last executing test programs: 21.712826178s ago: executing program 2 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') move_mount(r4, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x272) bind$netlink(r3, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2}, {@in=@broadcast}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x884) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 21.051790794s ago: executing program 2 (id=1044): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10041, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, 0x0, 0x0) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) linkat(r7, &(0x7f0000000140)='./file1\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r8) 19.69544404s ago: executing program 2 (id=1047): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) 9.634241948s ago: executing program 3 (id=1070): mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x5) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a41, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) chdir(0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000040)={0x7f}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001b4c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) writev(r6, &(0x7f00000002c0)=[{0x0}], 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f4070d0903001f00000000000005000000000800040001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) write$sequencer(r5, &(0x7f00000000c0)=ANY=[@ANYRES64=r4], 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.916744249s ago: executing program 4 (id=1072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x2c}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000020000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10202a0}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf2503000000200001801400020076657468315f766972745f77696669000800030003000000050003000600000005000200c760000000050005008600000005000300000000001400018008000100", @ANYRES32=r9, @ANYBLOB="080003000000000005000500df000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000014}, 0x20008000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$unix(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)="b098e1", 0x3}, {&(0x7f0000001300)="8fa19388653a6fe02ff095b7", 0xc}, {&(0x7f0000001400)="edc59c6511e16c08ac9cf82c0a86e688933ff05ec73ee6bd4e6a3bbe724c7e89f71319834cc73fa72d61d9030f4df89888", 0x31}, {&(0x7f0000001480)="98", 0x1}], 0x4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x7ff, 0xffffffff, {{0x18, 0x4, 0x1, 0x7, 0x60, 0xf000, 0x0, 0x80, 0x2f, 0x0, @loopback, @broadcast, {[@end, @timestamp_prespec={0x44, 0x44, 0x95, 0x3, 0x1, [{@private=0xa010100, 0x4}, {@multicast1, 0x717}, {@dev={0xac, 0x14, 0x14, 0x1b}}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010102, 0xbadb}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3ff}, {@rand_addr=0x64010101, 0x1}]}, @ra={0x94, 0x4, 0x1}, @noop, @noop]}}}}}) sendmsg$nl_route_sched(r11, 0x0, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r12, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000000140)) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r13}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 8.761039823s ago: executing program 4 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc008aec1, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) io_uring_setup(0x1bab, &(0x7f0000000400)={0x0, 0x0, 0x400}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x2, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c0050800400050011000100cabee339084eeef16f162471f40000000800070000000000050002"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, 0x0) r8 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={r10, 0x0, 0xf6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r11, 0x3, r9, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000001090108000000000000000005000020c2f5bdc4c33793bd693602f2ff03800800014000000007ba8efaaf81d513d89419f692903eeb303b21746881b2233f16381a828b19dcc029f9100bf340f3065771681c50fda06449bb734b04ab17484c0fba1b9ed1e19a56f5dd3c7a6fd9b5"], 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x804) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000000000df24100000018001700000000000000007564703a73797a31000000002b5255c42c1fccd3f5eb3ebe0d5bce27dc82a43ea2ff55e90be8f11412ffd987d4b1f8c8ae3502e4b21f07437099"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8.43480718s ago: executing program 4 (id=1074): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b80)={0xffffffffffffffff}) shutdown(r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000200), 0xe) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000010c0)) recvmsg$kcm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/64, 0x40}], 0x1}, 0x0) sendmmsg$unix(r8, &(0x7f00000004c0), 0x0, 0x0) 8.43332733s ago: executing program 3 (id=1075): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r2], 0x0, 0x2d, 0x0, 0x0, 0x40000000}, 0x20) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000380)=0x80000001) r6 = socket(0x200000000000011, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x31}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r7, 0x1000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000400)={0x3, 0x9, 0x43, &(0x7f0000000340)=""/67}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), &(0x7f00000001c0)=0xffffffffffffff66) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) 7.421871437s ago: executing program 4 (id=1077): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYRES64], 0x8, 0x2ee, &(0x7f00000004c0)="$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") getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@local}, &(0x7f0000000040)=0x14) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f00000001c0)='\'') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xa, 0x0, &(0x7f00000006c0)="f6f4e98ed78ad62ceef1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r8, r7, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 6.79734772s ago: executing program 3 (id=1078): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x8, 0x42, 0x40}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05040800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8864, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x6100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x0, 0x0, 0xfffffffff0000000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000000)) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x154}}, 0x0) 4.789614811s ago: executing program 0 (id=1081): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x0, 0x8000, {0x0}, {0xffffffffffffffff}, 0x0, 0x200}) prlimit64(r6, 0xa, &(0x7f00000001c0)={0x4, 0x7c}, &(0x7f0000000200)) sched_setaffinity(r6, 0xa, &(0x7f0000000040)=0x10043) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0xfffffffffffffdcc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000004000000a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44010) recvmmsg(r8, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000003a80)=""/4090, 0xffa}, {&(0x7f0000000480)=""/201, 0xc9}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000025c0)=""/4073, 0xfe9}], 0x2}}], 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x20000) 4.673298971s ago: executing program 1 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=@newlink={0xa0, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @bond={{0x9}, {0x70, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x1f}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x100}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xe5}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5}, @IFLA_BOND_ARP_IP_TARGET={0x24, 0x8, 0x0, 0x1, [@broadcast, @remote, @remote, @remote, @remote, @remote, @local, @private=0xa010101]}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x4}]}}}]}, 0xa0}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r8, @ANYBLOB="0000c453c56efc7273e239e22dc84a95f6000027d442239b96d0c89c9bec8d74f49f9bf0ebb409e61f45002e49642a892bf628717ac9bbff04000000000000007062cd4ad51c5f5acd32e7f1ec797eed88b1"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)=@gettaction={0xc0, 0x32, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc1}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000810}, 0x5) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r10 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2000000}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xf000000}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2065000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4401007618f461d655d500040028000900000000000000a9f43db662c14da5048f904d34be445686fa8e80ebac0e917bf00046cd68958eccaf9a995fe6df6208d6f113e8d9250ea7c867a9f3e4e8dd25a40739be605ea53f80f5d5c1ba3a9ecbafba816c38411500038533f4a2f2c223f6c4c4a197250f85b677b34636cf6a3de7f4f30b4187d2d55f62f6ef00c1b4f9e211ba9124addc976e0393c6deb0ba748e02a148", @ANYRES32=r8, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, r8, 0x650}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x25, 0x1}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r12, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='dvmrp1\x00'}) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x9c, r13, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x200400d0) 4.649376183s ago: executing program 3 (id=1083): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0xc008551b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x11, 0x0, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000003e0007010000000000000000017c00000400000010000180", @ANYRES32], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000300), 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14}}, 0xec}}, 0x0) write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x6) open_by_handle_at(r0, 0x0, 0x8000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1000006) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) 4.491721137s ago: executing program 4 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r5) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x25) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="0f474800abc4e17a7eaa3c000000440f2012350f000000440f01c58fc97002700d0fc7b51d85cd66b9800000c00f3235000800000f302ef30f015e470f01d10f1ac7"}], 0x1, 0x0, 0x0, 0xfffffffffffffd9e) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c50000000000010902"], 0x0) r10 = socket(0x2, 0x6, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x2c, @private=0xa010104, 0x0, 0xfffffffd, 'nq\x00', 0x0, 0x0, 0x2}, 0x2c) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 4.260051956s ago: executing program 1 (id=1085): r0 = syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="1ac92f5544c0888e640e97585897d853b02ea0cd45d683d72694d94da9", @ANYRES64, @ANYRES64], 0x2, 0x5dfd, &(0x7f000000be40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$eJzs3U2MW0cBAOCxd73JJilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOEAgcRXvjNee2H22s+tnx98njcfz5j3PvOfn5/c7E4CpVW2+Li8vVEK4+PrLR//x4N/nbw451Bqj3nydbUvVQgiVmJ7NPu/dmZX4+nsvnOwWV8JS8zWlwxNXW9NuDiGcC7vDpVAPOy9efunNpcePnz92Yc9brxy8sj5zDwAA0+Xrlw4u7/jrn+/ddu3V+w6HDa3haf+8HtNb4n7/4bjjn/b/q6EzXWkL7eay8WZjqM53jjfTZbz2cmrZeLM9yp/Lyq/1GG9D+ODyZ9qGdZtvmGRpPa6HSnWxI12tLi6uHJOH5nH9XGXx7OkzzzxXUkWBNffv+0MIu9vCkQud6XELh8agDkOGxhjUYSLD4dGVda2xovR5HlFobC17CwSwIr9eeItz+ZmF29P6tNn+yr/6WLX79LAGRr3+D1T+XMnlB+X/5rwtDmvnTl2b0nyl39GWmM6vI+T3L/X+/eVXOjqH5tcjan3Ws9d1hEm5vtCrnjMjrsewetU/Xy/uVF+OcVoOX8ny238/+Xc6Kd8x0N1/8vP/giCMdwgd6drtfFaj5O0PML7y++Ya6fpolN/Xl+dvKMjfWJA/X5C/qSB/c0E+TLPfff+n4cXK6nF+fkw/6PnwdJ7trhh/aMD65OcjBy0/v+93ULdbfn4/MYyzP5x48tQXnn7q8sr9/5XW+n8jru/pcKMef1uX4gjpfGF+Xr1173+9s5xqj/HuzupzV5fxm++3d45X2b76OaFtO3NLPRY6p9vaa7xdnePVs/HmY9iY1TffP9mUTZf2P9J2NS2v2Wx+a9l8zGX1SNuVbTHO6wHDSOtjr/v/0/q5EGqVZ06fOfVoTKf19E8ztQ03h+8bcb2B29fv8z8LofP5ny2t4bVq+3Zh6+rwysp24bX4eZ3Dl1rldA7fH9Ppf+5bM/PN4Ysnv3vm6bWffZhqz/3o+W+fOHPm1Pe8GfrNV8ejGoO8SYct41Ifb8buTckbJmDd7f3xyk7AI6e/c+LZU8+eOrv/wIH9S0sHvrh/eW9zv35v+959u3Ml1BZYS6t/+mXXBAAAAAAAAAAAAOjXD44dvfz2G59/Z+X5/9Xn/9Lz/+nO3/T8/0+y5//z5+TTc/DpOcBtXfKb42QNrM5l49Vi+HBW3+1ZOTuy6T4S41Y/fvH5/1Rc3q5rqs892fBaj2TWnMAt7aXMZW2Q5P0FfjzGF2L86wAlqsx3Hxzjovat07qe2qdoa5eioX3gyZG+t7Q2pHZM0vPfXdt1avuyt42gjqy9UTxOWPY8At39c6ra//7X6oyXXhehd5gdbXk/n951otFzL73fHmwA1kbZ/X+m854pPvvHr228GdJoVx/r3F7m7ZfCIP7ydmd63PufXO/y8377Rl1+2fM/6v4/W/3f9b39y3rMqw9X7n9/ceWdtmLDzn7Lz+c/tQO9fbDyr8Xy09w8FPorv/GrrPz8glCf/peVv6nP8m+Z/13Dlf//WH5abA8/0G/5KzWuVDvrkZ83Ttf/8vPGyfVs/lPbnh9Q/jee7zb/Q3bUeCOWD9NsUvqZHVS2H9HaaR++/9/o3Nr2/9uqbLZZy+/D+FxMpw1xus8h7+9k0Pqn+yvS/8CO7PMrBf9v+v+dbF+KcdHvIfX/m9bHevzLb0s3l2VK17os2zt1WwOT6t2puv43EWHjGNRB6D80ZoaYrtVPXMn1bzQa63tCq0CphVP68i/7OKHs8ste/kXy/n/zffi8/988P+//N8/P+//N8+fjN9QrP+//N1+eef+/ef492efm/QMvFOR/tCB/Z/f81mH7vQXT7yrI/1hB/p5W/qGOMVL+fQXT31+Qf3dB/gMF+Z8oyP9kQf6DBfkPt+W39wGd8j9VMP2dLj2PMq3zD9Msfz7P7x+mR7r+0+v3v70gH5hcP3t135GnfvvN+srz/3Ot8yHpOt7hmK7F46cfxnR+3Tu0pW/mvRHTf8vyx/18B0yTvP2M/P/9oYJ8YHKl+7z8vmEKVTZ2Hxzjonareu3nM1k+HePPxPizMX4kxosx3hvjfTFeGlH9WB9HXvv9wRcrq8f7W7P8fu8nz58H6mgnKoSwv8/65OcHBr2fPW/Hb1C3W/6Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptp8XV5eqIRw8fWXjz55/PTem0MOtcaoN19n21K11nQhPBrjmRj/Mr65/t4LJ9vjGzGuhKVQCZXW8PDE1VZJm0MI58LucCnUw86Ll196c+nx4+ePXdjz1isHr6zfEgAAAIA73/sBAAD//weuDxQ=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x80186e82, &(0x7f0000000800)={@id={0x2, 0x0, @auto="acb537989404d32a59c18c6ff145252b"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r2 = getpid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = memfd_secret(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800800114000000000050005000a00000005000100"], 0x58}}, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000100)={0x0, r4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mknodat$null(r8, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9, &(0x7f0000000180)='./file1\x00', 0x0) 3.911158416s ago: executing program 3 (id=1086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000b800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="9002000000000000ffffff7f00000000040000000000000000000000000000000400000000000035028fcf0000000000ff0f00000000000000000000000000000000000000000000000000000000000004000000000000002ccc883d0000000000000000000000000000000085000000ff7f00"/124, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x0, 0x0}) getdents(r5, &(0x7f0000000a40)=""/226, 0xe2) syz_fuse_handle_req(r3, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r7, &(0x7f0000000000), 0x100000008) 3.74475549s ago: executing program 0 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x3f, 0x3, 0x2, @time={0x1, 0x7d3}, {0x6, 0x81}, {0x5, 0xff}, @control={0x0, 0x3, 0x400}}], 0x1c) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/119, 0x4}, {0x0, 0x2}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="00000000e4000000b70800ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r7) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="0d4a2e71f80a120173f80df29afd45d44adb6a833415744dace176b25527d326b9db7aeb05baca98eb54b971e37d9bdbab91b73adad8c134bb85a139a334d36a28c51998cd6d79dfaf81480570fe4a5f377a61b5a57b1b1d9bae54f488945e2eec61813b6ba23116ae160731d67976749fa6d6f4f2f18442fec6e4821374f0fb94867fd78b3a24a0c04227b0bb707269134b2c30bafcdf6c738e3955b21b0c062a9eff33effcc19c8d9266ed9f8348207c8376eb9e7ec2edc26aeadbd472fad789675095b4832034eecc3dbbc0e21e191289c637fcdbd7997f275a38eacc8d2bf5cfa6576270dc", @ANYRESHEX=r8, @ANYBLOB=',\x00']) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="63d37c22a8f7e2c9c6", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000075647000"/98], 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xb, 0x1a, &(0x7f0000000640)=@framed={{}, [@exit, @jmp={0x5, 0x1, 0x2, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x3a}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ldst={0x3, 0x3, 0x6, 0x5, 0x3, 0xc, 0x4}, @alu={0x4, 0x0, 0x6, 0x6, 0xa, 0xfffffffffffffffc, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$inet6(0xa, 0x6, 0x0) 2.647068314s ago: executing program 1 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000008107e0b6d0c935bb00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 2.601732818s ago: executing program 0 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r2, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2e0, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2c3, 0x33, @beacon={{{}, {}, @device_a, @broadcast, @random="90e488f9971a"}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}, [{0xdd, 0x3b, "2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd1fa777e6282b58e524"}, {0xdd, 0x7a, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9b938b13f76ccceb4d339a7d92a6a7f45bd90df8b5bd53f1eec1a241b70cadc8c29c9"}, {0xdd, 0xe4, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9159126c9f114d0e08f17f96e4757dd81825d8f432246cdb8ab571fcf"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x71, "83534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e977c080347f36fa8d773079f6224521c4c8b10e4a9454bece9457b66b239a7eaff140a8d9131349399c804bb1a81f829c6ab11af5cfe8df9f59ec093d26c17fe50bb0550d71068d16276"}]}}]}, 0x2e0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r10}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x27}, 0x62) listen(r11, 0x0) accept4(r11, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r14, 0x305, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 2.214845491s ago: executing program 0 (id=1090): syz_emit_ethernet(0x9a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xb, 0x0, [@private, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}]}]}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x4e2, &(0x7f0000000e00)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB9Klgre81JpsQssmG7KZtQpEU3xXEX+CTT/og+AcI0j9BhIK+SxVFtNUHH9SVnZ2tTdxNIt3u9CafD5zOOXOS/X5Pw87OmTnsBHBsnYuImxExEhGXImI835/mpd1383bn554/ezjfLkm0Wnf+kkSS7+u+VpJvz0TETkScjIivfCni68n/xm1sba/M1WrVjbxdaa6uVxpb25eXV+eWqkvVtZmZ6Wuz12evzk4NZJwTEXHjC3/4/rd/8sUbv/z0/d/d/dPFb7TTGsv7Xx7HIHWGXsr+L7pGI2LjdQQrwEi+LfXp/9bIEJMBAOBA7XP8D0fEJ7Lz//EYyc5O9/HT7w0rNQAAAGBAWp8bi38mES0AAADgyEqzNbBJWs7XAoxFmpbLnTW8H43Taa3eaH5qsb65ttBZKzsRpXRxuVadytcKT0Qpaben8zW23faVPe2ZiHgnIr47fiprl+frtYWiL34AAADAMXFmz/z/7+PZ/P9E0XkBAAAAAzZRdAIAAADAa2f+DwAAAEef+T8AAAAcaV++datdWt3nXy/c29pcqd+7vFBtrJRXN+fL8/WN9fJSvb6UfWff6kGvV6vX1z8Ta5sPKs1qo1lpbG3fXa1vrjXvLu96BDYAAAAwRO+cffzbJCJ2PnsqK21vFZ0UMBTJAf3ZQ0Ke5o3fDyEhYGhGik4AKMxo0QkAhSkVnQBQuIOuA/RdvPOrwecCAAC8HpMf63//37UBONrSohMAAIbO/X84vkq7VwBeLS4ToCgfiv1PBl79/n+r9X8nBQAADNRYVpK0nN8LHIs0LZcj3s4eC1BKFpdr1al8fvCb8dKJdns6+83kwDXDAAAAAAAAAAAAAAAAAAAAAAAAAEBHq5VECwAAADjSItI/Jtm3+UdMjl8Y23t94K3kH+PZNiLu/+jODx7MNZsb0+39f32xv/nDfP+VIq5gAAAAAHt15+ndeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNLzZw/nu2WYcf/8+YiY6Bn/7MlsczJKEXH6b0mMvvR7SUSMDCD+zqOIeLdX/KSdVkxEJ4te8U8VGD+NiDMDiA/H2eP28edmr/dfGueybe/332heXlX/418a3ePfSJ/jz9uHjPHek59X+sZ/FPHeaO/jTzd+0if++UPG/9pXt7f79bV+HDHZ8/Mn2RWr0lxdrzS2ti8vr84tVZeqazMz09dmr89enZ2qLC7Xqvm/PWN85+O/+Pd+4z/dJ/7EAeO/cMjx/+vJg2cf6VRLveJfPL87fqvV6Xu3T/w0/+z7ZF5v90926zud+sve/9mv399v/At9xv/i79/jg7Yd8+Ihx3/p9jefHvJHAYAhaGxtr8zVatWND2IljTciDZWBVE68GWkckUrrVV+n6CMTAAAwaP896S86EwAAAAAAAAAAAAAAAAAAADi+hvFtZHtj7hQzVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAff0nAAD//2e43VA=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x27, 0x10003, '\x00', [{}, {0xffffffff}]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0000020700fa"], 0x14}}, 0x0) syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{}, {0x6}}}}, 0xf) setgid(0xee00) setresuid(0x0, 0xee00, 0xee00) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000480)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) socket(0x10, 0x3, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x1e3142, 0x0) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x12, r5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e4f16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cff240359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf878b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b6311ccb3656e770f85b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90d5943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) sendto(r5, &(0x7f0000000540)="120100001200e7ef007600000000000000a1", 0x12, 0x4, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000300)=""/6, 0x11}], 0x8, &(0x7f0000000600)=""/177, 0xee}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.601311073s ago: executing program 1 (id=1091): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x403, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_lifetime={0x4, 0x3}]}, 0xb8}}, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc0742, 0x47) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dfa90000005f7819800008000d00b22e7b1c716a1101ee8ff8e76cad7f3f087f00d06a14f89698c46ef40164f188560ae4131b548d31e0cc2648183fef9132b1282ed3072b4bc8bad1f16923b9825c976aa682e13ec7423bc57ff842ddb94e34da833eddfe29fffe47df70cb74913b977a8ee8d2cbe6cba00cf0048ed9102f87435c504fcce623e42644f2c1b8be3d4e702d2ab33e9de44a39dd88872d602a194149ce7798b4729da10f9337476bd0923d8dce2110179d41d40019b27cb553b673ef1c33", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x3800}, 0x0) fanotify_mark(r1, 0x80, 0x48001014, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2}) getresgid(&(0x7f00000000c0), 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) open(0x0, 0x8040, 0x88) fanotify_mark(r1, 0x20, 0x8000010, r3, &(0x7f0000000100)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xffffffffffffffd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.566373476s ago: executing program 2 (id=1048): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140f0000ec0344c405c6daf1bb0000000000000a14000000f603010000000000000000000000000a"], 0x28}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x1c1042, 0x0) pwrite64(r4, &(0x7f0000000000)='+', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000c89cdcc901cee752cdf28c74e4b5682a5da45b5645dca5cb750552320b4e4e5aeca58dd0e726c89db1cfe35e294f8c570894be1829aadb1dc8eedda15a1eb20bae4e55a0f9403e527bd278207a47400e4dccfb4827f3862573b29abc6959283a1553eee68b1c9d134991c7163aa9622b8935e515a872e9553da20149c561507ae8d20d38c17cafd7af6e314fe78475201"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0xffffffffffffff1c}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r7}, 0x4) r9 = add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, 0x0, 0x10001, 0x2, r9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r8, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, r8, 0x2f, 0x0, 0xffffffffffffffff, @prog_fd=r8}, 0x20) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4d) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x21) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000140)={r13}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x7b, &(0x7f0000000040)={r15}, 0x10) 1.393759651s ago: executing program 2 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_SEL={0x14}]}}]}, 0x64}}, 0x0) 1.28190553s ago: executing program 3 (id=1093): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r4 = io_uring_setup(0x3e79, &(0x7f0000000000)) dup2(r3, r4) poll(0x0, 0x0, 0xfffffffe) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x5, 0x0, r2, 0x0}]) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) writev(r6, &(0x7f0000001e00)=[{&(0x7f0000000c00)="a2", 0x1}], 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x29f36383f5bf9df1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="7300000000000000008110fee4a9e2cd4b85baa41b9543ffffff030000", @ANYRES32=r8, @ANYBLOB="18001d80140000800600050022002000000000000000000008dfe1b5b860d05e08e3fc1a7be3ed793e230800000000000000c4"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24000028}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04004dbd700a0000000000000000370cde1252a907a4dd0557aa8a654d5cd2cbabec6fd33c3fa03e9e29b2dc4b684abb766b4c67ce7e532be55b759cb58c1a7a7f377c530c16dbcf076d33c90db506cbef49d70a280352b46cfc8bcdfbb46d6cd19e57602d8fdb077599fb39f1c5a46a4d4e6fba76b042871b32da86e25eb92e5a378a000d160ff375cc1b6c8bc3a3841ce03b747807000000000000004282cbee6a10b5d2e26ebf1f203adcf1a5e74ab94be23f60a9213663beca71075902ce73dbe71d838bd3fccae131671da68070a33890b709ec"], 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000002c00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup(r9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0xffffffffffffffff}, 0xc) 1.259526092s ago: executing program 2 (id=1094): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) mremap(&(0x7f0000684000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f00007ac000/0x1000)=nil) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000689000/0x3000)=nil, 0x3000}}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2066}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x2000000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getgid() epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) connect$unix(r6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) 1.179545889s ago: executing program 4 (id=1095): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sync_file_range(r0, 0x7, 0x7, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a000f0000000000000000000a000000000000000000000008000400", @ANYRES32=r8], 0x24}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1ae) write$binfmt_elf64(r5, 0x0, 0xfd30) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd3f503f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32ccd508d1823b8871e0ef2c3555eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f71105c4a42e9b979fcee1f628d1cec3462830606bb612bfed912c1cdc907bb91a2e86de2ad58beec2fc4c", @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) close(r12) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) vmsplice(r11, &(0x7f0000000240)=[{&(0x7f0000000140)="e6", 0x1}], 0x1, 0xe) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x2000efe}, 0x14) 1.078019728s ago: executing program 0 (id=1096): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) syz_io_uring_setup(0x1a5d, &(0x7f0000000300)={0x0, 0x214c3, 0x820, 0x1, 0xfffffffc}, 0x0, &(0x7f0000000780)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60128000000000000000000000000000bbff020000000000000098000000000001890090780000000000000000000000000000ffffac1414aa00"/87], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 711.799689ms ago: executing program 1 (id=1097): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x3c, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRESHEX=r3], 0x144}}, 0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1bc0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x0, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x443) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x3) syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) getsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000940), &(0x7f0000000840)=0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f00000003c0)={0xfc}, 0x0, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) pselect6(0x40, &(0x7f0000000080)={0x8001, 0x4, 0x401, 0x5, 0x6, 0x81, 0x3, 0x400}, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0x7, 0xffffffff7fffffff, 0x20, 0x3, 0x9}, &(0x7f0000000140)={0xffffffffffffffff, 0x5d, 0x4, 0x1579, 0x0, 0x141e, 0x5, 0x5}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffffffff]}, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={r8, 0x3, r6, 0x6}) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x2}, 0x8) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r9) 358.425409ms ago: executing program 1 (id=1098): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) set_robust_list(&(0x7f00000004c0)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x4bbb, &(0x7f0000000480)}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x14, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001a80500002804c9222f8393fe310a870997fb191a0e0b15126bfd8f7440b27c8d92ba247da1de354e0a927d3960edab7a8d2e3"], 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x7f, 0x2, 0x42, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x700, 0x5, 0x3}}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xe}, {0x0, 0x7}, {0x8, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x488c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000ff53d606b50000009500000000000000f66c6849ab78df1f34841c8e880a6b7eb50f9cbd9f6b1a22257d686e00aeb886349e92f9f9f52cb44373e76222f3f1c7af09329960d77501355ea82d83349d3f89d827b2a2281fdb57bd5010b240f278faeb510019b061d2454ed2b8745bb19e556add343c3011a8104177fe8ea94d085614ab08996f15d3c96a4f54330a6c2f67e4cbd06b16483d6c41aad0c30f213c86dc6711ec027bfa09814b33d7485a8ffc1fa240fb0b55dd720994f3ab848f71703786d396b44e1df663657728455afbbd921990bdc608c6621a23c451812bf7373e3b"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffd42, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5}, 0x10}}, 0x0) 0s ago: executing program 0 (id=1099): r0 = gettid() r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000180000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='fsi_master_gpio_out\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000530429c334bb5d8da538301b79d7a1702226583e31298ccc624ff2d1448c0e0fe54a231162f69f7213fc2966d2600f77d30d91517ba2023e043b7dea5af26b286015c7c24ee99669043c524b98705888afb59847d63941581d47689fc67eaf8e95cec92df74d1ae2895e5be2e5deb0ec4e60f423037ba69dd087c51242b1e0f486dd2413a40873181487a95bf3aa38add3d5fd83491e3b258022f5efc006561d482282cd4dd8eb30098917d231dadac884f6422705f88dfc420234e837d5809be11c4d2e9f", @ANYRES8, @ANYRESHEX=r4], 0x14}}, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, './file0/bus\x00'}, 0x6e) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0x8, 0x5, 0x80000001, 0x3f, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x110) finit_module(r8, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) kernel console output (not intermixed with test programs): an_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.076695][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.221064][ T7102] device hsr_slave_0 entered promiscuous mode [ 279.249056][ T7102] device hsr_slave_1 entered promiscuous mode [ 279.270481][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.288286][ T7102] Cannot create hsr debugfs directory [ 279.349357][ T7163] loop0: detected capacity change from 0 to 512 [ 279.400904][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.690'. [ 279.440304][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 279.496164][ T7163] EXT4-fs (loop0): Unrecognized mount option "context=root" or missing value [ 279.619415][ T7102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.629967][ T1075] Bluetooth: hci5: command 0x041b tx timeout [ 279.727824][ T26] audit: type=1326 audit(279.693:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.0.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x0 [ 279.773786][ T7102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.876160][ T7102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.002002][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.030560][ T21] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 280.049913][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.120334][ T21] usb 2-1: Product: syz [ 280.130535][ T21] usb 2-1: Manufacturer: syz [ 280.150940][ T21] usb 2-1: SerialNumber: syz [ 280.168783][ T21] usb 2-1: config 0 descriptor?? [ 280.232418][ T21] go7007 2-1:0.0: Sensoray 2250 found [ 280.237928][ T21] go7007: probe of 2-1:0.0 failed with error -12 [ 280.415478][ T7102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.427297][ T7167] loop2: detected capacity change from 0 to 32768 [ 280.485607][ T7102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.539768][ T7102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.552611][ T7102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.568162][ T7167] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 280.568162][ T7167] [ 280.580574][ T3013] usb 10-1: device descriptor read/8, error -110 [ 280.591524][ T7167] xtLookup: xtSearch returned -5 [ 280.596484][ T7167] read_mapping_page failed! [ 280.617335][ T7167] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 280.661438][ T7167] Mount JFS Failure: -5 [ 280.680450][ T7167] jfs_mount failed w/return code = -5 [ 280.769055][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.827554][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.841122][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.852220][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.873998][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.893138][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.915721][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.922975][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.972651][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.987811][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.000536][ T3013] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 281.013171][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.022367][ T3013] usb usb10-port1: attempt power cycle [ 281.026954][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.034925][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.048172][ T7167] loop2: detected capacity change from 0 to 2048 [ 281.050164][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.073693][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.097897][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.129352][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.144827][ T7167] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 281.145364][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.169517][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.188177][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.198526][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.210836][ T3612] usb 2-1: USB disconnect, device number 8 [ 281.248093][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.269010][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.281750][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.299650][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.307798][ T7167] loop2: detected capacity change from 0 to 512 [ 281.380583][ T3013] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 281.395816][ T7167] EXT4-fs (loop2): Unrecognized mount option "euid<00000000000000000000" or missing value [ 281.637649][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.646041][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.662546][ T7188] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 281.675688][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.702698][ T3612] Bluetooth: hci5: command 0x040f tx timeout [ 281.731329][ T3013] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 281.740816][ T3013] usb usb10-port1: unable to enumerate USB device [ 281.745034][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.766043][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.803200][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.828104][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.847564][ T7102] device veth0_vlan entered promiscuous mode [ 281.873551][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.898493][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.924265][ T7102] device veth1_vlan entered promiscuous mode [ 282.026631][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.121266][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.173513][ T7102] device veth0_macvtap entered promiscuous mode [ 282.236824][ T7102] device veth1_macvtap entered promiscuous mode [ 282.275274][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.286113][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.300385][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.311216][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.322019][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.332787][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.343162][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.353968][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.364174][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.374977][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.386281][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.410714][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.421918][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.451152][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.484156][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.506545][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.530326][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.543869][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.554617][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.564863][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.575628][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.585758][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.596547][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.606686][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.617391][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.628860][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.680970][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.691219][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.718486][ T7102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.747619][ T7102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.757370][ T7102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.770340][ T7102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.895106][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.914893][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.953109][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.982492][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.994464][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.008038][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.153888][ T7195] loop4: detected capacity change from 0 to 1024 [ 283.211091][ T7196] loop2: detected capacity change from 0 to 736 [ 283.243000][ T7198] netlink: 84 bytes leftover after parsing attributes in process `syz.3.672'. [ 283.781047][ T3013] Bluetooth: hci5: command 0x0419 tx timeout [ 283.787500][ T3987] hfsplus: b-tree write err: -5, ino 4 [ 283.868292][ C1] eth0: bad gso: type: 1, size: 1408 [ 283.880574][ C1] eth0: bad gso: type: 1, size: 1408 [ 284.180539][ T3013] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.188227][ T3613] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.239932][ T7230] loop0: detected capacity change from 0 to 64 [ 284.510489][ T3013] usb 2-1: Using ep0 maxpacket: 16 [ 284.530402][ T3613] usb 5-1: Using ep0 maxpacket: 32 [ 284.760542][ T3013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.771710][ T3613] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 284.810664][ T7237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.813024][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.834650][ T3013] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.877580][ T3613] usb 5-1: config 0 descriptor?? [ 284.889575][ T3013] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.941473][ T3613] rndis_host: probe of 5-1:0.0 failed with error -22 [ 284.957151][ T3013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.009183][ T3013] usb 2-1: config 0 descriptor?? [ 285.750549][ T3013] usbhid 2-1:0.0: can't add hid device: -71 [ 285.765699][ T7249] loop4: detected capacity change from 0 to 512 [ 285.782642][ T3013] usbhid: probe of 2-1:0.0 failed with error -71 [ 285.829324][ T3013] usb 2-1: USB disconnect, device number 9 [ 285.944985][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.965673][ T7249] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.697: invalid indirect mapped block 10 (level 1) [ 286.052913][ T7249] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.697: invalid indirect mapped block 8 (level 1) [ 286.096843][ T7249] EXT4-fs (loop4): 1 truncate cleaned up [ 286.147679][ T7249] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.288556][ T150] block nbd2: Attempted send on invalid socket [ 286.298040][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 286.335879][ T26] audit: type=1800 audit(286.303:285): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.697" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 286.536427][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 286.912465][ T7281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.210385][ T3952] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.222291][ T3013] usb 5-1: USB disconnect, device number 8 [ 288.269671][ T7298] loop0: detected capacity change from 0 to 256 [ 288.306027][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 288.355854][ T7303] loop4: detected capacity change from 0 to 64 [ 288.579180][ T7307] syz.3.724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 288.650388][ T3952] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 288.668015][ T7311] loop0: detected capacity change from 0 to 1764 [ 288.676681][ T3952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.716979][ T3952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.745940][ T26] audit: type=1326 audit(288.713:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x0 [ 288.914765][ T7314] 9pnet: p9_fd_create_unix (7314): problem connecting socket: ./file1: -111 [ 288.990770][ T3952] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.024508][ T3952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.064464][ T3952] usb 2-1: Product: syz [ 289.079310][ T7309] loop0: detected capacity change from 0 to 128 [ 289.086948][ T3952] usb 2-1: Manufacturer: syz [ 289.109705][ T3952] usb 2-1: SerialNumber: syz [ 289.191409][ T3952] usb 2-1: selecting invalid altsetting 1 [ 289.216941][ T7309] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 289.228973][ T7309] sysv_free_block: trying to free block not in datazone [ 289.241318][ T7309] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 289.424644][ T26] audit: type=1326 audit(289.393:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.4.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x0 [ 289.481945][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'. [ 289.526186][ T7325] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 289.661833][ T3952] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 289.668952][ T26] audit: type=1326 audit(289.633:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.4.726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd911e58ef9 code=0x0 [ 289.963321][ T3952] cdc_ncm 2-1:1.0: bind() failure [ 290.496215][ T3013] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 290.504582][ T3013] Bluetooth: hci2: Injecting HCI hardware error event [ 290.512332][ T3585] Bluetooth: hci2: hardware error 0x00 [ 290.523812][ T3952] cdc_ncm 2-1:1.1: skipping garbage [ 290.557980][ T3952] cdc_ncm 2-1:1.1: skipping garbage [ 290.607276][ T7335] loop0: detected capacity change from 0 to 512 [ 290.630239][ T3952] cdc_ncm 2-1:1.1: invalid descriptor buffer length [ 290.660552][ T3952] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 290.667344][ T7337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.667793][ T3952] cdc_ncm 2-1:1.1: bind() failure [ 290.738633][ T7335] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 290.748541][ T7335] UDF-fs: Scanning with blocksize 512 failed [ 290.761219][ T7335] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 290.792850][ T7335] UDF-fs: Scanning with blocksize 1024 failed [ 290.831171][ T7335] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 290.868410][ T7335] UDF-fs: Scanning with blocksize 2048 failed [ 290.899334][ T7335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 290.930473][ T7357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.959448][ T26] audit: type=1326 audit(290.923:289): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 290.988849][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.051740][ T26] audit: type=1326 audit(290.953:290): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.073409][ T7357] sctp: failed to load transform for md5: -2 [ 291.203651][ T26] audit: type=1326 audit(290.953:291): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.225956][ T3951] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.331414][ T26] audit: type=1326 audit(290.953:292): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.445729][ T26] audit: type=1326 audit(290.953:293): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.500356][ T3951] usb 3-1: Using ep0 maxpacket: 32 [ 291.601935][ T7374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.741'. [ 291.613467][ T26] audit: type=1326 audit(290.953:294): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.662233][ T3951] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 291.677106][ T3951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.696686][ T26] audit: type=1326 audit(290.963:295): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.753015][ T3951] usb 3-1: config 0 descriptor?? [ 291.779446][ T26] audit: type=1326 audit(290.963:296): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x7ffc0000 [ 291.781135][ T3615] usb 2-1: USB disconnect, device number 10 [ 291.836486][ T3951] rndis_host: probe of 3-1:0.0 failed with error -22 [ 292.030710][ T7383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.144417][ T7393] loop2: detected capacity change from 0 to 512 [ 292.171207][ T7392] blktrace: Concurrent blktraces are not allowed on loop1 [ 294.105339][ T7393] EXT4-fs: failed to create workqueue [ 294.122299][ T7393] EXT4-fs (loop2): mount failed [ 294.281691][ T7397] netlink: 'syz.3.749': attribute type 3 has an invalid length. [ 294.282021][ T21] usb 3-1: USB disconnect, device number 10 [ 294.420404][ T3951] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 294.449585][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 294.590308][ T3666] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.827374][ T7426] loop2: detected capacity change from 0 to 1024 [ 295.406479][ T3951] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 295.615787][ T3653] hfsplus: b-tree write err: -5, ino 4 [ 295.710414][ T7428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.724918][ T3951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.737612][ T3951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.746023][ T3951] usb 1-1: SerialNumber: syz [ 295.809765][ T7437] loop2: detected capacity change from 0 to 512 [ 295.875033][ T7437] EXT4-fs (loop2): 1 truncate cleaned up [ 295.890424][ T3666] usb 4-1: device not accepting address 7, error -71 [ 295.917284][ T7437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.680526][ T3951] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 298.978653][ T3951] usb 1-1: USB disconnect, device number 7 [ 299.000589][ T3951] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 299.221373][ T7459] loop1: detected capacity change from 0 to 512 [ 299.344575][ T7463] loop0: detected capacity change from 0 to 164 [ 299.356493][ T7459] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: writeback. [ 299.534379][ T26] audit: type=1326 audit(299.503:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.0.767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x0 [ 299.645368][ T7476] loop0: detected capacity change from 0 to 164 [ 299.706665][ T7476] ISOFS: Unable to identify CD-ROM format. [ 299.734147][ T7475] loop2: detected capacity change from 0 to 764 [ 299.945376][ T7483] netlink: 'syz.3.770': attribute type 4 has an invalid length. [ 300.954584][ T7507] xt_hashlimit: overflow, try lower: 3/0 [ 300.977626][ T7509] loop2: detected capacity change from 0 to 64 [ 301.270337][ T3627] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 301.424809][ T7516] loop4: detected capacity change from 0 to 2048 [ 301.595341][ T7516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.673233][ T26] audit: type=1800 audit(301.643:298): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.778" name="file2" dev="loop4" ino=1347 res=0 errno=0 [ 301.700362][ T3627] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 301.714424][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 301.777121][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.865115][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 301.910375][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.040375][ T3627] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 302.052760][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 302.095390][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.148125][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 302.202086][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.271933][ T7523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.340758][ T3627] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 302.361003][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 302.394772][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.435624][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 302.476908][ T3627] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.820825][ T7529] autofs4:pid:7529:autofs_fill_super: called with bogus options [ 306.020424][ T3627] usb 4-1: string descriptor 0 read error: -71 [ 306.030146][ T3627] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 306.070597][ T3627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.150619][ T3627] usb 4-1: can't set config #168, error -71 [ 306.181002][ T3627] usb 4-1: USB disconnect, device number 9 [ 306.380639][ T3951] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 306.445854][ T7540] loop4: detected capacity change from 0 to 1024 [ 306.536785][ T7540] EXT4-fs (loop4): Test dummy encryption mode enabled [ 306.546427][ T7540] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 306.574409][ T7540] EXT4-fs (loop4): unsupported descriptor size 0 [ 306.749255][ T7540] overlayfs: empty lowerdir [ 306.780565][ T3951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.832741][ T3951] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 306.844315][ T3951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.889856][ T3951] usb 3-1: config 0 descriptor?? [ 306.964780][ T3951] comedi comedi0: Wrong number of endpoints [ 306.980570][ T3951] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 308.157168][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 308.197144][ T7568] loop4: detected capacity change from 0 to 64 [ 308.473452][ T7570] netlink: 136 bytes leftover after parsing attributes in process `syz.0.792'. [ 308.778092][ T7580] loop0: detected capacity change from 0 to 1024 [ 309.584622][ T7580] hfsplus: failed to load root directory [ 309.691516][ T3627] usb 3-1: USB disconnect, device number 11 [ 309.840773][ T7591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.795'. [ 309.870357][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 309.944201][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 310.190606][ T7607] loop4: detected capacity change from 0 to 128 [ 310.390302][ T1075] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 311.650290][ T1075] usb 3-1: Using ep0 maxpacket: 32 [ 311.770568][ T1075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.864509][ T1075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.898199][ T1075] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 311.974657][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.015683][ T1075] usb 3-1: config 0 descriptor?? [ 312.222069][ T7623] xt_HMARK: spi-set and port-set can't be combined [ 312.269903][ T7623] netlink: 1528 bytes leftover after parsing attributes in process `syz.4.804'. [ 312.770430][ T1075] usbhid 3-1:0.0: can't add hid device: -71 [ 312.776481][ T1075] usbhid: probe of 3-1:0.0 failed with error -71 [ 312.838236][ T1075] usb 3-1: USB disconnect, device number 12 [ 313.147493][ T7634] loop1: detected capacity change from 0 to 64 [ 313.318212][ T7644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.418314][ T7654] fuse: Bad value for 'fd' [ 314.434127][ T7653] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 314.860084][ T26] audit: type=1326 audit(314.823:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.2.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eb1826ef9 code=0x0 [ 315.008463][ T7666] loop2: detected capacity change from 0 to 2048 [ 315.039732][ T7668] PKCS7: Unknown OID: [5] 0.0 [ 315.080388][ T7668] PKCS7: Only support pkcs7_signedData type [ 315.150574][ T7666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.422391][ T7675] capability: warning: `syz.3.817' uses 32-bit capabilities (legacy support in use) [ 315.476510][ T7673] syz.3.817[7673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.476633][ T7673] syz.3.817[7673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.794965][ T7666] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 315.955368][ T7666] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1476 with error 28 [ 316.045883][ T7666] EXT4-fs (loop2): This should not happen!! Data will be lost [ 316.045883][ T7666] [ 316.068880][ T7666] EXT4-fs (loop2): Total free blocks count 0 [ 316.075791][ T7666] EXT4-fs (loop2): Free/Dirty block details [ 316.165666][ T7666] EXT4-fs (loop2): free_blocks=2415919104 [ 316.174101][ T7666] EXT4-fs (loop2): dirty_blocks=1520 [ 316.191311][ T7690] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 316.191311][ T7690] The task syz.3.819 (7690) triggered the difference, watch for misbehavior. [ 316.526415][ T7666] EXT4-fs (loop2): Block reservation details [ 316.550417][ T7666] EXT4-fs (loop2): i_reserved_data_blocks=93 [ 316.863714][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 316.903344][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.909661][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.938862][ T3811] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 32 with error 28 [ 316.992999][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 317.002381][ T3811] EXT4-fs (loop2): This should not happen!! Data will be lost [ 317.002381][ T3811] [ 317.025427][ T7698] loop1: detected capacity change from 0 to 64 [ 317.265017][ T7703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.764737][ T26] audit: type=1326 audit(317.733:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.140283][ T3615] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 318.385479][ T26] audit: type=1326 audit(317.733:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.497744][ T26] audit: type=1326 audit(317.763:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.520038][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 318.616849][ T26] audit: type=1326 audit(317.763:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.658949][ T26] audit: type=1326 audit(317.763:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.732216][ T7737] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 318.835116][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.883771][ T26] audit: type=1326 audit(317.773:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 318.890521][ T3615] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 318.922314][ T7737] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.970309][ T26] audit: type=1326 audit(317.773:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 319.014321][ T7743] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 319.045304][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.063671][ T26] audit: type=1326 audit(317.773:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 319.113269][ T3615] usb 3-1: Product: syz [ 319.133399][ T3615] usb 3-1: Manufacturer: syz [ 319.145327][ T26] audit: type=1326 audit(317.793:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 319.158356][ T3615] usb 3-1: SerialNumber: syz [ 319.180781][ T7744] netlink: 'syz.3.834': attribute type 27 has an invalid length. [ 319.213481][ T3615] usb 3-1: config 0 descriptor?? [ 319.528113][ T7727] loop4: detected capacity change from 0 to 40427 [ 319.585955][ T7727] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 319.601699][ T7727] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 320.674991][ T7757] loop1: detected capacity change from 0 to 32768 [ 323.024195][ T7727] F2FS-fs (loop4): Found nat_bits in checkpoint [ 323.464634][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.472021][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.460464][ T3615] usb 3-1: MIDIStreaming interface descriptor not found [ 324.830868][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.930978][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.466353][ T7744] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.499091][ T7744] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.520270][ T7744] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.540315][ T7744] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.895531][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 325.935335][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 326.013997][ T7775] loop0: detected capacity change from 0 to 64 [ 326.079515][ T3627] usb 3-1: USB disconnect, device number 13 [ 326.571110][ T7782] netlink: 892 bytes leftover after parsing attributes in process `syz.1.842'. [ 327.137746][ T7800] loop2: detected capacity change from 0 to 256 [ 327.217761][ T7805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.848'. [ 327.238103][ T7807] misc userio: No port type given on /dev/userio [ 327.329554][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.848'. [ 327.388369][ T7809] loop1: detected capacity change from 0 to 512 [ 327.503428][ T7812] loop0: detected capacity change from 0 to 64 [ 328.309440][ T7809] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 328.385545][ T7809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 328.435016][ T7809] System zones: 1-12 [ 328.524478][ T7809] EXT4-fs (loop1): orphan cleanup on readonly fs [ 328.572113][ T7809] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.848: bg 0: block 361: padding at end of block bitmap is not set [ 329.062672][ T7820] device macsec1 entered promiscuous mode [ 329.078844][ T7820] device batadv0 entered promiscuous mode [ 329.117947][ T7809] EXT4-fs (loop1): Remounting filesystem read-only [ 329.275596][ T7809] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 329.316284][ T7820] device batadv0 left promiscuous mode [ 329.341903][ T7809] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.848: invalid indirect mapped block 12 (level 1) [ 329.403042][ T7809] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.848: invalid indirect mapped block 2 (level 2) [ 329.417405][ T3013] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 329.431551][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 329.485298][ T7809] EXT4-fs (loop1): 1 truncate cleaned up [ 329.491021][ T7809] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000400000,errors=remount-ro,min_batch_time=0x000000000000007f. Quota mode: none. [ 329.516703][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'. [ 329.555724][ T7805] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 5: comm syz.1.848: lblock 0 mapped to illegal pblock 5 (length 1) [ 329.575638][ T7828] loop3: detected capacity change from 0 to 64 [ 329.596293][ T7805] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.848: error -117 reading directory block [ 329.643538][ T7830] netlink: 'syz.4.854': attribute type 3 has an invalid length. [ 329.794635][ T7832] loop0: detected capacity change from 0 to 2048 [ 329.873519][ T7832] EXT4-fs (loop0): quotafile must be on filesystem root [ 329.940286][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 330.177505][ T3013] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 330.208286][ T3013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.355732][ T3013] usb 3-1: Product: syz [ 330.603800][ T3013] usb 3-1: Manufacturer: syz [ 330.626816][ T3013] usb 3-1: SerialNumber: syz [ 330.810428][ T3013] usb 3-1: config 0 descriptor?? [ 330.883841][ T3013] go7007 3-1:0.0: Sensoray 2250 found [ 330.889724][ T3013] go7007: probe of 3-1:0.0 failed with error -12 [ 331.540395][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 331.737170][ T7851] loop1: detected capacity change from 0 to 64 [ 332.419412][ T7857] loop3: detected capacity change from 0 to 512 [ 332.500679][ T21] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 332.516506][ T7857] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 332.517339][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.542285][ T7857] UDF-fs: Scanning with blocksize 512 failed [ 332.548773][ T21] usb 5-1: Product: syz [ 332.560930][ T21] usb 5-1: Manufacturer: syz [ 332.588693][ T21] usb 5-1: SerialNumber: syz [ 332.597255][ T7857] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 332.623536][ T7857] UDF-fs: Scanning with blocksize 1024 failed [ 332.663538][ T7857] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 332.678032][ T21] usb 5-1: config 0 descriptor?? [ 332.691864][ T7857] UDF-fs: Scanning with blocksize 2048 failed [ 332.711921][ T21] usb 5-1: can't set config #0, error -71 [ 332.717962][ T7857] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 332.741043][ T21] usb 5-1: USB disconnect, device number 9 [ 332.769942][ T7857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.759624][ T1075] usb 3-1: USB disconnect, device number 14 [ 334.788481][ T7876] loop1: detected capacity change from 0 to 256 [ 334.882354][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 335.319752][ T7890] loop1: detected capacity change from 0 to 1764 [ 336.333582][ T7879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.935638][ T7912] loop1: detected capacity change from 0 to 64 [ 340.035604][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 340.961523][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 343.276967][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 343.276980][ T26] audit: type=1326 audit(599.244:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7944 comm="syz.2.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eb1826ef9 code=0x0 [ 343.375793][ T7950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.386887][ T7945] loop2: detected capacity change from 0 to 128 [ 343.462805][ T7950] bridge0: port 3(bond1) entered blocking state [ 343.520269][ T7950] bridge0: port 3(bond1) entered disabled state [ 343.558064][ T7950] device bond1 entered promiscuous mode [ 343.749151][ T7960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.749813][ T7948] loop1: detected capacity change from 0 to 40427 [ 343.852752][ T7948] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 343.886140][ T7948] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 344.224276][ T7948] F2FS-fs (loop1): invalid crc value [ 346.261745][ T7948] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 346.490265][ T3013] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 346.742769][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 346.778460][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 346.850787][ T3013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.884864][ T3013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.941030][ T3013] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 346.991925][ T7999] loop1: detected capacity change from 0 to 64 [ 347.054009][ T3013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.064397][ T3013] usb 3-1: config 0 descriptor?? [ 347.084243][ T8001] loop4: detected capacity change from 0 to 64 [ 347.340876][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'. [ 348.650748][ T3013] usbhid 3-1:0.0: can't add hid device: -71 [ 348.656764][ T3013] usbhid: probe of 3-1:0.0 failed with error -71 [ 349.437672][ T3013] usb 3-1: USB disconnect, device number 15 [ 350.242208][ T26] audit: type=1326 audit(605.849:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.3.903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0423914ef9 code=0x0 [ 350.332648][ T8037] loop3: detected capacity change from 0 to 128 [ 350.418463][ T8027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.428234][ T8027] bridge0: port 3(bond1) entered blocking state [ 350.437009][ T8027] bridge0: port 3(bond1) entered disabled state [ 350.457665][ T8027] device bond1 entered promiscuous mode [ 350.478936][ T8027] bridge0: port 3(bond1) entered blocking state [ 350.485241][ T8027] bridge0: port 3(bond1) entered forwarding state [ 350.507678][ T3013] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 350.507959][ T3811] bridge0: port 3(bond1) entered disabled state [ 350.890330][ T3013] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.905667][ T3013] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.938080][ T3013] usb 5-1: config 1 interface 0 has no altsetting 0 [ 350.989635][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 351.016124][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 351.050641][ T3013] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.059742][ T3013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.087453][ T3013] usb 5-1: SerialNumber: syz [ 351.141237][ T3013] cdc_ether 5-1:1.0: skipping garbage [ 351.146642][ T3013] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 351.280366][ T3013] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 355.296966][ T8058] SET target dimension over the limit! [ 355.314519][ T3951] usb 5-1: USB disconnect, device number 10 [ 355.402323][ T8061] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 355.444659][ T8061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.911'. [ 355.496770][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 355.521947][ T8073] xt_HMARK: spi-set and port-set can't be combined [ 355.560820][ T8073] netlink: 1528 bytes leftover after parsing attributes in process `syz.2.914'. [ 355.752433][ T8080] tipc: Started in network mode [ 355.757433][ T8080] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 355.767595][ T8080] tipc: Enabling of bearer rejected, failed to enable media [ 355.781441][ T8080] netlink: 'syz.3.915': attribute type 13 has an invalid length. [ 355.923697][ T8079] device ipip1 entered promiscuous mode [ 356.032407][ T8088] xt_HMARK: spi-set and port-set can't be combined [ 356.138780][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 356.161333][ T8088] netlink: 1528 bytes leftover after parsing attributes in process `syz.0.927'. [ 356.324252][ T8098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.332012][ T8098] bridge0: port 3(bond1) entered blocking state [ 356.338479][ T8098] bridge0: port 3(bond1) entered disabled state [ 356.348965][ T8098] device bond1 entered promiscuous mode [ 356.356142][ T8098] bridge0: port 3(bond1) entered blocking state [ 356.362459][ T8098] bridge0: port 3(bond1) entered forwarding state [ 356.438317][ T6101] bridge0: port 3(bond1) entered disabled state [ 356.568516][ T8104] loop2: detected capacity change from 0 to 256 [ 356.602088][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 356.697124][ T8104] FAT-fs (loop2): bogus number of directory entries (4) [ 356.785498][ T8111] loop0: detected capacity change from 0 to 128 [ 356.804136][ T8104] FAT-fs (loop2): Can't find a valid FAT filesystem [ 357.997575][ T8118] loop3: detected capacity change from 0 to 1024 [ 358.550445][ T8137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.574568][ T8118] fuse: Unknown parameter 'fd50x000000000000000a' [ 358.673643][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 358.857705][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 358.902764][ T3013] Bluetooth: hci3: command 0x0409 tx timeout [ 359.015808][ T144] hfsplus: b-tree write err: -5, ino 4 [ 359.048364][ T8153] loop2: detected capacity change from 0 to 64 [ 359.097913][ T8148] loop0: detected capacity change from 0 to 764 [ 359.235513][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.262716][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.305535][ T8112] device bridge_slave_0 entered promiscuous mode [ 359.341992][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.391259][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.424054][ T8112] device bridge_slave_1 entered promiscuous mode [ 359.489812][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.936'. [ 359.620643][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.689635][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.827903][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 359.907842][ C1] eth0: bad gso: type: 1, size: 1408 [ 360.005667][ T8112] team0: Port device team_slave_0 added [ 360.170630][ T8112] team0: Port device team_slave_1 added [ 360.424084][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.445742][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.626576][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.738075][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.767895][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.856846][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.920596][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 360.980439][ T3013] Bluetooth: hci3: command 0x041b tx timeout [ 361.044763][ T8112] device hsr_slave_0 entered promiscuous mode [ 361.089545][ T8112] device hsr_slave_1 entered promiscuous mode [ 361.121364][ T8112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.147973][ T3013] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 361.149896][ T8112] Cannot create hsr debugfs directory [ 361.400269][ T3013] usb 3-1: Using ep0 maxpacket: 32 [ 361.499865][ T8112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.732267][ T8112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.821526][ T8208] loop4: detected capacity change from 0 to 512 [ 362.768157][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 362.771814][ T3013] usb 3-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=70.33 [ 362.786176][ T8208] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 362.786176][ T8208] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 362.786176][ T8208] [ 362.803845][ T8208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 362.842817][ T3013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.861492][ T3013] usb 3-1: Product: syz [ 362.868032][ T8208] EXT4-fs (loop4): 1 truncate cleaned up [ 362.873745][ T8208] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,nodelalloc,noacl,abort,,errors=continue. Quota mode: none. [ 362.914735][ T3013] usb 3-1: Manufacturer: syz [ 362.923048][ T3013] usb 3-1: SerialNumber: syz [ 362.971164][ T3013] spcp8x5 3-1:2.0: required endpoints missing [ 363.074171][ T3666] Bluetooth: hci3: command 0x040f tx timeout [ 363.112765][ T8112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.294877][ T8112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.373685][ T1301] usb 3-1: USB disconnect, device number 16 [ 363.494479][ T8218] xt_TCPMSS: Only works on TCP SYN packets [ 363.709963][ T8221] loop4: detected capacity change from 0 to 64 [ 363.765693][ T8112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.821182][ T8112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.886218][ T8112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.959570][ T8112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.263527][ T8215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.306082][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.400020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.427274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.471210][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.537236][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.621553][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.689271][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.696381][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.778476][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.833661][ T8235] loop2: detected capacity change from 0 to 256 [ 364.858267][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.977456][ T8244] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 365.023221][ T8235] FAT-fs (loop2): Directory bread(block 64) failed [ 365.051713][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.069321][ T8235] FAT-fs (loop2): Directory bread(block 65) failed [ 365.091210][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.098280][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.116420][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 365.130500][ T8235] FAT-fs (loop2): Directory bread(block 66) failed [ 365.140302][ T3666] Bluetooth: hci3: command 0x0419 tx timeout [ 365.186719][ T8235] FAT-fs (loop2): Directory bread(block 67) failed [ 365.198383][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.211269][ T8235] FAT-fs (loop2): Directory bread(block 68) failed [ 365.245178][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.258224][ T8235] FAT-fs (loop2): Directory bread(block 69) failed [ 365.400767][ T8235] FAT-fs (loop2): Directory bread(block 70) failed [ 365.464501][ T8254] loop4: detected capacity change from 0 to 8 [ 366.858670][ T8235] FAT-fs (loop2): Directory bread(block 71) failed [ 366.865573][ T8235] FAT-fs (loop2): Directory bread(block 72) failed [ 366.872265][ T8235] FAT-fs (loop2): Directory bread(block 73) failed [ 366.895239][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.955'. [ 366.983385][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.006262][ T8254] SQUASHFS error: zlib decompression failed, data probably corrupt [ 367.014418][ T8254] SQUASHFS error: Failed to read block 0x9b: -5 [ 367.020722][ T8254] SQUASHFS error: Unable to read metadata cache entry [99] [ 367.028246][ T8254] SQUASHFS error: Unable to read inode 0x127 [ 367.176989][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.079237][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.107789][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.118649][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.157825][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 368.167803][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.958'. [ 368.194094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.228569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.348656][ T8112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.402853][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.471056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.551384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.648339][ T8274] loop4: detected capacity change from 0 to 64 [ 368.984511][ T8281] loop3: detected capacity change from 0 to 2048 [ 370.047129][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.108768][ T8288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.122162][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.136781][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.312604][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.321433][ T8296] loop4: detected capacity change from 0 to 512 [ 370.361122][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.423611][ T8296] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 370.562821][ T8296] EXT4-fs (loop4): 1 orphan inode deleted [ 370.585866][ T8296] EXT4-fs (loop4): 1 truncate cleaned up [ 370.969659][ T8304] tc_dump_action: action bad kind [ 370.977615][ T8112] device veth0_vlan entered promiscuous mode [ 370.991087][ T8112] device veth1_vlan entered promiscuous mode [ 371.017022][ T8112] device veth0_macvtap entered promiscuous mode [ 371.027335][ T8112] device veth1_macvtap entered promiscuous mode [ 371.050590][ T8296] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 371.113113][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.130872][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.170402][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.198629][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.233150][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.252280][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.276178][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.316809][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.365186][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.397219][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.437020][ T8320] loop0: detected capacity change from 0 to 64 [ 371.437090][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.535339][ T8321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 371.556970][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.568952][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.579503][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.604565][ T8321] EXT4-fs (loop4): Remounting filesystem read-only [ 371.612647][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.612679][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.612695][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.614088][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.681813][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.699726][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.708712][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.733225][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.743322][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.753372][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'. [ 371.763539][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 371.839091][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.890317][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.945461][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.973814][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.986891][ T8334] /dev/sg0: Can't open blockdev [ 371.993092][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.036794][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.049050][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.060929][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.096444][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.116498][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 372.171443][ T8333] x_tables: ip_tables: ah match: only valid for protocol 51 [ 372.189741][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.252393][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.326182][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.362005][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.375736][ T26] audit: type=1326 audit(627.039:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.457502][ T8112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.503129][ T8112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.523232][ T26] audit: type=1326 audit(627.099:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.525561][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.563272][ T8112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.590306][ T8112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.638064][ T8352] loop2: detected capacity change from 0 to 512 [ 372.654700][ T26] audit: type=1326 audit(627.099:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.755346][ T8352] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 372.842619][ T26] audit: type=1326 audit(627.099:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.877339][ T8352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a024e01c, mo2=0002] [ 372.903388][ T26] audit: type=1326 audit(627.149:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.931019][ T26] audit: type=1326 audit(627.149:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 372.997454][ T8352] System zones: 1-12 [ 373.007989][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.042629][ T8352] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.981: casefold flag without casefold feature [ 373.064011][ T26] audit: type=1326 audit(627.149:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 373.086371][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.130137][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.148798][ T26] audit: type=1326 audit(627.149:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 373.174024][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.198949][ T26] audit: type=1326 audit(627.149:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 373.264641][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.325509][ T8352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.981: missing EA_INODE flag [ 373.329627][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.417446][ T26] audit: type=1326 audit(627.149:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911e58ef9 code=0x7ffc0000 [ 373.480921][ T8352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.981: error while reading EA inode 12 err=-117 [ 373.560900][ T8352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.981: missing EA_INODE flag [ 373.620690][ T8352] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.981: error while reading EA inode 12 err=-117 [ 373.736393][ T722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.192006][ T8352] EXT4-fs (loop2): 1 orphan inode deleted [ 374.645704][ T8352] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 374.728864][ T722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.786015][ T8347] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.981: Directory hole found for htree leaf block 0 [ 374.922385][ T722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.041605][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 375.102529][ T722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.117897][ T8348] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.981: Directory hole found for htree leaf block 0 [ 375.603654][ T8376] loop0: detected capacity change from 0 to 64 [ 375.966575][ T8388] loop3: detected capacity change from 0 to 8 [ 376.068070][ T8388] squashfs image failed sanity check [ 376.472806][ T8374] chnl_net:caif_netlink_parms(): no params data found [ 376.840741][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.847810][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.931518][ T8374] device bridge_slave_0 entered promiscuous mode [ 376.999129][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.006454][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.016650][ T8415] loop3: detected capacity change from 0 to 512 [ 377.043333][ T8374] device bridge_slave_1 entered promiscuous mode [ 377.524005][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.198267][ T1075] Bluetooth: hci0: command 0x0409 tx timeout [ 378.240111][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 378.240124][ T26] audit: type=1326 audit(632.899:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 378.268588][ T8415] EXT4-fs (loop3): orphan cleanup on readonly fs [ 378.303279][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.318969][ T8415] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.994: bg 0: block 248: padding at end of block bitmap is not set [ 378.342461][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.348748][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.399707][ T8415] Quota error (device loop3): write_blk: dquota write failed [ 378.430298][ T8415] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 378.470223][ T8415] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.994: Failed to acquire dquot type 1 [ 378.485615][ T26] audit: type=1326 audit(632.899:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 378.582641][ T8415] EXT4-fs (loop3): 1 truncate cleaned up [ 378.588940][ T8415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.636252][ T8438] digital: digital_start_poll: Unknown protocol [ 378.715084][ T8415] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 378.758137][ T8429] IPv6: NLM_F_REPLACE set, but no existing node found! [ 378.834538][ T8374] team0: Port device team_slave_0 added [ 378.883306][ T8374] team0: Port device team_slave_1 added [ 378.889591][ T8415] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 378.983352][ T8415] Quota error (device loop3): find_block_dqentry: Quota for id 131072 referenced but not present [ 379.151111][ T8415] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131072 [ 379.196535][ T8415] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.994: Failed to acquire dquot type 1 [ 379.247132][ T8461] loop2: detected capacity change from 0 to 64 [ 379.306051][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 379.358026][ T8457] 9pnet: Unknown protocol version 9p200 [ 379.363454][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.377117][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.486343][ T8374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.620890][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.053056][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.135084][ T8374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.245038][ T722] device hsr_slave_0 left promiscuous mode [ 380.254654][ T722] device hsr_slave_1 left promiscuous mode [ 380.260426][ T3615] Bluetooth: hci0: command 0x041b tx timeout [ 380.272755][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.309975][ T722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.344877][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.363562][ T722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.381030][ T722] device bond1 left promiscuous mode [ 380.392098][ T722] bridge0: port 3(bond1) entered disabled state [ 380.416823][ T722] device bridge_slave_1 left promiscuous mode [ 380.427610][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.444478][ T722] device bridge_slave_0 left promiscuous mode [ 380.461014][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.502248][ T722] device veth1_macvtap left promiscuous mode [ 380.513927][ T8487] loop0: detected capacity change from 0 to 2048 [ 380.514279][ T722] device veth0_macvtap left promiscuous mode [ 380.539505][ T722] device veth1_vlan left promiscuous mode [ 380.556520][ T722] device veth0_vlan left promiscuous mode [ 380.606871][ T8487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.893905][ T722] bond1 (unregistering): Released all slaves [ 381.145548][ T722] team0 (unregistering): Port device team_slave_1 removed [ 381.183649][ T722] team0 (unregistering): Port device team_slave_0 removed [ 381.224523][ T722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.260390][ T722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.944417][ T722] bond0 (unregistering): Released all slaves [ 382.291655][ T8374] device hsr_slave_0 entered promiscuous mode [ 382.301840][ T8374] device hsr_slave_1 entered promiscuous mode [ 382.351797][ T1075] Bluetooth: hci0: command 0x040f tx timeout [ 382.880230][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 382.927819][ T8515] loop2: detected capacity change from 0 to 512 [ 383.193149][ T8515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=680ce01d, mo2=0003] [ 383.304300][ T8515] System zones: 1-12 [ 384.164871][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 384.217629][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.240547][ T8515] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1014: casefold flag without casefold feature [ 384.293170][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.313593][ T8515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1014: missing EA_INODE flag [ 384.326291][ T8533] fuse: Unknown parameter '' [ 384.355875][ T8515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1014: error while reading EA inode 12 err=-117 [ 384.360820][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.401541][ T8533] loop0: detected capacity change from 0 to 512 [ 384.420275][ T1075] Bluetooth: hci0: command 0x0419 tx timeout [ 384.499826][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 384.566019][ T8536] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.141895][ T8515] EXT4-fs (loop2): 1 orphan inode deleted [ 385.169195][ T8515] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,nombcache,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 385.210473][ T24] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 385.248791][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.278237][ T24] usb 4-1: config 0 descriptor?? [ 385.328187][ T8515] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1014: Directory hole found for htree leaf block 0 [ 385.341653][ T26] audit: type=1326 audit(640.009:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.400856][ T24] usb 4-1: can't set config #0, error -71 [ 385.465444][ T24] usb 4-1: USB disconnect, device number 10 [ 385.538324][ T26] audit: type=1326 audit(640.009:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.570420][ T8549] loop3: detected capacity change from 0 to 512 [ 385.600960][ T8549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 385.625942][ T8374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.657363][ T26] audit: type=1326 audit(640.009:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.695784][ T8374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.710662][ T8549] EXT4-fs (loop3): 1 truncate cleaned up [ 385.716349][ T8549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.748249][ T8374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.780531][ T26] audit: type=1326 audit(640.009:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.809400][ T26] audit: type=1326 audit(640.009:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.831509][ T26] audit: type=1326 audit(640.009:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.853745][ T26] audit: type=1326 audit(640.009:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.857786][ T8374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.875866][ T26] audit: type=1326 audit(640.009:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.875907][ T26] audit: type=1326 audit(640.009:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 385.875939][ T26] audit: type=1326 audit(640.009:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2f7edef9 code=0x7ffc0000 [ 387.206021][ T8566] loop3: detected capacity change from 0 to 256 [ 387.280304][ T8566] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 387.335654][ T8566] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 0) [ 387.371393][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.400705][ T8566] exFAT-fs (loop3): failed to load alloc-bitmap [ 387.407132][ T8566] exFAT-fs (loop3): failed to recognize exfat type [ 387.445840][ T8567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1024'. [ 387.457004][ T8374] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.486120][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.516150][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.588584][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.641284][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.778719][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.785815][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.531862][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.542432][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.553404][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.560532][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.608629][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.660788][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.701202][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.819939][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.837868][ T8595] hub 9-0:1.0: USB hub found [ 388.844996][ T8589] loop2: detected capacity change from 0 to 2048 [ 388.847451][ T8595] hub 9-0:1.0: 8 ports detected [ 388.877583][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.893919][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.915489][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.937631][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.961140][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.983989][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.008543][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.061566][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.106553][ T8589] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.126509][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.327392][ T4089] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 389.386162][ T4089] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 389.440291][ T4089] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.440291][ T4089] [ 389.496661][ T4089] EXT4-fs (loop2): Total free blocks count 0 [ 389.517714][ T4089] EXT4-fs (loop2): Free/Dirty block details [ 389.538010][ T4089] EXT4-fs (loop2): free_blocks=2415919104 [ 389.568270][ T4089] EXT4-fs (loop2): dirty_blocks=48 [ 389.760206][ T4089] EXT4-fs (loop2): Block reservation details [ 389.788850][ T8592] chnl_net:caif_netlink_parms(): no params data found [ 389.793478][ T4089] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 390.126319][ T8585] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 390.450259][ T3951] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 390.470316][ T8585] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 390.587043][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.612322][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.638110][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.830200][ T1075] Bluetooth: hci4: command 0x0409 tx timeout [ 390.882398][ T8640] loop2: detected capacity change from 0 to 512 [ 390.897787][ T8640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.926434][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.972828][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.021326][ T8640] EXT4-fs (loop2): 1 truncate cleaned up [ 391.039525][ T8640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.060382][ T8592] device bridge_slave_0 entered promiscuous mode [ 391.100632][ T3951] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 391.112316][ T3951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.130248][ T3951] usb 2-1: Product: syz [ 391.132399][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.141739][ T3951] usb 2-1: Manufacturer: syz [ 391.146521][ T3951] usb 2-1: SerialNumber: syz [ 391.162978][ T3951] usb 2-1: config 0 descriptor?? [ 391.211526][ T3951] usb 2-1: Found UVC 0.00 device syz (468c:90ea) [ 391.231031][ T3951] usb 2-1: No valid video chain found. [ 391.360063][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.390654][ T8592] device bridge_slave_1 entered promiscuous mode [ 393.257919][ T3666] Bluetooth: hci4: command 0x041b tx timeout [ 393.493467][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.573503][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.639558][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.752198][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.909480][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.925570][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.986800][ T8374] device veth0_vlan entered promiscuous mode [ 394.023483][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 394.055919][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 394.115842][ T24] usb 2-1: USB disconnect, device number 11 [ 394.175974][ T8374] device veth1_vlan entered promiscuous mode [ 394.244610][ T8592] team0: Port device team_slave_0 added [ 394.254881][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.312587][ T8592] team0: Port device team_slave_1 added [ 394.380875][ T8681] loop2: detected capacity change from 0 to 256 [ 394.471547][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.480407][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.568293][ T8592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.587376][ T8664] loop3: detected capacity change from 0 to 40427 [ 394.607228][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.616294][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.665940][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.682181][ T8664] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 394.696455][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.732289][ T8664] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 394.760120][ T8592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.786438][ T8374] device veth0_macvtap entered promiscuous mode [ 394.824051][ T8664] F2FS-fs (loop3): Found nat_bits in checkpoint [ 394.845007][ T8374] device veth1_macvtap entered promiscuous mode [ 394.917640][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.969751][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.970533][ T8664] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 394.988512][ T8664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 394.996885][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.007703][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.017898][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.030401][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.040739][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.051439][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.077557][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.110301][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.158234][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.216899][ T8592] device hsr_slave_0 entered promiscuous mode [ 395.260762][ T8592] device hsr_slave_1 entered promiscuous mode [ 395.263094][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.280548][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.296260][ T8592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.311811][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 395.312229][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.336116][ T8592] Cannot create hsr debugfs directory [ 395.336274][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.356230][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 395.380288][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.380311][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.389577][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.417033][ T7102] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 395.433400][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.458047][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.479753][ T8694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1038'. [ 395.563646][ T722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.616476][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.637888][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.660326][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.702131][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.712987][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.724208][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.740522][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.751255][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.761464][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.772166][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.796339][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.982133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.541512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.765174][ T722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.908432][ T8374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.925748][ T8374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.245824][ T1301] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 397.264633][ T8374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.286436][ T8374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.389877][ T1075] Bluetooth: hci4: command 0x0419 tx timeout [ 397.429071][ T722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.584791][ T722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.902639][ T1301] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 397.916256][ T1301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.939599][ T1301] usb 4-1: Product: syz [ 397.959877][ T1301] usb 4-1: Manufacturer: syz [ 397.980664][ T1301] usb 4-1: SerialNumber: syz [ 397.998787][ T1301] usb 4-1: config 0 descriptor?? [ 398.131431][ T1301] usb 4-1: selecting invalid altsetting 3 [ 398.138701][ T1301] comedi comedi0: could not set alternate setting 3 in high speed [ 398.163924][ T1301] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 398.164466][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.184004][ T1301] usbdux: probe of 4-1:0.0 failed with error -22 [ 398.230479][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.394615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.537163][ T8726] fuse: Bad value for 'fd' [ 398.558666][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.860694][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 398.860782][ T26] audit: type=1326 audit(653.279:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f161e067ef9 code=0x0 [ 399.373728][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.386825][ T8735] tmpfs: Unknown parameter 'usrquota' [ 399.399576][ T8726] fuse: Bad value for 'fd' [ 399.408435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.572905][ T3585] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 399.573745][ T8592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.626971][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1046'. [ 399.659563][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1046'. [ 399.721048][ T722] bond0: (slave vlan2): Releasing backup interface [ 399.799933][ T8592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.825905][ T8592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.882707][ T8592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.524774][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.666283][ T3951] usb 4-1: USB disconnect, device number 11 [ 400.720365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.741549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.777336][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.794467][ T8768] vivid-008: disconnect [ 400.906844][ T722] device hsr_slave_0 left promiscuous mode [ 400.918621][ T722] device hsr_slave_1 left promiscuous mode [ 400.930827][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.938374][ T722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.956379][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.964273][ T722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.015208][ T722] device bond1 left promiscuous mode [ 401.050312][ T722] bridge0: port 3(bond1) entered disabled state [ 401.221413][ T8767] vivid-008: reconnect [ 401.230678][ T722] device bridge_slave_1 left promiscuous mode [ 401.236887][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.272323][ T722] device bridge_slave_0 left promiscuous mode [ 401.278519][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.467060][ T8780] loop4: detected capacity change from 0 to 1024 [ 402.476408][ T3666] Bluetooth: hci2: command 0x0409 tx timeout [ 402.782992][ T8780] netlink: 'syz.4.1053': attribute type 20 has an invalid length. [ 403.146520][ T722] device veth1_macvtap left promiscuous mode [ 403.156448][ T722] device veth0_macvtap left promiscuous mode [ 403.176780][ T722] device veth1_vlan left promiscuous mode [ 403.183099][ T722] device veth0_vlan left promiscuous mode [ 403.453513][ T8795] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.477059][ T8795] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 403.633435][ T722] bond1 (unregistering): Released all slaves [ 403.964064][ T722] team0 (unregistering): Port device team_slave_1 removed [ 404.006716][ T722] team0 (unregistering): Port device team_slave_0 removed [ 404.036734][ T722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.082508][ T722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.183458][ T722] bond0 (unregistering): (slave team0): Releasing backup interface [ 404.229878][ T722] bond0 (unregistering): Released all slaves [ 404.471483][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 404.505018][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.510272][ T3953] Bluetooth: hci2: command 0x041b tx timeout [ 404.547192][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.570817][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.577888][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.616504][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.645967][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.664594][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.671713][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.704895][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.757438][ T8787] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 404.806134][ T8797] lo speed is unknown, defaulting to 1000 [ 404.835539][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.850050][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.875821][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.905295][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.931843][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.951132][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.971651][ T8797] lo speed is unknown, defaulting to 1000 [ 404.978953][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.013161][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 405.030959][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 405.077934][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1058'. [ 405.088691][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.098113][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.119429][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 405.138639][ T8797] lo speed is unknown, defaulting to 1000 [ 405.152098][ T8797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 405.157721][ T8592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.213003][ T8592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.220909][ T8797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 405.236078][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.248788][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.262210][ T8811] hsr0: VLAN not yet supported [ 405.440845][ T8797] lo speed is unknown, defaulting to 1000 [ 405.530476][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.605780][ T26] audit: type=1400 audit(660.259:403): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":proc/thrr/current" pid=8816 comm="syz.1.1060" [ 405.697382][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.705702][ T8812] loop4: detected capacity change from 0 to 8192 [ 405.898428][ T8748] device bridge_slave_0 entered promiscuous mode [ 405.934696][ T8797] lo speed is unknown, defaulting to 1000 [ 405.941227][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.948297][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.006636][ T8812] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 406.049327][ T8748] device bridge_slave_1 entered promiscuous mode [ 406.065462][ T8812] REISERFS (device loop4): using ordered data mode [ 406.074120][ T8797] lo speed is unknown, defaulting to 1000 [ 406.081564][ T8812] reiserfs: using flush barriers [ 406.087720][ T8812] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 406.096680][ T8825] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 406.105148][ T8812] REISERFS (device loop4): checking transaction log (loop4) [ 406.146798][ T8797] lo speed is unknown, defaulting to 1000 [ 406.187873][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.214680][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.220530][ T8797] lo speed is unknown, defaulting to 1000 [ 406.229350][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.259176][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.345556][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.363263][ T8797] lo speed is unknown, defaulting to 1000 [ 406.369889][ T8797] lo speed is unknown, defaulting to 1000 [ 406.441410][ T8797] lo speed is unknown, defaulting to 1000 [ 406.506881][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.533655][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.573446][ T8592] device veth0_vlan entered promiscuous mode [ 406.588727][ T8592] device veth1_vlan entered promiscuous mode [ 406.590223][ T24] Bluetooth: hci2: command 0x040f tx timeout [ 406.632051][ T8748] team0: Port device team_slave_0 added [ 406.640808][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.651605][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.683217][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.712807][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.764766][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.820698][ T8748] team0: Port device team_slave_1 added [ 406.951708][ T8592] device veth0_macvtap entered promiscuous mode [ 406.958803][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.979638][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.012919][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.019871][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.056800][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.152275][ T8845] Falling back ldisc for ttyS3. [ 407.362927][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.385602][ T8592] device veth1_macvtap entered promiscuous mode [ 407.410011][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.421314][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.517027][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.640483][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 408.414733][ T8748] device hsr_slave_0 entered promiscuous mode [ 408.630521][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 408.641188][ T8748] device hsr_slave_1 entered promiscuous mode [ 408.665476][ T8748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.673305][ T3953] Bluetooth: hci2: command 0x0419 tx timeout [ 408.699517][ T8748] Cannot create hsr debugfs directory [ 408.868878][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.920310][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 408.938495][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.968876][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.989268][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.006692][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.026952][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.040080][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.073681][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.084600][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.098710][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.110232][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.120599][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.131287][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.139226][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.149466][ T24] usb 5-1: Product: syz [ 409.154084][ T24] usb 5-1: Manufacturer: syz [ 409.158680][ T24] usb 5-1: SerialNumber: syz [ 409.179928][ T24] usb 5-1: config 0 descriptor?? [ 409.200999][ T8847] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 409.297995][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.321490][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.421809][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.468446][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.479816][ T13] usb 5-1: USB disconnect, device number 11 [ 409.500513][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.550277][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.576833][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.590374][ T8871] kAFS: No cell specified [ 409.607852][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.635649][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.657206][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.679593][ T8592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.706845][ T8592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.732099][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.753262][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.768352][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.881030][ T8592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.898374][ T8592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.948446][ T8592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.972048][ T8592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.158939][ T8748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.237883][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.273145][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.294726][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.303161][ T1301] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 410.323764][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.342946][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.373273][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.523718][ T8748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.570259][ T1301] usb 2-1: Using ep0 maxpacket: 32 [ 410.608841][ T8885] loop0: detected capacity change from 0 to 64 [ 410.667966][ T8748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.702287][ T1301] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 410.727405][ T1301] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 410.756890][ T1301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.797918][ T1301] usb 2-1: config 0 descriptor?? [ 410.820837][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 410.840559][ T8878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 410.854067][ T8748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.871703][ T1301] hub 2-1:0.0: bad descriptor, ignoring hub [ 410.877626][ T1301] hub: probe of 2-1:0.0 failed with error -5 [ 410.894821][ T8893] sctp: [Deprecated]: syz.3.1075 (pid 8893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.894821][ T8893] Use struct sctp_sack_info instead [ 410.920004][ T1301] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 411.143024][ T3953] Bluetooth: hci5: command 0x0406 tx timeout [ 411.189835][ T8748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.228958][ T8748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.253526][ T8748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.315948][ T8748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.551472][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.583030][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.665337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.720739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.786388][ T8898] netlink: 'syz.0.1076': attribute type 25 has an invalid length. [ 411.891976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.317878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.340896][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.348101][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.348863][ T8901] loop4: detected capacity change from 0 to 128 [ 412.369671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.378671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.388280][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.395387][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.421981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.451926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.465328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.476198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.485752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.494977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.621142][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 413.451194][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.715408][ T8916] gfs2: gfs2 mount does not exist [ 413.741235][ T3615] usb 2-1: USB disconnect, device number 12 [ 414.620915][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.635221][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.676518][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'. [ 414.694775][ T8748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.725423][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.761224][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.780055][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.889090][ T26] audit: type=1326 audit(669.549:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.4.1084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe96e64bef9 code=0x0 [ 415.250349][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 415.269846][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.290251][ T1301] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 415.295266][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.359021][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.387881][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.436326][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.457965][ T8954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.478068][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.498387][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.516615][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.523672][ T8939] loop1: detected capacity change from 0 to 32768 [ 415.528373][ T8748] device veth0_vlan entered promiscuous mode [ 415.550410][ T3953] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 415.590051][ T8748] device veth1_vlan entered promiscuous mode [ 415.641127][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 415.646088][ T8939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1085'. [ 415.656778][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 415.681422][ T8748] device veth0_macvtap entered promiscuous mode [ 415.692345][ T1301] usb 5-1: config 0 has no interfaces? [ 415.698394][ T1301] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 415.711801][ T8748] device veth1_macvtap entered promiscuous mode [ 415.720037][ T1301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.742095][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.753709][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.766178][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.777275][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.789441][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.810203][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.820678][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.821145][ T1301] usb 5-1: config 0 descriptor?? [ 415.831143][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.831167][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.831181][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.831200][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.831211][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.832617][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.836276][ T3953] usb 4-1: Using ep0 maxpacket: 32 [ 415.852707][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.914343][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.086790][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.122200][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.170574][ T3953] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.204397][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.238786][ T3953] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.275696][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.306794][ T3953] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 416.326581][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.337534][ T3953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.339538][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.356030][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.363784][ T8941] IPVS: set_ctl: invalid protocol: 44 10.1.1.4:0 [ 416.366886][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.382982][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.393538][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.404508][ T3953] hub 4-1:4.0: USB hub found [ 416.409525][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.476943][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 416.487461][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.496323][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 416.505341][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 416.514762][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.524708][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.533874][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.592676][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 416.617776][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 416.630017][ T8748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.646606][ T8748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.659652][ T8748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.692572][ T8748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.909310][ C1] eth0: bad gso: type: 1, size: 1408 [ 417.230637][ T8968] loop0: detected capacity change from 0 to 512 [ 417.250426][ T3953] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 417.288798][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.311365][ T3953] usb 4-1: USB disconnect, device number 12 [ 417.312247][ T8968] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 417.349303][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.395814][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.411135][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.426368][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.447605][ T8968] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1090: bad orphan inode 16 [ 417.447941][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.466179][ T8968] ext4_test_bit(bit=15, block=18) = 1 [ 417.472538][ T8968] is_bad_inode(inode)=0 [ 417.476809][ T8968] NEXT_ORPHAN(inode)=65535 [ 417.481752][ T8968] max_ino=32 [ 417.485558][ T8968] i_nlink=0 [ 417.489680][ T8968] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,minixdf,,errors=continue. Quota mode: writeback. [ 417.647026][ T8975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.762330][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 417.794809][ T3615] usb 5-1: USB disconnect, device number 12 [ 417.906455][ T8988] loop2: detected capacity change from 0 to 256 [ 417.999461][ T8988] FAT-fs (loop2): Directory bread(block 64) failed [ 418.027568][ T722] device hsr_slave_0 left promiscuous mode [ 418.034409][ T8988] FAT-fs (loop2): Directory bread(block 65) failed [ 418.045932][ T722] device hsr_slave_1 left promiscuous mode [ 418.053977][ T8988] FAT-fs (loop2): Directory bread(block 66) failed [ 418.073476][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.092367][ T8993] loop4: detected capacity change from 0 to 2048 [ 418.101402][ T722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.107138][ T8988] FAT-fs (loop2): Directory bread(block 67) failed [ 418.116307][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.160472][ T8988] FAT-fs (loop2): Directory bread(block 68) failed [ 418.179284][ T8993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.193187][ T722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.208271][ T722] device bridge_slave_1 left promiscuous mode [ 418.217348][ T8988] FAT-fs (loop2): Directory bread(block 69) failed [ 418.246367][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.270429][ T8988] FAT-fs (loop2): Directory bread(block 70) failed [ 418.279787][ T8988] FAT-fs (loop2): Directory bread(block 71) failed [ 418.287080][ T722] device bridge_slave_0 left promiscuous mode [ 418.293494][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.301081][ T8988] FAT-fs (loop2): Directory bread(block 72) failed [ 418.308255][ T8988] FAT-fs (loop2): Directory bread(block 73) failed [ 418.326410][ T722] device hsr_slave_0 left promiscuous mode [ 418.372110][ T722] device hsr_slave_1 left promiscuous mode [ 418.378811][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.392283][ T722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.402512][ T722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.424687][ T722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.439649][ T722] device bond1 left promiscuous mode [ 418.448222][ T722] bridge0: port 3(bond1) entered disabled state [ 418.459816][ T722] device bridge_slave_1 left promiscuous mode [ 418.462152][ T8998] ipt_ECN: cannot use operation on non-tcp rule [ 418.473009][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.499139][ T722] device bridge_slave_0 left promiscuous mode [ 418.506074][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.537128][ T722] device veth1_macvtap left promiscuous mode [ 418.545457][ T722] device veth0_macvtap left promiscuous mode [ 418.558131][ T722] device veth1_vlan left promiscuous mode [ 418.568852][ T722] device veth0_vlan left promiscuous mode [ 418.620893][ T722] device veth1_macvtap left promiscuous mode [ 418.640820][ T9000] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 418.662201][ T722] device veth0_macvtap left promiscuous mode [ 418.669492][ T722] device veth1_vlan left promiscuous mode [ 418.678675][ T722] device veth0_vlan left promiscuous mode [ 418.723014][ T26] audit: type=1804 audit(673.379:405): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1094" name="/newroot/2/bus/file1" dev="loop2" ino=1048717 res=1 errno=0 [ 418.835496][ T26] audit: type=1326 audit(673.489:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8985 comm="syz.2.1094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdcdfe7ef9 code=0x0 [ 418.856598][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.046883][ T26] audit: type=1326 audit(673.709:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.1.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f161e067ef9 code=0x0 [ 419.210857][ T26] audit: type=1107 audit(673.829:408): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yס' [ 419.274414][ T9007] syz.0.1099[9007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.274501][ T9007] syz.0.1099[9007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.620402][ T3952] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 439.830877][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.837191][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.260095][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 525.267060][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3780/1:b..l [ 525.275585][ C0] (detected by 0, t=10502 jiffies, g=42321, q=766) [ 525.282143][ C0] task:kworker/u4:8 state:R running task stack:21016 pid: 3780 ppid: 2 flags:0x00004000 [ 525.294124][ C0] Workqueue: bat_events batadv_nc_worker [ 525.299744][ C0] Call Trace: [ 525.303007][ C0] [ 525.305918][ C0] __schedule+0x12c4/0x45b0 [ 525.310400][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 525.315405][ C0] ? mark_lock+0x98/0x340 [ 525.319714][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 525.325667][ C0] ? release_firmware_map_entry+0x190/0x190 [ 525.331535][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 525.336792][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 525.341877][ C0] ? __cond_resched+0x20/0x20 [ 525.346531][ C0] irqentry_exit+0x53/0x80 [ 525.350920][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 525.356872][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 525.362910][ C0] Code: 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 48 f3 68 0c 48 89 de 5b e9 b7 f1 48 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d 14 0e 82 7e 65 8b 15 15 0e 82 7e 81 e2 00 01 ff 00 74 [ 525.382576][ C0] RSP: 0018:ffffc900031c7bf0 EFLAGS: 00000202 [ 525.388618][ C0] RAX: ffffffff8a106cf7 RBX: 0000000000000001 RCX: ffff888018ce8000 [ 525.396560][ C0] RDX: ffff888018ce8000 RSI: ffffffff8ad8f7a0 RDI: ffffffff8ad8f760 [ 525.404517][ C0] RBP: 0000000000000001 R08: ffffffff8a106ce5 R09: fffffbfff1f8e219 [ 525.412460][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000002e6 [ 525.420411][ C0] R13: dffffc0000000000 R14: ffff88807ddc0c80 R15: ffff88801f42c080 [ 525.428364][ C0] ? batadv_nc_worker+0x1c5/0x5b0 [ 525.433368][ C0] ? batadv_nc_worker+0x1d7/0x5b0 [ 525.438370][ C0] batadv_nc_worker+0x1d7/0x5b0 [ 525.443200][ C0] process_one_work+0x8a1/0x10c0 [ 525.448116][ C0] ? worker_detach_from_pool+0x260/0x260 [ 525.453719][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 525.459233][ C0] ? kthread_data+0x4e/0xc0 [ 525.463704][ C0] ? wq_worker_running+0x97/0x170 [ 525.468700][ C0] worker_thread+0xaca/0x1280 [ 525.473358][ C0] kthread+0x3f6/0x4f0 [ 525.477397][ C0] ? rcu_lock_release+0x20/0x20 [ 525.482217][ C0] ? kthread_blkcg+0xd0/0xd0 [ 525.486779][ C0] ret_from_fork+0x1f/0x30 [ 525.491174][ C0] [ 525.494163][ C0] rcu: rcu_preempt kthread starved for 10383 jiffies! g42321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 525.505319][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 525.515253][ C0] rcu: RCU grace-period kthread stack dump: [ 525.521110][ C0] task:rcu_preempt state:R running task stack:26040 pid: 15 ppid: 2 flags:0x00004000 [ 525.531850][ C0] Call Trace: [ 525.535102][ C0] [ 525.538009][ C0] __schedule+0x12c4/0x45b0 [ 525.542486][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 525.548455][ C0] ? release_firmware_map_entry+0x190/0x190 [ 525.554316][ C0] ? mod_timer_pending+0x20/0x20 [ 525.559224][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 525.564568][ C0] schedule+0x11b/0x1f0 [ 525.568699][ C0] schedule_timeout+0x1b9/0x300 [ 525.573522][ C0] ? console_conditional_schedule+0x40/0x40 [ 525.579396][ C0] ? update_process_times+0x200/0x200 [ 525.584742][ C0] ? prepare_to_swait_event+0x321/0x340 [ 525.590261][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 525.595084][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 525.600254][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 525.606377][ C0] ? rcu_gp_init+0xdae/0x1140 [ 525.611028][ C0] ? rcu_gp_init+0x1140/0x1140 [ 525.615764][ C0] ? finish_swait+0xc5/0x1d0 [ 525.620326][ C0] rcu_gp_kthread+0xa4/0x360 [ 525.624889][ C0] ? _raw_spin_unlock+0x40/0x40 [ 525.629714][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 525.634794][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 525.640660][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 525.645661][ C0] kthread+0x3f6/0x4f0 [ 525.649700][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 525.654800][ C0] ? kthread_blkcg+0xd0/0xd0 [ 525.659363][ C0] ret_from_fork+0x1f/0x30 [ 525.663761][ C0] [ 525.666759][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 525.673048][ C0] Sending NMI from CPU 0 to CPUs 1: [ 525.678249][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340