671] veth0_macvtap: entered promiscuous mode [ 302.754007][ T5671] veth1_macvtap: entered promiscuous mode [ 302.878118][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.990915][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.006226][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.017736][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.028678][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.038882][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.050494][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.061135][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.071995][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.087419][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.155016][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.166670][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.177134][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.187945][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.198137][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.213861][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.226027][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.236928][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.252338][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.315228][ T5126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.325112][ T5671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.334819][ T5671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.344368][ T5671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.353790][ T5671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.382771][ T5132] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 303.589366][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.597825][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.672747][ T5132] usb 2-1: Using ep0 maxpacket: 32 [ 303.750572][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.762551][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 303.773945][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 303.784044][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.794181][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 303.868569][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.876985][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.043407][ T5126] usb 1-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 304.053203][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.061507][ T5126] usb 1-1: Product: syz [ 304.061617][ T5126] usb 1-1: Manufacturer: syz [ 304.061876][ T5126] usb 1-1: SerialNumber: syz [ 304.133452][ T5132] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.154989][ T5126] usb 1-1: config 0 descriptor?? [ 304.218989][ T5126] sierra 1-1:0.0: Sierra USB modem converter detected [ 304.271072][ T5132] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 304.279249][ T5132] usb 2-1: can't read configurations, error -71 [ 304.552902][ T5126] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 304.612488][ T5126] usb 1-1: USB disconnect, device number 8 [ 304.685228][ T5126] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 304.695410][ T5126] sierra 1-1:0.0: device disconnected [ 304.938346][ T5904] loop3: detected capacity change from 0 to 4096 [ 304.990692][ T5904] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 305.481428][ T5917] loop2: detected capacity change from 0 to 512 [ 305.509405][ T5917] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.565627][ T5917] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 305.711670][ T5917] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1 [ 305.733764][ T5917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 305.748989][ T5917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 305.797473][ T5917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1) [ 305.830668][ T5917] EXT4-fs (loop2): 1 truncate cleaned up [ 305.837068][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.000776][ T5917] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.012803][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.203605][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.667549][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.263524][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 307.552103][ T5132] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 307.685330][ T5160] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 307.853356][ T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 307.863015][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.871279][ T25] usb 4-1: Product: syz [ 307.876726][ T25] usb 4-1: Manufacturer: syz [ 307.881608][ T25] usb 4-1: SerialNumber: syz [ 307.934125][ T5132] usb 3-1: config 0 has an invalid interface number: 217 but max is 2 [ 307.942813][ T5132] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.953308][ T5132] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 307.957200][ T25] usb 4-1: config 0 descriptor?? [ 307.962744][ T5132] usb 3-1: config 0 has no interface number 1 [ 307.982672][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 308.036079][ T25] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005 [ 308.152542][ T5132] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=16.fc [ 308.163344][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.163482][ T5132] usb 3-1: Product: syz [ 308.163585][ T5132] usb 3-1: Manufacturer: syz [ 308.163689][ T5132] usb 3-1: SerialNumber: syz [ 308.206167][ T5132] usb 3-1: config 0 descriptor?? [ 308.232385][ T5160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.245381][ T780] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 308.278567][ T5132] usb_ehset_test 3-1:0.217: probe with driver usb_ehset_test failed with error -32 [ 308.312543][ T5160] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 308.314864][ T5132] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 308.320480][ T5160] usb 1-1: can't read configurations, error -71 [ 308.492781][ T25] (null): failure reading functionality [ 308.518395][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.526887][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.545063][ T5949] loop2: detected capacity change from 0 to 256 [ 308.550415][ T25] i2c i2c-1: failure reading functionality [ 308.578734][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 308.620615][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.629632][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.649054][ T25] usb 4-1: USB disconnect, device number 5 [ 308.667074][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 308.677543][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 308.689773][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 308.699911][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.710109][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 308.793706][ T5949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 308.895936][ T5949] 9pnet_fd: Insufficient options for proto=fd [ 308.922578][ T780] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 308.932096][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.943620][ T780] usb 2-1: Product: syz [ 308.949116][ T780] usb 2-1: Manufacturer: syz [ 308.954077][ T780] usb 2-1: SerialNumber: syz [ 308.980614][ T5132] usb 3-1: USB disconnect, device number 5 [ 308.993085][ T780] usb 2-1: config 0 descriptor?? [ 309.070422][ T780] sierra 2-1:0.0: Sierra USB modem converter detected [ 309.329907][ T780] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 309.378871][ T3967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.414461][ T780] usb 2-1: USB disconnect, device number 8 [ 309.471011][ T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 309.481030][ T780] sierra 2-1:0.0: device disconnected [ 309.537933][ T3967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.698351][ T3967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.728586][ T5963] loop0: detected capacity change from 0 to 4096 [ 309.905685][ T3967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.908158][ T5963] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 310.442562][ T3967] bridge_slave_1: left allmulticast mode [ 310.448545][ T3967] bridge_slave_1: left promiscuous mode [ 310.455403][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.494815][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 310.494901][ T29] audit: type=1800 audit(1717228973.680:44): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 310.527445][ T3967] bridge_slave_0: left allmulticast mode [ 310.533736][ T3967] bridge_slave_0: left promiscuous mode [ 310.540305][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.197882][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.254744][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.307320][ T3967] bond0 (unregistering): Released all slaves [ 311.349693][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.560916][ T5995] loop3: detected capacity change from 0 to 128 [ 312.645714][ T5995] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.783970][ T5995] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.295374][ T3967] hsr_slave_0: left promiscuous mode [ 313.363481][ T3967] hsr_slave_1: left promiscuous mode [ 313.393918][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.405726][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.471457][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.479404][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.531276][ T3967] veth1_macvtap: left promiscuous mode [ 313.537385][ T3967] veth0_macvtap: left promiscuous mode [ 313.543617][ T3967] veth1_vlan: left promiscuous mode [ 313.553224][ T3967] veth0_vlan: left promiscuous mode [ 313.575051][ T5160] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 313.796882][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 313.829067][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.845781][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.876816][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.924691][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.085411][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.097777][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.118926][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 314.375668][ T6013] loop3: detected capacity change from 0 to 4096 [ 314.407852][ T6013] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 314.542536][ T3967] team0 (unregistering): Port device team_slave_1 removed [ 314.567643][ T25] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 314.580457][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.589916][ T25] usb 3-1: Product: syz [ 314.594477][ T25] usb 3-1: Manufacturer: syz [ 314.599308][ T25] usb 3-1: SerialNumber: syz [ 314.612569][ T3967] team0 (unregistering): Port device team_slave_0 removed [ 314.624107][ T25] usb 3-1: config 0 descriptor?? [ 314.740704][ T25] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 006 [ 314.745075][ T780] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 314.957808][ T29] audit: type=1800 audit(1717228978.130:45): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 315.239156][ T5160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.333057][ T25] (null): failure reading functionality [ 315.353437][ T5160] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 315.361515][ T5160] usb 1-1: can't read configurations, error -71 [ 315.363296][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.377719][ T25] i2c i2c-1: failure reading functionality [ 315.384218][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 315.393478][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 315.398524][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 315.412159][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.422347][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.461391][ T25] usb 3-1: USB disconnect, device number 6 [ 315.624443][ T780] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 315.633937][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.642321][ T780] usb 2-1: Product: syz [ 315.646711][ T780] usb 2-1: Manufacturer: syz [ 315.651520][ T780] usb 2-1: SerialNumber: syz [ 315.739892][ T780] usb 2-1: config 0 descriptor?? [ 315.808641][ T780] sierra 2-1:0.0: Sierra USB modem converter detected [ 315.923188][ T6007] chnl_net:caif_netlink_parms(): no params data found [ 316.110581][ T780] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 316.159848][ T780] usb 2-1: USB disconnect, device number 9 [ 316.175615][ T5082] Bluetooth: hci1: command tx timeout [ 316.184025][ T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 316.195852][ T780] sierra 2-1:0.0: device disconnected [ 316.570980][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.948513][ T6036] fuse: Bad value for 'fd' [ 317.022415][ T29] audit: type=1804 audit(1717228980.190:46): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1599771042/syzkaller.QRT1YF/53/file0" dev="sda1" ino=1940 res=1 errno=0 [ 317.331122][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.344306][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.352675][ T6007] bridge_slave_0: entered allmulticast mode [ 317.362022][ T6007] bridge_slave_0: entered promiscuous mode [ 317.471063][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.479057][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.486942][ T6007] bridge_slave_1: entered allmulticast mode [ 317.496198][ T6007] bridge_slave_1: entered promiscuous mode [ 317.787459][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.873130][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.184710][ T6007] team0: Port device team_slave_0 added [ 318.251614][ T5082] Bluetooth: hci1: command tx timeout [ 318.276051][ T6007] team0: Port device team_slave_1 added [ 318.309377][ T6054] loop0: detected capacity change from 0 to 512 [ 318.414348][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.421532][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.448285][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.575699][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.583054][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.608048][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 318.609227][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.616753][ T6054] UDF-fs: Scanning with blocksize 512 failed [ 318.700819][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 318.708939][ T6054] UDF-fs: Scanning with blocksize 1024 failed [ 318.722562][ T5160] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 318.778580][ T6054] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 318.786577][ T6054] UDF-fs: Scanning with blocksize 2048 failed [ 318.877239][ T6054] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 318.998028][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 319.012077][ T5160] usb 4-1: Using ep0 maxpacket: 32 [ 319.088952][ T6007] hsr_slave_0: entered promiscuous mode [ 319.110968][ T6007] hsr_slave_1: entered promiscuous mode [ 319.139174][ T6054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.145269][ T6007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.156427][ T6007] Cannot create hsr debugfs directory [ 319.313360][ T5160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.371975][ T780] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 319.402966][ T5160] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 319.410873][ T5160] usb 4-1: can't read configurations, error -71 [ 319.512980][ T5130] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 319.694917][ T25] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 319.704559][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.712998][ T25] usb 2-1: Product: syz [ 319.717396][ T25] usb 2-1: Manufacturer: syz [ 319.722995][ T25] usb 2-1: SerialNumber: syz [ 319.746088][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.753811][ T25] usb 2-1: config 0 descriptor?? [ 319.757428][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 319.773317][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 319.783370][ T780] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 319.797823][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.804811][ T25] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 010 [ 319.808854][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 319.982692][ T5130] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.990988][ T5130] usb 1-1: config 0 has no interface number 0 [ 320.001457][ T5130] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.016741][ T5130] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.027771][ T5130] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 320.037416][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.053027][ T5130] usb 1-1: config 0 descriptor?? [ 320.059490][ T780] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 320.069526][ T780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.078157][ T780] usb 3-1: Product: syz [ 320.082935][ T780] usb 3-1: Manufacturer: syz [ 320.087777][ T780] usb 3-1: SerialNumber: syz [ 320.116386][ T780] usb 3-1: config 0 descriptor?? [ 320.171462][ T780] sierra 3-1:0.0: Sierra USB modem converter detected [ 320.249866][ T25] (null): failure reading functionality [ 320.298871][ T25] i2c i2c-1: failure reading functionality [ 320.325485][ T5082] Bluetooth: hci1: command tx timeout [ 320.337740][ T6007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.359069][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 320.378202][ T25] usb 2-1: USB disconnect, device number 10 [ 320.380857][ T6007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.421967][ T780] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 320.450606][ T780] usb 3-1: USB disconnect, device number 7 [ 320.465243][ T6007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.487564][ T780] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 320.498258][ T780] sierra 3-1:0.0: device disconnected [ 320.502184][ T6007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.724187][ T5130] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0004/input/input11 [ 320.943689][ T5130] holtek_kbd 0003:04D9:A055.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 321.426242][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.499767][ T6076] fuse: Bad value for 'fd' [ 321.570024][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.623384][ T29] audit: type=1804 audit(1717228984.730:47): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2176608962/syzkaller.j1JaaC/14/file0" dev="sda1" ino=1961 res=1 errno=0 [ 321.766761][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.831599][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.839446][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.954473][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.962330][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.073870][ T780] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 322.418860][ T5082] Bluetooth: hci1: command tx timeout [ 322.960914][ T8] usb 1-1: USB disconnect, device number 13 [ 323.284200][ T6100] loop0: detected capacity change from 0 to 256 [ 323.412602][ T780] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 323.436404][ T6100] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 323.450335][ T6100] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 323.606652][ T29] audit: type=1800 audit(1717228986.750:48): pid=6100 uid=255 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048603 res=0 errno=0 [ 323.669013][ T780] usb 4-1: Using ep0 maxpacket: 32 [ 323.862507][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 323.944626][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.956287][ T780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.059057][ T780] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 324.067280][ T780] usb 4-1: can't read configurations, error -71 [ 324.264438][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 324.275169][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 324.286359][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 324.296501][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.310622][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.321954][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 324.534667][ T25] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 324.544250][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.553640][ T25] usb 2-1: Product: syz [ 324.558149][ T25] usb 2-1: Manufacturer: syz [ 324.563286][ T25] usb 2-1: SerialNumber: syz [ 324.646697][ T25] usb 2-1: config 0 descriptor?? [ 324.657021][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.738217][ T25] sierra 2-1:0.0: Sierra USB modem converter detected [ 324.948047][ T25] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 324.995705][ T25] usb 2-1: USB disconnect, device number 11 [ 325.084040][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 325.094742][ T25] sierra 2-1:0.0: device disconnected [ 325.851464][ T6007] veth0_vlan: entered promiscuous mode [ 325.912126][ T780] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 325.931347][ T6007] veth1_vlan: entered promiscuous mode [ 325.980151][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.993099][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.192479][ T780] usb 3-1: Using ep0 maxpacket: 8 [ 326.231366][ T6141] loop0: detected capacity change from 0 to 256 [ 326.321945][ T6141] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 326.335413][ T6141] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 326.358151][ T780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.504794][ T29] audit: type=1800 audit(1717228989.630:49): pid=6141 uid=255 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048605 res=0 errno=0 [ 326.544651][ T780] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 326.557385][ T780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.567104][ T780] usb 3-1: Product: syz [ 326.571573][ T780] usb 3-1: Manufacturer: syz [ 326.576784][ T780] usb 3-1: SerialNumber: syz [ 326.644157][ T780] usb 3-1: config 0 descriptor?? [ 326.971676][ T780] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 326.978752][ T780] usb 3-1: No valid video chain found. [ 327.126874][ T6007] veth0_macvtap: entered promiscuous mode [ 327.170777][ T25] usb 3-1: USB disconnect, device number 8 [ 327.234939][ T6007] veth1_macvtap: entered promiscuous mode [ 327.399469][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.410437][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.420879][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.431768][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.441999][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.452756][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.462965][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.477866][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.482343][ T5160] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.494292][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.552215][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.563496][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.573690][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.590300][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.606149][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.616992][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.627318][ T6007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.638162][ T6007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.653574][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.664807][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.713264][ T6007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.722600][ T6007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.731856][ T6007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.740886][ T6007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.813132][ T5160] usb 4-1: Using ep0 maxpacket: 32 [ 327.924434][ T6158] netlink: 556 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.223551][ T5160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.309334][ T5160] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 328.317538][ T5160] usb 4-1: can't read configurations, error -71 [ 328.645258][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 329.018860][ T6164] loop1: detected capacity change from 0 to 32768 [ 329.037244][ T6164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6164) [ 329.093073][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 329.100970][ T25] usb 1-1: can't read configurations, error -71 [ 329.160539][ T6164] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.171438][ T6164] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 329.182973][ T6164] BTRFS info (device loop1): using free-space-tree [ 331.957685][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 334.256276][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.876516][ T6232] Zero length message leads to an empty skb [ 335.172134][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.452055][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 335.933206][ T3967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.941282][ T3967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.949522][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.959592][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 335.974960][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 335.986257][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 335.996294][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.006378][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.105947][ T6242] loop1: detected capacity change from 0 to 32768 [ 336.128915][ T6242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6242) [ 336.165496][ T6242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 336.180840][ T6242] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 336.192463][ T6242] BTRFS info (device loop1): using free-space-tree [ 336.200165][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 336.220336][ T3967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.229060][ T3967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.296184][ T25] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 336.305664][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.315120][ T25] usb 3-1: Product: syz [ 336.319536][ T25] usb 3-1: Manufacturer: syz [ 336.324480][ T25] usb 3-1: SerialNumber: syz [ 336.434512][ T25] usb 3-1: config 0 descriptor?? [ 336.581418][ T25] sierra 3-1:0.0: Sierra USB modem converter detected [ 336.801869][ T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 336.862476][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.918102][ T25] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 336.973170][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 336.981450][ T8] usb 4-1: can't read configurations, error -71 [ 337.063990][ T25] usb 3-1: USB disconnect, device number 9 [ 337.149717][ T3758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.215699][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 337.293953][ T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 337.310728][ T25] sierra 3-1:0.0: device disconnected [ 337.334686][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.337395][ T3758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.863070][ T3758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.477725][ T3758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.565595][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.977082][ T3758] bridge_slave_1: left allmulticast mode [ 338.983285][ T3758] bridge_slave_1: left promiscuous mode [ 338.989853][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.013329][ T5080] Bluetooth: hci3: command 0x0406 tx timeout [ 339.019911][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 339.027854][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 339.134229][ T3758] bridge_slave_0: left allmulticast mode [ 339.140318][ T3758] bridge_slave_0: left promiscuous mode [ 339.154695][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.053042][ T3758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.118731][ T3758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.176757][ T3758] bond0 (unregistering): Released all slaves [ 342.032028][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 342.050192][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.058442][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.083450][ T3758] hsr_slave_0: left promiscuous mode [ 342.137852][ T3758] hsr_slave_1: left promiscuous mode [ 342.152356][ T6290] loop0: detected capacity change from 0 to 32768 [ 342.170402][ T6290] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6290) [ 342.198350][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.206446][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.215189][ T6290] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.229558][ T6290] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 342.242346][ T6290] BTRFS info (device loop0): using free-space-tree [ 342.253644][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.261312][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.268830][ T5130] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 342.303858][ T3758] veth1_macvtap: left promiscuous mode [ 342.309701][ T3758] veth0_macvtap: left promiscuous mode [ 342.316054][ T3758] veth1_vlan: left promiscuous mode [ 342.327385][ T3758] veth0_vlan: left promiscuous mode [ 342.359347][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.370741][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.391355][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.462057][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.506504][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.520957][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.703437][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.716364][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 342.729267][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 342.742925][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 342.754477][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.764679][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 342.813147][ T5130] usb 4-1: Using ep0 maxpacket: 32 [ 343.015706][ T8] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=2e.c5 [ 343.025463][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.033887][ T8] usb 3-1: Product: syz [ 343.042880][ T8] usb 3-1: Manufacturer: syz [ 343.047743][ T8] usb 3-1: SerialNumber: syz [ 343.094161][ T8] usb 3-1: config 0 descriptor?? [ 343.163638][ T8] sierra 3-1:0.0: Sierra USB modem converter detected [ 343.393360][ T5081] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 343.495125][ T3758] team0 (unregistering): Port device team_slave_1 removed [ 343.670456][ T3758] team0 (unregistering): Port device team_slave_0 removed [ 344.316430][ T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 344.478513][ T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 344.503294][ T8] usb 3-1: USB disconnect, device number 10 [ 344.518824][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 344.534647][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 344.547012][ T8] sierra 3-1:0.0: device disconnected [ 344.579500][ T5130] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.656636][ T5082] Bluetooth: hci1: command tx timeout [ 344.696029][ T5130] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 344.705015][ T5130] usb 4-1: can't read configurations, error -71 [ 344.959538][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.374274][ T6327] loop1: detected capacity change from 0 to 1024 [ 345.484978][ T2989] hfsplus: b-tree write err: -5, ino 4 [ 345.520345][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 346.722005][ T5082] Bluetooth: hci1: command tx timeout [ 346.805169][ T6343] loop1: detected capacity change from 0 to 4096 [ 346.977986][ T6353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.035463][ T6343] dccp_invalid_packet: P.Data Offset(142) too large [ 347.198527][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.206361][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.214205][ T6305] bridge_slave_0: entered allmulticast mode [ 347.223521][ T6305] bridge_slave_0: entered promiscuous mode [ 347.414556][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.422375][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.430195][ T6305] bridge_slave_1: entered allmulticast mode [ 347.443971][ T6305] bridge_slave_1: entered promiscuous mode [ 347.787599][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.879658][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.138428][ T6305] team0: Port device team_slave_0 added [ 348.189763][ T6305] team0: Port device team_slave_1 added [ 348.472863][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.480047][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.506503][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.606629][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.614164][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.641360][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.810041][ T5082] Bluetooth: hci1: command tx timeout [ 349.012881][ T6305] hsr_slave_0: entered promiscuous mode [ 349.046628][ T6305] hsr_slave_1: entered promiscuous mode [ 349.098839][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.107000][ T6305] Cannot create hsr debugfs directory [ 350.709112][ T6305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.756309][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 350.788930][ T6305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.815456][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 350.845749][ T6305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.882203][ T5082] Bluetooth: hci1: command tx timeout [ 350.953981][ T6305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.309161][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.506526][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.617224][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.625060][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.772513][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.780208][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.536547][ T6428] loop2: detected capacity change from 0 to 512 [ 353.642686][ T6428] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 353.762400][ T6428] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 353.812339][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.908959][ T6428] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #20: comm syz-executor.2: Siphash requires key [ 353.921002][ T6428] ===================================================== [ 353.928450][ T6428] BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0 [ 353.936979][ T6428] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 353.942794][ T6428] ext4_htree_fill_tree+0x1941/0x1cd0 [ 353.948384][ T6428] ext4_readdir+0x4bbf/0x5b00 [ 353.953423][ T6428] iterate_dir+0x688/0x870 2024/06/01 08:03:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 353.958065][ T6428] ovl_dir_read+0x14d/0x840 [ 353.963055][ T6428] ovl_check_d_type_supported+0x6a/0x110 [ 353.968921][ T6428] ovl_get_workdir+0x9c8/0x2780 [ 353.974474][ T6428] ovl_fill_super+0x153c/0x62a0 [ 353.979499][ T6428] get_tree_nodev+0x180/0x340 [ 353.984539][ T6428] ovl_get_tree+0x34/0x40 [ 353.989042][ T6428] vfs_get_tree+0xa7/0x570 [ 353.997994][ T6428] do_new_mount+0x71f/0x15e0 [ 354.004042][ T6428] path_mount+0x742/0x1f20 [ 354.008747][ T6428] __se_sys_mount+0x725/0x810 [ 354.014096][ T6428] __x64_sys_mount+0xe4/0x150 [ 354.018976][ T6428] x64_sys_call+0x2bf4/0x3b50 [ 354.026104][ T6428] do_syscall_64+0xcf/0x1e0 [ 354.030850][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.037290][ T6428] [ 354.039708][ T6428] Local variable hinfo created at: [ 354.045163][ T6428] ext4_htree_fill_tree+0x52/0x1cd0 [ 354.050609][ T6428] ext4_readdir+0x4bbf/0x5b00 [ 354.055766][ T6428] [ 354.058202][ T6428] CPU: 0 PID: 6428 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 354.068508][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 354.078886][ T6428] ===================================================== [ 354.086278][ T6428] Disabling lock debugging due to kernel taint [ 354.092675][ T6428] Kernel panic - not syncing: kmsan.panic set ... [ 354.099212][ T6428] CPU: 0 PID: 6428 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 354.110870][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 354.121123][ T6428] Call Trace: [ 354.124546][ T6428] [ 354.127582][ T6428] dump_stack_lvl+0x216/0x2d0 [ 354.132489][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.138521][ T6428] dump_stack+0x1e/0x30 [ 354.142895][ T6428] panic+0x4e2/0xcd0 [ 354.147001][ T6428] ? kmsan_get_metadata+0xf1/0x1d0 [ 354.152325][ T6428] kmsan_report+0x2d5/0x2e0 [ 354.157023][ T6428] ? __msan_warning+0x95/0x120 [ 354.161951][ T6428] ? ext4_inlinedir_to_tree+0xde2/0x15a0 [ 354.167802][ T6428] ? ext4_htree_fill_tree+0x1941/0x1cd0 [ 354.173724][ T6428] ? ext4_readdir+0x4bbf/0x5b00 [ 354.178756][ T6428] ? iterate_dir+0x688/0x870 [ 354.183542][ T6428] ? ovl_dir_read+0x14d/0x840 [ 354.188429][ T6428] ? ovl_check_d_type_supported+0x6a/0x110 [ 354.194466][ T6428] ? ovl_get_workdir+0x9c8/0x2780 [ 354.199678][ T6428] ? ovl_fill_super+0x153c/0x62a0 [ 354.204969][ T6428] ? get_tree_nodev+0x180/0x340 [ 354.210071][ T6428] ? ovl_get_tree+0x34/0x40 [ 354.214759][ T6428] ? vfs_get_tree+0xa7/0x570 [ 354.219667][ T6428] ? do_new_mount+0x71f/0x15e0 [ 354.224644][ T6428] ? path_mount+0x742/0x1f20 [ 354.229474][ T6428] ? __se_sys_mount+0x725/0x810 [ 354.234544][ T6428] ? __x64_sys_mount+0xe4/0x150 [ 354.239616][ T6428] ? x64_sys_call+0x2bf4/0x3b50 [ 354.244685][ T6428] ? do_syscall_64+0xcf/0x1e0 [ 354.249673][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.256027][ T6428] ? filter_irq_stacks+0x60/0x1a0 [ 354.261305][ T6428] ? stack_depot_save_flags+0x2c/0x6e0 [ 354.266978][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.272376][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.279560][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.285145][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.290541][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.296550][ T6428] __msan_warning+0x95/0x120 [ 354.301322][ T6428] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 354.307009][ T6428] ? sget+0x90e/0xe50 [ 354.311196][ T6428] ? ovl_get_tree+0x34/0x40 [ 354.315885][ T6428] ? vfs_get_tree+0xa7/0x570 [ 354.320701][ T6428] ? do_new_mount+0x71f/0x15e0 [ 354.325821][ T6428] ? path_mount+0x742/0x1f20 [ 354.330655][ T6428] ? __se_sys_mount+0x725/0x810 [ 354.335720][ T6428] ? __x64_sys_mount+0xe4/0x150 [ 354.340875][ T6428] ? x64_sys_call+0x2bf4/0x3b50 [ 354.345945][ T6428] ? do_syscall_64+0xcf/0x1e0 [ 354.350838][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.357143][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.363324][ T6428] ? kfree+0x18f/0xa60 [ 354.367552][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.373021][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.379041][ T6428] ? ext4_htree_fill_tree+0x18eb/0x1cd0 [ 354.384845][ T6428] ext4_htree_fill_tree+0x1941/0x1cd0 [ 354.390435][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.395832][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.402429][ T6428] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 354.408758][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.414167][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.420252][ T6428] ext4_readdir+0x4bbf/0x5b00 [ 354.425145][ T6428] ? aa_file_perm+0x3e4/0x17a0 [ 354.430116][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.435523][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.441613][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.446999][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.452397][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.459001][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.465064][ T6428] ? __pfx_ext4_readdir+0x10/0x10 [ 354.470290][ T6428] iterate_dir+0x688/0x870 [ 354.474934][ T6428] ovl_dir_read+0x14d/0x840 [ 354.479666][ T6428] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 354.486172][ T6428] ovl_check_d_type_supported+0x6a/0x110 [ 354.492391][ T6428] ? __pfx_ovl_check_d_type+0x10/0x10 [ 354.498013][ T6428] ovl_get_workdir+0x9c8/0x2780 [ 354.503060][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.509666][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.515063][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.521544][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.526947][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.532359][ T6428] ovl_fill_super+0x153c/0x62a0 [ 354.537406][ T6428] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 354.543891][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.549285][ T6428] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.555308][ T6428] ? sget_fc+0xf44/0x1360 [ 354.559833][ T6428] ? __pfx_set_anon_super_fc+0x10/0x10 [ 354.565628][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.571030][ T6428] get_tree_nodev+0x180/0x340 [ 354.575922][ T6428] ? __pfx_ovl_fill_super+0x10/0x10 [ 354.581303][ T6428] ? __pfx_ovl_get_tree+0x10/0x10 [ 354.586599][ T6428] ovl_get_tree+0x34/0x40 [ 354.591114][ T6428] vfs_get_tree+0xa7/0x570 [ 354.595926][ T6428] ? mount_capable+0xe1/0x120 [ 354.600809][ T6428] do_new_mount+0x71f/0x15e0 [ 354.605625][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.611046][ T6428] path_mount+0x742/0x1f20 [ 354.615676][ T6428] ? user_path_at_empty+0x325/0x3a0 [ 354.621100][ T6428] __se_sys_mount+0x725/0x810 [ 354.626006][ T6428] ? kmsan_get_metadata+0x146/0x1d0 [ 354.631410][ T6428] __x64_sys_mount+0xe4/0x150 [ 354.636320][ T6428] x64_sys_call+0x2bf4/0x3b50 [ 354.641212][ T6428] do_syscall_64+0xcf/0x1e0 [ 354.645927][ T6428] ? clear_bhb_loop+0x25/0x80 [ 354.650846][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.656989][ T6428] RIP: 0033:0x7fa44427cee9 [ 354.661553][ T6428] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 354.681457][ T6428] RSP: 002b:00007fa4450b60c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.690066][ T6428] RAX: ffffffffffffffda RBX: 00007fa4443b3fa0 RCX: 00007fa44427cee9 [ 354.698218][ T6428] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 354.706440][ T6428] RBP: 00007fa4442c947f R08: 0000000020000280 R09: 0000000000000000 [ 354.714577][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.722699][ T6428] R13: 000000000000000b R14: 00007fa4443b3fa0 R15: 00007ffd133c0fb8 [ 354.730849][ T6428] [ 354.734396][ T6428] Kernel Offset: disabled [ 354.738799][ T6428] Rebooting in 86400 seconds..