last executing test programs: 21.424672259s ago: executing program 4 (id=1376): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000050000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000001800000004000180"], 0x18}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}], 0x10}) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d0f, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 20.532505654s ago: executing program 4 (id=1378): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r0 = socket(0x18, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x800, 0xfffffffffffff005}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r6 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f803000000440002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) setresuid(0x0, r5, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) readv(r4, &(0x7f00000000c0), 0x0) unshare(0x20020400) r9 = gettid() r10 = epoll_create1(0x0) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000200)) finit_module(0xffffffffffffffff, 0x0, 0x0) tkill(r9, 0x7) fchmod(r8, 0x504) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) 19.498378232s ago: executing program 4 (id=1380): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044103, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x0, "a099c0f51ac457a0b8ae219ee49ead58e9df11", 0x0, 0xfffffffa}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x801, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x80, 0x0, 0xa, 0x6}, 0x10) ioperm(0x0, 0x10, 0x20) keyctl$KEYCTL_WATCH_KEY(0x5, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() ioctl$int_in(r0, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r0, 0x0, 0x0) 16.104071501s ago: executing program 4 (id=1388): pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) sendto$unix(r4, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffe33) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000100)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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") 11.802429267s ago: executing program 4 (id=1392): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5f60, &(0x7f0000009040)="$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") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) unshare(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x41045508, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r6, r7, 0x6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chdir(&(0x7f00000003c0)='./bus\x00') 11.713039945s ago: executing program 3 (id=1394): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2882) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}}}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000000008"], 0x878) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffa1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x49, 0x206, 0x1ff, 0x5, r8}, 0x10) 10.717835329s ago: executing program 3 (id=1396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/221, 0x26, 0xdd, 0x1}, 0x20) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000000)={0xfffffffd, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/104, 0x68}}, 0x10) r5 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x4000) ioctl$NBD_DO_IT(r5, 0xab03) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="040000000000000003000000000000000200000000000000", @ANYRES32=r6, @ANYBLOB="00000000000400"/28, @ANYRES32=r6, @ANYBLOB="00000000000000000088c25bf179efc08c0000"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0x541b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0xfffffffffffffeb3, 0x0, 0x0}) openat$cachefiles(0xffffff9c, &(0x7f0000000300), 0x10000, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x50, 0xfe67, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/166, 0x0, 0x0, 0x16}, @fd={0x66642a85, 0x0, r9}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000380)={0x0, 0x1c, 0x34}}, 0x10c0}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x160a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) 9.982225731s ago: executing program 3 (id=1397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x1697, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10, 0x0, 0x100000}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000e40)=[{&(0x7f0000000600)="b1aab94962b4bb5c32eec086cf8f84e80ab0a593bd599d984d77deeb1d16fe67085845b6201bb038a92ad10ae70172abeef4aa6a4552726711bbf7fce3dafb8dcaa77d85418cb06e89cc553db082fe79917b765cf31d2343b55e954ef50c24d29da42866a54cd83bd9b9ef38c4046c480b1f3f580048438545acadd6bdfb1457358e961b32b380c6a00ff00b7e3aa815470ee33f5dade2c1e9effb481fc96c7c8a9e5b36ef793d1ae92e0c110fb52a8dd20333573afc", 0xb6}, {&(0x7f0000000100)="b4641fce5c576c932c59145bf9fe778f066d90892927e3458ec29f9021bcafa5", 0x20}, {&(0x7f00000007c0)="9dc6067ead76edacf82e416258dcf63423c06e786885e60960fdd7c7153c10fac87597434d212a5077777db93f7707819f889fdacf6d9a40ed41b1b425723a3b2074d6f424376c73bd417948ae697426cbf9eb1187d44d2d63690001c99e66dbd2796dc691d9617cb989f3a50412874f4dc3f613942f3f0fc1814516ad3f41d3d70da1d6fb8dd5701f4e7e18fbf4fb1c97e76e6a5e06a4eaedff601470ede79b8d8ea6da70b091ab982c10c1a70398d2c6e5f9fdea815ad0a8251a48aeb1a5d46897f67f9d5a5dd11c94fb2a32091e4f42c188dcba8ae050ee66ff347c79d9", 0xdf}, {&(0x7f0000000440)}, {&(0x7f00000008c0)="3b2d230bf996331baabb13011a972eab5c8617a9f000a193a34b97d0e0ede6106ef17f4c550e28899e5b645f5d8310b7cba80674d6e3ca3c72c266394d8efef82a615aea7fe67bca0892f52e744bfc177330ae6113aa12bd8b3803f6b6f6099b5793397667f47bc2bf701456f2ada371af6fd61f623d64a01a6a8b0a6692c70735899148db64459c8eca97ab8dae68bb5a8b650e2078cd4a3abcaa77c0ff6e6de86dfbb681531c17e70aa59dc78c79bf2c520142988b3e37222b0f9f1833c177288f8fd42a8207e5bf2c547489b2e50f6d7a8486cf4d75ee19454aca012b6c49e90d8c1d73f4deebd0804cf7f235686f8bc5a0e69bacd0a5", 0xf8}, {&(0x7f0000000c80)="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", 0x18e}, {&(0x7f00000009c0)="d21b52196f698cc0dfdc8cc03a97c0ddaf10959f7fd15a05db03147932185c12ebdc378c05477a1080feae874ee8", 0x2e}, {0x0}, {&(0x7f00000001c0)="39845d5afbb0c29e26e617d430d6562574b45c8416f9f46b89108a287eec2f0d5d89678fc240b53da40aa81e82049138a6a8136730991548c1f5", 0x3a}, {&(0x7f0000000b00)="2f41035a6ea0402a8a5a0eb0d428576172d8edd45d0f6b3eb61a2272b11b2908ed2e3f0148b336a0472c93c027ad62b1a5cdeb01aa267e3433c873da6b2fbbb90a14c7f5340b73474150ff91e02ec0da692cd5daefa327a9d0326933a61211c3cca1d2f637b1f1aae1f227c2fa4b43072d1006f9e494318060570bce0c80cd0c1db30b04ab1966e7f20c4bf73547c5d9182598001b9429d08860ff6000408dd538eef36de90875c5959c5e4af2e1dfe102770f46dde278dc160c05f8", 0xbc}, {&(0x7f0000002700)="31798ad258ae87962d5c598f47b020c9a4edb0fb8069f8ecd578461f70075602a1e1ccd64c3b36dfaa51e34f3667cd579b6cd86b6305266bf63000b052db5641846e585e14b9adeba2cac4de331a8ec144233ab5109952eebd76c3258b8a4a196dbda072235d94aafa74e7cd684d16e61bc72ff4cdd8e9b8f80693f5b6e2842a68b622034bdc11da4c58c9287029fa71ce79ba7e60a1ee240601a9fa9c32dd9efa9d345e0b665f1a3dd677049165142691407c9ad188b8ae62630759c277b43245962d0919d86e58479044f617c99e9f76e916519ab3cf91c96820a7c06efe44f02c8f39942739ef371f08dddd3f3cab8af275cf5369948e9cd07e41df38c7226fd95afff7ca9b0032558e79f10e92bcb948b8acbbdb236478f3a0ebad7e9c04fc2a088a07f6f845e786290d4ab34fcc98ea0f054a310ee3f4e148c0653a6c5423f4dea51eea4e9ff05695728823b56f587fda32899b7bcb8e17ef024de19473841164a26549382bedb0520a54e0c87a40761edaffdc89b15a8137752f8f2dc9b372633fe52e5ad377585add6bc9a618189af501c1935732cef822af10205d5adee1b75d999e6dba06386570496a5c92115cba980f213054a1b333f70ef6b2d038d1024fd9701ad74f4ccff2a8a51a913d234909005ffbf6990e010df0480a422105574b56b6450ba527a608927d8abb76d728b0bcccec33502fab7475c30a0bad1a7ed2e0e6076aa62676c5d709de37ce007bac3cd97e69daece5180a0ec0d7fc4fb61d4357bb1b5852ad4f07db40b1661de031c19cd5165623ed18797e9eb6c432c576e5672948bfa32d885d71c09c971f9053cc4012d743ff100893361de6e9e25233e01032a927e7a736b26eab3960350de40c5d350da434cfc311abe2695c0d4d6b1536bc33033dd16dddfde6c8368bddc7450c9a50047808acb9c20a2b8670f909ba6f7ff9fd93d656c99fe1a27e1897c8f7ec8d2b30ca5df0fa9384ca4fb1cfdef5a4cb2ac889819b4424ddce9868c5d028c22812dee24285d52dcf8247602694e5113a474e63377137eab9d8bbdc83b7ec44da4b0d4e21423b701b8558ab3633161be62a09c8333cd98ae99b4b29b44f5b98956acead80383c8b3c23cefc0a9585aa32c5fa1fe3fde2a8ad36c112a050d113e9848479fa6dbe061f31def6577559fa8c0c355e00ca58b62a28a8390118e07af5c5193ee50dc125932f76f21f871e6841452dd278011626f2d62fa28f0d0f0375ab9cc7d254b54f73a86469c014db04a31d94ce421a7661777b546c12989c2419b1154bfd37a8495109bd1531fcb294ac8ba699eb91d06f3263ab61a382a5363a0e11ec9524385e1266b3e2bbfc112f187bdb83d4b2d1c30ec5416d8bcebb7f5525ac00feb02b72ee9040fba8abff82969f6b39c0ae4e7c45e81d3c61e8283c44094071124791954598ba733a1d555afee18473be6bac98022ce113434554476f88dd3dbf41338c5a226c4e798dbf7670e4b69da029dd571d794718050af581a0cbd4fb2dd345eceacf3c185df706161e8eab2a818ceb49c1960906a61341462ddd3be1d3768e62c1d842270ce2ffe7e49beb8f04bc169f5c622ff19f5b619cd11c3113eb8210d7fdee25e5bfd365ca1fcdfd4a17da30f600dac5449a81b1b01af94181e6bb9814183cad19e2f7ffc56cd95442d35ba868e6e9294d68fd3dc56cef8ab7a27fc7ee561b46fd948393d8df61f5b8234793e397739cc0c7c759473dbcafab46e65db42d6ad28ed8a10477b359627e6ddbad113a241c1ec3edb89ad39a1873e5797058a8cc5916461c57a836419c16c7dce67337c3b1513b320ae2862eabe163b9ff306252deb1f239e91f7138125ed90466105bf28a321fa150e8884ec6f9227656add965d96eaceb1c30c9ef2e0b6d65bdffc5a6acc0cf4a3be1612cddcd6cbdfc07ce1a413f39bd2e287037a56e1dad0078fd0d01f677687a9452b2496cc8404852c32b5e3a8724069361cb3c1410cd2bbd0ebe01c63690e64e4ea346f7b8d5e05027ded11cbaf37b3dbc5057424c3e72c33dc176af31c272f58b8517395094803c985ddc49d587657e0a9ac103b9b9a5b9c485bed50ba38708837c29c80dd897078cfbdd5cd5a2cbfc65d28af1c5bd48d52f81d6e42775c51d28c8a460b51625ff1bf7394d1a758164257a330305b6e9a3bb532dfc99eb5391b6472e323b003bf9daeaa66c4d4d62225d61b28094347d0df6a4c06a7fadb83f441e38110f047654a19bee32de1f24e687f38786a771f39b95f6a23b56d528603909604152fffa03977f19e7de25a539c3e59f9c381955ff33b02d85858d049eb04e7565b0503a5a9a6a5c7b8437deea78094fe995a59865cc0a4364447ca6a65e36c769e855ba158d4ad65fbd3da604ddfacec884a31ea1e631e5782ffb39a91af8312bb8dba1349b7fe8839131aa569077151bf66634dd9ec84f7ba43623379b3cadac86c990a2a8ea6b7da8716da7d580c640a23ece98e1514077dd8652e6f5a65471ad5ed16011dd9ab8dc273a32f67d0b78bb5d7e0ce94544a24b573aee53b032d582cca53fbf0251c1802cc333f3ac00517acfe3d26d76ab6d33a795a0de0d0df866f1e8aa78c833990b84246b98a79ca6ecbd16b079bdbab12096b9f780a0676d0018c99b68ee0de858ad7d5ea2d620281e397231c648d15419e8082b686fc70355384ab85112611fbe6fac76d6c2ad4e691761954d259d7c1cd51f67393e027260eb5271cba578f04f60ac6f958d4135cea55480bc390ba5aaf81f0831bac73a8581aaedbb28701e355e23aae0c0674fd8b8539e419d765feb0cc5fc09d9e3dd5c3fb9f708fd02d6a0aac98503d751bd7ab1879e60aab0a20e8ec0bc4a1c787f15828ef677b26efa6b59c30f374de8a1af1f220f21888ccc7b4e1cc5b80eb65b0d3c9a1769c58e1929b0d6448814b4eb8f278669c47dd75d64073546af1c740d2a11d670ce4ad3810ffea3fa7269fed3b6afc6182c4fac5a0ed1a14d333d0752bc12bc31a8b30ad527a2fadf71b4a46c24e9bb85ef95eba7d3ab3e34a6d0085b2859324c1c6cb41fa27b0a668d1aef5b37d245405c117ce0cc76aef1950fd4bc53e06c02313b587b9b40bba75bc1c5a9e35387e8686de1cfc577c1e678f5cf9434c9a9ecffd520e9cb5032e2eed056ff53db80de9de9adf5ac3afcd4f8562517a01313ee099e18fb97c9f63d0659c37883f4a585024c614653465128bbcb40391335c715e937096edfb4939db619e4fc22342475275c2a9df6a502de086879a07c5053bd8e0a0b1efd25a5ac3ccd29adc2411938dfb84032504de8718135c13ab51fca2f5330fa80ced2ae0bc7765c164cf9a9b7c10fc1b10762e599a1c6daab328810d8f5c7078981490498ca3fb6c3b03b1ea576ed55552c61904d90a48a2639c9297a8840576bd497de31e0a622822b0c2b9fc3c7dae8c6371be9739b13564d207dbe088fab8864f1e1479932b5c1796991e5bfebec791155383c47c22fc6c1adefefd77655397c43d664bc981eedcda6fa6f35d12a39d1d47c9b51b5d3ac379e93d2f0fe086b6459b1d397a5a58f2f01a86014a71a34d0b631307c08cb2464d666702b7b3cb0a7ffb5e7b6fd000fdf68b5834ef4ddb467ffbcc5587d536a7dcc22e09d987a60fc194fe39e6fb85259cfef955b046af62ac222ae8620ab86ec7c392236e28ee1dd19d2eb48d2f33bec3dbe2bd904d2080f8e8ef9273ff57299daef206a2f0a2d0acb721ce789678acb54973260829383d89d0ebca7819ac4004a52886b04067f0603a61862448f194ebf33eef75f9ebc7309de8e4e55b44c94017cfae99648eae76a328e53726fc9051439a90db5eab959063e1584a08472d3369b3998cac0131b0b34aaf1eb2f54b07d33de85c21e29e4bb787c34c5f4464600f316dce9f0cdb5dc3a09b541110b7e7ddeefe46cdfd5e2134a47e26b62f8709b04d99c6d22b6758c5d8cf242b2ae78ebbecfdd0c4a012869e52ddd859134d88854b4596fdda8049ae1aa95ae7da745fdaabfc94b8e269bf9ee4839c48758656dbef933730001c0210028074a982e7a92023b6e9729e1272f428eb6890b0671b352a862e373b1bda22c44130c3b18a7be50177d95cd00d20da97a85602ae4db1f12253c6ca091a87d4a4b8ad12e5d061a833240ab3757ccef74274e247f453918ef871ef2e06c8e2214a505aa6b00453eb93e0aab47504dcc04d3542d1ea15116ed2e70153e6b025d9f08543b6434adf2dc1126ee20ed75ab59c54e7b12681ed9f7bb1fdd2df2c0c3ed582356471f5372a0b7deb7d2b604d1c5aea5c9975f2cfc3ce67f8f", 0xc00}], 0xb) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 8.445767052s ago: executing program 4 (id=1401): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000a000000001000000000000048000200656362286369706865725f6e756c6c2900"/210], 0x144}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") sync() openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0x4702, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) userfaultfd(0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1e, 0x4, 0x6, 0x504, 0x2400}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r6}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.444548782s ago: executing program 1 (id=1402): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "d53121bc4b58a404"}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001740)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, @in6=@private2}, 0x0, 0x2391}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x130, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x815b86d9523669bb}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x221, 0xc0, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:insmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000000000000000000009b1ed0a72daf3b844c00f900fffa0000"], 0x20}}], 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x5}, 0xe) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) ppoll(&(0x7f0000000000)=[{r4}], 0x1, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 8.128796919s ago: executing program 1 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x2, 0x3, 0x0, 0x0, 0x0, @in=@empty, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x800, @private}}]}, 0x80}}, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, 0x0, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r6, 0x2000000, 0x29, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0x5}, 0x48) r8 = getpgid(r1) wait4(r8, 0x0, 0x20000008, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r9, 0x4, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="04f8e222bed2683682011ec02c002cf4801407745a5851d8c02ee5895aca8b48e0b0ce736d65b5774e40c8f2089a2e79a74e77ae95fdf93f8fa157553fe3046d2336c5fb307909a274990bef9c9ac3e12f3d7f10a2a0a66722a136c5f697a839f990b43242904260a03781c501587990033f1139280bd3fbd6b57e01b73806adad36949173e7dd757e830044fd35672913f4f0ddfa025172844c44c012c471ac", &(0x7f0000000240)}}, 0x0) 7.842163603s ago: executing program 0 (id=1404): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x81) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8c}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x90) 6.313437263s ago: executing program 1 (id=1406): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2882) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}}}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000000008"], 0x878) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002040), 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffa1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x49, 0x206, 0x1ff, 0x5, r8}, 0x10) 6.205034222s ago: executing program 0 (id=1407): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000050000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000001800000004000180"], 0x18}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}], 0x10}) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1b, &(0x7f0000001540)="$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") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d0f, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5.597494034s ago: executing program 3 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30002090}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0), 0x12) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x8, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 5.389697762s ago: executing program 1 (id=1409): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265"], 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000a01010000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 4.530316715s ago: executing program 1 (id=1410): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xfff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000313000/0x1000)=nil, 0x0) mlockall(0x4) r2 = shmat(r1, &(0x7f00003cc000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x3000, 0x4, &(0x7f000008b000/0x3000)=nil) shmat(r1, &(0x7f00002be000/0x10000)=nil, 0x4000) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/16) shmat(r1, &(0x7f00000f5000/0x4000)=nil, 0x4000) mlockall(0x6) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) shmat(0x0, &(0x7f000024d000/0x4000)=nil, 0x7000) mlockall(0x0) shmdt(r2) shmat(0x0, &(0x7f00003b7000/0x1000)=nil, 0x0) mlockall(0x7) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000069000/0x3000)=nil) shmctl$SHM_LOCK(0x0, 0xb) mlockall(0x5) shmat(0x0, &(0x7f0000259000/0x1000)=nil, 0x4000) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mlockall(0x2) shmget$private(0x0, 0xa000, 0x10, &(0x7f0000294000/0xa000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlockall(0x7) 4.421771004s ago: executing program 2 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$peek(0x1, r0, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) r7 = fcntl$dupfd(r3, 0x0, r6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r7, 0x0) syz_io_uring_setup(0x1750, &(0x7f0000001480), &(0x7f0000001500), &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000080), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.338772661s ago: executing program 3 (id=1412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000080)=""/42, 0xffffff9b) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x6a, 0x10}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000880)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0xf05, "ff80ee00800100d469ef4bea22a3040000000000000000004f9700"}) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x4, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x539d, 0x0, 0x0, 0x0, 0xffffffffffffff4a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000280)={0x11, 0x9, [@empty, @dev, @dev, @random="05d24a94c20c", @link_local, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @local, @broadcast]}) 3.385912352s ago: executing program 2 (id=1413): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="185fb7b3bb8ba7625d46a7000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x2c, r2, 0x101, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x42}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}]}, 0xb0}}, 0x0) 2.487851478s ago: executing program 2 (id=1414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002c8, &(0x7f00000008c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000600), 0x0, 0x39, &(0x7f0000000700)=[{}], 0x19, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x7, 0x6a, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x125f, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xf9, 0x0, 0x0, 0x0}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r9, 0x8800000) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x12, r9, 0x8000000) syz_io_uring_setup(0x3b, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x2000)=nil, 0x2000}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ff3000/0x3000)=nil) mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_split\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r12 = syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000002b80)='./file0\x00', 0x1000840, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x1cc, &(0x7f0000000400)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x6229af203e22bc3e, &(0x7f0000000900)=ANY=[@ANYRES16, @ANYRES8, @ANYRESOCT=r2, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES32, @ANYRES8=r1, @ANYRESOCT=r8], 0x0, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x40049366, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 2.284857135s ago: executing program 0 (id=1415): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000050000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x30) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000001800000004000180"], 0x18}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}], 0x10}) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1b, &(0x7f0000001540)="$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") clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d0f, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 2.281818195s ago: executing program 1 (id=1416): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000300)='./bus\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) 1.788994468s ago: executing program 2 (id=1417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast1, @in6=@dev}}]}, 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000080)=0x4, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x138, 0x4c, 0x1a, 0x138, 0x73, 0x208, 0x258, 0x258, 0x208, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg2\x00', 'pim6reg0\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1000000, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @loopback, [], [], 'nr0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) socket(0x3, 0x5, 0xffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@empty}, {}, {}]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x2800, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) 1.318993047s ago: executing program 2 (id=1418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x1697, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10, 0x0, 0x100000}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000e40)=[{&(0x7f0000000600)="b1aab94962b4bb5c32eec086cf8f84e80ab0a593bd599d984d77deeb1d16fe67085845b6201bb038a92ad10ae70172abeef4aa6a4552726711bbf7fce3dafb8dcaa77d85418cb06e89cc553db082fe79917b765cf31d2343b55e954ef50c24d29da42866a54cd83bd9b9ef38c4046c480b1f3f580048438545acadd6bdfb1457358e961b32b380c6a00ff00b7e3aa815470ee33f5dade2c1e9effb481fc96c7c8a9e5b36ef793d1ae92e0c110fb52a8dd20333573afc", 0xb6}, {&(0x7f0000000100)="b4641fce5c576c932c59145bf9fe778f066d90892927e3458ec29f9021bcafa5", 0x20}, {&(0x7f00000007c0)="9dc6067ead76edacf82e416258dcf63423c06e786885e60960fdd7c7153c10fac87597434d212a5077777db93f7707819f889fdacf6d9a40ed41b1b425723a3b2074d6f424376c73bd417948ae697426cbf9eb1187d44d2d63690001c99e66dbd2796dc691d9617cb989f3a50412874f4dc3f613942f3f0fc1814516ad3f41d3d70da1d6fb8dd5701f4e7e18fbf4fb1c97e76e6a5e06a4eaedff601470ede79b8d8ea6da70b091ab982c10c1a70398d2c6e5f9fdea815ad0a8251a48aeb1a5d46897f67f9d5a5dd11c94fb2a32091e4f42c188dcba8ae050ee66ff347c79d92ea21b4a9a598fe5d0b8032bd96b1a13", 0xef}, {&(0x7f0000000440)}, {&(0x7f00000008c0)="3b2d230bf996331baabb13011a972eab5c8617a9f000a193a34b97d0e0ede6106ef17f4c550e28899e5b645f5d8310b7cba80674d6e3ca3c72c266394d8efef82a615aea7fe67bca0892f52e744bfc177330ae6113aa12bd8b3803f6b6f6099b5793397667f47bc2bf701456f2ada371af6fd61f623d64a01a6a8b0a6692c70735899148db64459c8eca97ab8dae68bb5a8b650e2078cd4a3abcaa77c0ff6e6de86dfbb681531c17e70aa59dc78c79bf2c520142988b3e37222b0f9f1833c177288f8fd42a8207e5bf2c547489b2e50f6d7a8486cf4d75ee19454aca012b6c49e90d8c1d73f4deebd0804cf7f235686f8bc5a0e69bacd0a5", 0xf8}, {&(0x7f0000000c80)="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", 0x18e}, {&(0x7f00000009c0)="d21b52196f698cc0dfdc8cc03a97c0ddaf10959f7fd15a05db03147932185c12ebdc378c05477a1080feae874ee8", 0x2e}, {0x0}, {&(0x7f00000001c0)="39845d5afbb0c29e26e617d430d6562574b45c8416f9f46b89108a287eec2f0d5d89678fc240b53da40aa81e82049138a6a8136730991548c1f5", 0x3a}, {&(0x7f0000000b00)="2f41035a6ea0402a8a5a0eb0d428576172d8edd45d0f6b3eb61a2272b11b2908ed2e3f0148b336a0472c93c027ad62b1a5cdeb01aa267e3433c873da6b2fbbb90a14c7f5340b73474150ff91e02ec0da692cd5daefa327a9d0326933a61211c3cca1d2f637b1f1aae1f227c2fa4b43072d1006f9e494318060570bce0c80cd0c1db30b04ab1966e7f20c4bf73547c5d9182598001b9429d08860ff6000408dd538eef36de90875c5959c5e4af2e1dfe102770f46dde278dc160c05f8", 0xbc}, {&(0x7f0000002700)="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", 0xc00}], 0xb) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.221224276s ago: executing program 0 (id=1419): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2882) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}}}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000000008"], 0x878) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002040), 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffa1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x49, 0x206, 0x1ff, 0x5, r8}, 0x10) 230.011251ms ago: executing program 0 (id=1420): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265"], 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000a01010000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 55.814505ms ago: executing program 2 (id=1421): epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920b", 0x57}]) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x2, 'sed\x00', 0x0, 0x0, 0x1c}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8e001) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x100000100000000, 0x12}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000711211000000000095d34525159870b973c3"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1e}, 0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20048040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="003000000003000000000000000300000d0000000200000000020000000100000002000000000000000d000000000000000000000500000000006100"], 0x0, 0x4b, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setitimer(0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") 28.442807ms ago: executing program 3 (id=1422): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, 0x0, &(0x7f0000000000)) r2 = io_uring_setup(0x7fdb, &(0x7f00000003c0)) r3 = socket(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendto$inet(r0, &(0x7f0000000240)="4f1adb64a8b6b99ae9363f56e22eb6f402e6d44d08fce1f3008fcf0befb0f5a8f0c18cb413aab4c7d94a5badb53d135c48d20e0159a6607b63aa0f", 0x3b, 0xed64180853bd8d93, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040), 0x0) prctl$PR_CAPBSET_READ(0x17, 0xcf) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r5, &(0x7f0000000580)='\x00', 0x1, 0x600000000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r6, 0x8002007ffb) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) listen(r4, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa8}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 0s ago: executing program 0 (id=1423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000bb81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000340)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hrtimer_start\x00', r0}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0x9, 0x8, 0x0) mbind(&(0x7f0000403000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = eventfd2(0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = dup3(r7, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r10, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_j1939(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="92", 0x1}}, 0x0) io_uring_setup(0x6f17, &(0x7f0000000180)={0x0, 0xfffffffe, 0x10, 0x0, 0x45, 0x0, r8}) close_range(r6, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x1a, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 476.427414][ T8978] loop2: detected capacity change from 0 to 2048 [ 476.559162][ T8978] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 476.570526][ T8978] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 476.611884][ T8978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.719720][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 476.825870][ T7901] Bluetooth: hci3: command 0x0409 tx timeout [ 477.191398][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.203330][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.243113][ T8957] device bridge_slave_0 entered promiscuous mode [ 477.315173][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.344553][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.374223][ T8957] device bridge_slave_1 entered promiscuous mode [ 477.539984][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.620967][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.772544][ T9001] binder: BINDER_SET_CONTEXT_MGR already set [ 477.841782][ T9001] binder: 8999:9001 ioctl 4018620d 20000040 returned -16 [ 477.876056][ T8957] team0: Port device team_slave_0 added [ 477.912629][ T8957] team0: Port device team_slave_1 added [ 478.019658][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 478.035893][ T9008] loop2: detected capacity change from 0 to 512 [ 478.129073][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.173352][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.219105][ T9008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 478.273273][ T9008] EXT4-fs (loop2): 1 truncate cleaned up [ 478.280687][ T9008] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 478.284268][ T8957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.425561][ T9008] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.461304][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.481556][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.518583][ T8957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.558612][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 478.558629][ T26] audit: type=1800 audit(1724802087.607:3140): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1128" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 478.725790][ T3765] device hsr_slave_0 left promiscuous mode [ 478.779661][ T3765] device hsr_slave_1 left promiscuous mode [ 478.801307][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 478.827689][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.839709][ T9020] loop0: detected capacity change from 0 to 512 [ 478.864147][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.884787][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.904171][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.914359][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 478.941050][ T9020] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 478.958119][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 478.958520][ T3765] device bridge_slave_1 left promiscuous mode [ 478.979116][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.981396][ T9020] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 479.003530][ T3765] device bridge_slave_0 left promiscuous mode [ 479.006665][ T9022] loop1: detected capacity change from 0 to 512 [ 479.018197][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.020379][ T9020] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 479.042475][ T3765] device veth0_macvtap left promiscuous mode [ 479.054403][ T3765] device veth1_vlan left promiscuous mode [ 479.061207][ T3765] device veth0_vlan left promiscuous mode [ 479.064539][ T3610] Bluetooth: hci2: command 0x0409 tx timeout [ 479.131947][ T9022] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.167248][ T9022] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 479.227341][ T9022] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 479.259692][ T9024] loop2: detected capacity change from 0 to 256 [ 479.275326][ T26] audit: type=1326 audit(1724802088.317:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.392933][ T9025] loop0: detected capacity change from 0 to 2048 [ 479.395818][ T9024] exfat: Bad value for 'gid' [ 479.421744][ T26] audit: type=1326 audit(1724802088.467:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 479.457494][ T26] audit: type=1326 audit(1724802088.497:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 479.526359][ T9024] loop2: detected capacity change from 0 to 764 [ 479.610561][ T9030] loop1: detected capacity change from 0 to 2048 [ 479.674625][ T26] audit: type=1326 audit(1724802088.727:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.700279][ T26] audit: type=1326 audit(1724802088.727:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.736988][ T26] audit: type=1326 audit(1724802088.727:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.759835][ T26] audit: type=1326 audit(1724802088.727:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.782316][ T26] audit: type=1326 audit(1724802088.727:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.805534][ T26] audit: type=1326 audit(1724802088.727:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 479.972919][ T3765] team0 (unregistering): Port device team_slave_1 removed [ 480.021614][ T3765] team0 (unregistering): Port device team_slave_0 removed [ 480.076755][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.132353][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.289722][ T3765] bond0 (unregistering): Released all slaves [ 480.470706][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.488426][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.504031][ T8985] device bridge_slave_0 entered promiscuous mode [ 480.513218][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.521858][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.531132][ T9043] loop0: detected capacity change from 0 to 764 [ 480.649146][ T8985] device bridge_slave_1 entered promiscuous mode [ 480.782665][ T8957] device hsr_slave_0 entered promiscuous mode [ 480.839834][ T8957] device hsr_slave_1 entered promiscuous mode [ 480.881741][ T9043] rock: directory entry would overflow storage [ 480.890465][ T9043] rock: sig=0x4654, size=5, remaining=4 [ 480.936026][ T8957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.943616][ T8957] Cannot create hsr debugfs directory [ 480.984217][ T7901] Bluetooth: hci3: command 0x040f tx timeout [ 481.146932][ T7901] Bluetooth: hci2: command 0x041b tx timeout [ 481.584497][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 481.670148][ T9049] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 481.696269][ T9054] overlayfs: invalid redirect ((null)) [ 481.718084][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.817286][ T9058] binder: BINDER_SET_CONTEXT_MGR already set [ 481.823302][ T9058] binder: 9055:9058 ioctl 4018620d 20000040 returned -16 [ 481.854307][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.982064][ T9062] futex_wake_op: syz.0.1140 tries to shift op by 32; fix this program [ 482.956183][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 483.064228][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 483.089628][ T8985] team0: Port device team_slave_0 added [ 483.188191][ T8985] team0: Port device team_slave_1 added [ 483.224224][ T7901] Bluetooth: hci2: command 0x040f tx timeout [ 483.413285][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.443158][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.479924][ T9080] binder: BINDER_SET_CONTEXT_MGR already set [ 483.493185][ T9080] binder: 9074:9080 ioctl 4018620d 20000040 returned -16 [ 483.605075][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.667060][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.694427][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.822870][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.131967][ T8985] device hsr_slave_0 entered promiscuous mode [ 484.182196][ T8985] device hsr_slave_1 entered promiscuous mode [ 484.202278][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.215655][ T9090] 9pnet: Insufficient options for proto=fd [ 484.223454][ T8985] Cannot create hsr debugfs directory [ 484.594901][ T9095] loop1: detected capacity change from 0 to 1764 [ 485.483127][ T3569] Bluetooth: hci2: command 0x0419 tx timeout [ 486.319156][ T8957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 486.419677][ T8957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.598379][ T8957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.829274][ T8985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.922232][ T8957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.922336][ T9108] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1145'. [ 486.997938][ T8985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.134015][ T8985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.160416][ T9114] loop2: detected capacity change from 0 to 512 [ 487.384966][ T9114] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 487.392163][ T9114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 487.499677][ T8985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.567294][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.585279][ T9114] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1147: corrupted in-inode xattr [ 487.631017][ T9114] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1147: couldn't read orphan inode 15 (err -117) [ 487.682177][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.714714][ T9114] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 487.738237][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.749271][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.794896][ T9127] loop1: detected capacity change from 0 to 128 [ 487.831364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.859552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.876401][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.883604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.899057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.935188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.012464][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 488.012482][ T26] audit: type=1800 audit(1724802097.057:3235): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1149" name="file0" dev="loop1" ino=1048744 res=0 errno=0 [ 488.024795][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.046659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.178236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.274118][ T9114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1147'. [ 488.298091][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 489.040695][ T8957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.064185][ T26] audit: type=1800 audit(1724802097.927:3236): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1149" name="bus" dev="loop1" ino=1048745 res=0 errno=0 [ 489.084155][ T8957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.134175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.163248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 489.190488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.207388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.233257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 489.252538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 489.271287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.285041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.304477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.323454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.344969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.377593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.587748][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 489.670560][ T9140] overlayfs: invalid redirect ((null)) [ 490.522217][ T8985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.652685][ T8985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.681551][ T9162] loop2: detected capacity change from 0 to 128 [ 490.747797][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.771847][ T8985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.801822][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.830787][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.890843][ T9167] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 491.034137][ T8985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 491.144462][ T9175] x_tables: unsorted underflow at hook 3 [ 491.369809][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.407507][ T9178] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1156'. [ 491.424867][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.578339][ T8957] device veth0_vlan entered promiscuous mode [ 491.645301][ C0] eth0: bad gso: type: 1, size: 1408 [ 491.674175][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.687262][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.771280][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.832612][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.853916][ T8957] device veth1_vlan entered promiscuous mode [ 492.284370][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 492.396491][ T8957] device veth0_macvtap entered promiscuous mode [ 492.530036][ T9200] loop1: detected capacity change from 0 to 512 [ 493.235928][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.245610][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 493.266048][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.287604][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 493.310348][ T8957] device veth1_macvtap entered promiscuous mode [ 493.320673][ T9198] loop2: detected capacity change from 0 to 512 [ 493.367853][ T9198] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 493.400603][ T9206] loop0: detected capacity change from 0 to 1024 [ 493.439192][ T9200] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 493.449584][ T9198] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 493.477641][ T9200] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1160: invalid indirect mapped block 2683928664 (level 1) [ 493.501534][ T9200] EXT4-fs (loop1): 1 truncate cleaned up [ 493.507374][ T9200] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=cê€oup.contrs,errors=continue. Quota mode: writeback. [ 493.552035][ T9206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.609534][ T9198] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 493.820595][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.838666][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.849529][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.874931][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.885933][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.898314][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.909003][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.918919][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.929720][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.941583][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.964889][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.973967][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.994427][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.007613][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.022063][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.032737][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.043355][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.053993][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.064658][ T8957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.075871][ T8957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.083811][ T26] audit: type=1326 audit(1724802103.127:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24095dae79 code=0x7fc00000 [ 494.125190][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.141776][ T26] audit: type=1326 audit(1724802103.127:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24095dae79 code=0x7fc00000 [ 494.147141][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.164202][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.185663][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.258693][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.274479][ T26] audit: type=1326 audit(1724802103.327:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24095dae79 code=0x7fc00000 [ 494.296978][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.301977][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.315717][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.385744][ T8957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.408141][ T8957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.434411][ T8957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.449050][ T8957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.456607][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.461318][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.478011][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.489743][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.496845][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.525800][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.560402][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.580141][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.587241][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.602324][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 494.648842][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.661438][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 494.687210][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.708938][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.722945][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.738709][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.751159][ T9216] overlayfs: invalid redirect ((null)) [ 494.782209][ T8985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.795559][ T8985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.830858][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.845966][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.866380][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.887631][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.909674][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.979095][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.047417][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.075390][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.147672][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.178683][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.200575][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.314643][ T3765] device hsr_slave_0 left promiscuous mode [ 495.330686][ T3765] device hsr_slave_1 left promiscuous mode [ 495.354691][ T9221] loop2: detected capacity change from 0 to 512 [ 495.384014][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.395272][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.415254][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.442462][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.485750][ T9221] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1166: invalid indirect mapped block 256 (level 2) [ 495.510742][ T3765] device bridge_slave_1 left promiscuous mode [ 495.518065][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.539498][ T9221] EXT4-fs (loop2): 2 truncates cleaned up [ 495.557795][ T9221] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 495.613810][ T3765] device bridge_slave_0 left promiscuous mode [ 495.651392][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.719734][ T3765] device veth1_macvtap left promiscuous mode [ 495.734089][ T3765] device veth0_macvtap left promiscuous mode [ 495.765385][ T26] audit: type=1326 audit(1724802104.817:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.2.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24095dae79 code=0x0 [ 495.771392][ T3765] device veth1_vlan left promiscuous mode [ 495.849198][ T3765] device veth0_vlan left promiscuous mode [ 495.934376][ T3610] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 496.314268][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 496.335184][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 496.368884][ T3610] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 496.379662][ T3610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.403077][ T3610] usb 1-1: config 0 descriptor?? [ 496.670754][ T3765] team0 (unregistering): Port device team_slave_1 removed [ 496.687278][ T3765] team0 (unregistering): Port device team_slave_0 removed [ 496.710990][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.729521][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.804864][ T3765] bond0 (unregistering): Released all slaves [ 496.860011][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.879464][ T3610] dragonrise 0003:0079:0006.0008: item fetching failed at offset 2/5 [ 496.903312][ T3610] dragonrise 0003:0079:0006.0008: parse failed [ 496.912578][ T3610] dragonrise: probe of 0003:0079:0006.0008 failed with error -22 [ 497.008597][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.024420][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.054514][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.094487][ T9235] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1169'. [ 497.112355][ T7898] usb 1-1: USB disconnect, device number 15 [ 497.124850][ T9237] xt_TCPMSS: Only works on TCP SYN packets [ 497.441834][ T9249] loop1: detected capacity change from 0 to 1024 [ 497.622734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.636190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.703764][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.721374][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.733542][ T8985] device veth0_vlan entered promiscuous mode [ 497.753484][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.767241][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.820029][ T8985] device veth1_vlan entered promiscuous mode [ 497.866517][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.886052][ T9249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.903581][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.980485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.002437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.021912][ T8985] device veth0_macvtap entered promiscuous mode [ 498.077768][ T9254] overlayfs: invalid redirect ((null)) [ 498.109499][ T8985] device veth1_macvtap entered promiscuous mode [ 498.250160][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.365486][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.387605][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.411760][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.428788][ T9260] input: syz1 as /devices/virtual/input/input18 [ 498.437549][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.493238][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.560014][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.594573][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.624835][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.631841][ T9264] loop1: detected capacity change from 0 to 512 [ 498.645071][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.667687][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.700884][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.732794][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.783575][ T9264] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 498.795034][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 498.811492][ T9264] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 498.854675][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.914305][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.964335][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.988796][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.006192][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.135213][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.143466][ T9269] fuse: Bad value for 'fd' [ 499.145782][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.174996][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.385027][ T9271] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1176: Directory hole found for htree leaf block 0 [ 499.554354][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 499.875275][ T9270] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1176: Directory hole found for htree leaf block 0 [ 500.483148][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.575052][ T8985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.614230][ T8985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.633339][ T8985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.663756][ T8985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.759269][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.776032][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.091082][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.105187][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.113375][ T9250] device bridge_slave_0 entered promiscuous mode [ 501.184279][ T9282] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1180'. [ 501.209181][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.212955][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.234394][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.269190][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.310391][ T26] audit: type=1326 audit(1724802110.357:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.0.1187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x0 [ 501.317526][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.342283][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.365873][ T9250] device bridge_slave_1 entered promiscuous mode [ 501.412828][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.437153][ T9291] IPv6: sit1: Disabled Multicast RS [ 501.479443][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.514505][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.562206][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.606184][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.650967][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.872161][ T9298] binder: BINDER_SET_CONTEXT_MGR already set [ 501.879018][ T9298] binder: 9294:9298 ioctl 4018620d 20000040 returned -16 [ 501.880459][ T9250] team0: Port device team_slave_0 added [ 501.936959][ T9250] team0: Port device team_slave_1 added [ 501.944773][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 502.294376][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1183'. [ 503.155976][ T9307] loop0: detected capacity change from 0 to 1024 [ 503.401103][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.418348][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.462711][ T9307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.537768][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.560743][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.571707][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.609779][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.679810][ T9313] overlayfs: invalid redirect ((null)) [ 503.853442][ T9312] netlink: 'syz.3.1186': attribute type 4 has an invalid length. [ 503.978627][ T9250] device hsr_slave_0 entered promiscuous mode [ 504.006876][ T9250] device hsr_slave_1 entered promiscuous mode [ 504.024474][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 504.043335][ T9250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.060127][ T9250] Cannot create hsr debugfs directory [ 504.484213][ T9323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1190'. [ 505.219338][ T9328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 505.556155][ T9337] loop3: detected capacity change from 0 to 1024 [ 506.402270][ T9332] input: syz0 as /devices/virtual/input/input19 [ 506.621961][ T9250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.642300][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 506.672826][ T9337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.530412][ T9250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.631392][ T9356] binder: BINDER_SET_CONTEXT_MGR already set [ 509.638223][ T9356] binder: 9347:9356 ioctl 4018620d 20000040 returned -16 [ 509.785266][ T9250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.986372][ T9250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.257810][ T9371] loop3: detected capacity change from 0 to 256 [ 510.301222][ T9371] exfat: Deprecated parameter 'utf8' [ 510.323841][ T9371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 510.592017][ T9375] loop4: detected capacity change from 0 to 1024 [ 510.782763][ T9375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.890449][ T9250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.175741][ T9250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 511.200003][ T9250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.314296][ T9250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.592318][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.671346][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.681117][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.723391][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.760094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.791986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.858995][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.866115][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.895756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.931276][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.007888][ T9386] loop0: detected capacity change from 0 to 1024 [ 512.226416][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.264851][ T9386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.283872][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.290991][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.381234][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.422237][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.502864][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.600492][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.621908][ T9388] fuse: Unknown parameter '½Zƒ0x0000000000000008' [ 512.649009][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.688604][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.712695][ T9388] netdevsim netdevsim4: Direct firmware load for e 01e0 0129 0000 0000 0000 [ 512.712695][ T9388] failed with error -2 [ 512.734220][ T9388] netdevsim netdevsim4: Falling back to sysfs fallback for: e 01e0 0129 0000 0000 0000 [ 512.734220][ T9388] [ 512.767162][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.791644][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.809674][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.878928][ T9250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.913400][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.923391][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.933153][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.992308][ T3610] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 513.062894][ T9400] loop1: detected capacity change from 0 to 1024 [ 513.395784][ T26] audit: type=1800 audit(1724802122.447:3242): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1209" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 513.396060][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.757762][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.239148][ T4201] hfsplus: b-tree write err: -5, ino 4 [ 514.249238][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.334354][ T3610] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=7b.a3 [ 514.343448][ T3610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.364125][ T3610] usb 5-1: Product: syz [ 514.368330][ T3610] usb 5-1: Manufacturer: syz [ 514.372940][ T3610] usb 5-1: SerialNumber: syz [ 514.401159][ T3610] usb 5-1: config 0 descriptor?? [ 514.416627][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 514.438487][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.468002][ T3610] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench found [ 514.501660][ T3610] usb 5-1: selecting invalid altsetting 1 [ 514.519257][ T3610] snd_usb_variax 5-1:0.0: set_interface failed [ 514.538587][ T3610] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench now disconnected [ 514.561891][ T3610] snd_usb_variax: probe of 5-1:0.0 failed with error -22 [ 514.570617][ T9415] binder: BINDER_SET_CONTEXT_MGR already set [ 514.588081][ T9415] binder: 9413:9415 ioctl 4018620d 20000040 returned -16 [ 514.595562][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.634170][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.665445][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.703267][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.734690][ T9250] device veth0_vlan entered promiscuous mode [ 514.762576][ T9418] loop0: detected capacity change from 0 to 1024 [ 514.810454][ T9418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.901820][ T9250] device veth1_vlan entered promiscuous mode [ 515.020331][ T9250] device veth0_macvtap entered promiscuous mode [ 515.029972][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.062297][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.083525][ T9250] device veth1_macvtap entered promiscuous mode [ 515.095439][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 515.116965][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.161164][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.196251][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.238953][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.262458][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.317166][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.378735][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.422709][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.461348][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.482329][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.524529][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.568376][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.591933][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.616305][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.673990][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.715576][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.759245][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.793706][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.839907][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.876859][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.911027][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.957613][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.983515][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.027371][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.067965][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.107960][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.123663][ T7] usb 5-1: USB disconnect, device number 11 [ 516.139933][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.231157][ T9250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.272192][ T9250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.301715][ T9250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.340298][ T9250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.506522][ T9435] loop1: detected capacity change from 0 to 1024 [ 516.541732][ T9433] loop4: detected capacity change from 0 to 1024 [ 516.618726][ T9435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.715253][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.723921][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.813500][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 517.063010][ T3844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.071826][ T3844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.081749][ T9433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.100001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 518.654414][ T9447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1219'. [ 519.271321][ T9457] binder: BINDER_SET_CONTEXT_MGR already set [ 519.279910][ T9457] binder: 9455:9457 ioctl 4018620d 20000040 returned -16 [ 519.909882][ T9462] loop1: detected capacity change from 0 to 1024 [ 520.001662][ T9462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.519780][ T9464] loop2: detected capacity change from 0 to 256 [ 520.638856][ T9464] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 520.860715][ T9470] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 521.244251][ T21] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 521.614361][ T21] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 521.662647][ T21] usb 2-1: config 0 has no interface number 0 [ 521.668414][ T9484] loop0: detected capacity change from 0 to 512 [ 521.719923][ T9486] loop2: detected capacity change from 0 to 1024 [ 521.724328][ T21] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 521.758140][ T9484] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1230: inline data xattr refers to an external xattr inode [ 521.805263][ T9484] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1230: couldn't read orphan inode 12 (err -117) [ 521.817779][ T9486] EXT4-fs (loop2): Test dummy encryption mode enabled [ 521.856975][ T9486] EXT4-fs (loop2): Ignoring removed orlov option [ 521.867883][ T21] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 29285, setting to 64 [ 521.888449][ T9484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.909777][ T9486] EXT4-fs (loop2): can't mount with commit=261, fs mounted w/o journal [ 522.276759][ T9490] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1230: Directory hole found for htree leaf block 0 [ 522.294593][ T21] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 522.350270][ T9490] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1230: Directory hole found for htree leaf block 0 [ 522.386446][ T9490] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1230: Directory hole found for htree leaf block 0 [ 522.453907][ T21] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 522.944216][ T21] usb 2-1: Product: syz [ 522.948966][ T21] usb 2-1: Manufacturer: syz [ 522.953584][ T21] usb 2-1: SerialNumber: syz [ 523.030337][ T21] usb 2-1: config 0 descriptor?? [ 523.042913][ T9492] loop2: detected capacity change from 0 to 512 [ 523.074506][ T9473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 523.110264][ T21] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 523.204273][ T9499] binder: BINDER_SET_CONTEXT_MGR already set [ 523.210379][ T9499] binder: 9494:9499 ioctl 4018620d 20000040 returned -16 [ 523.229866][ T21] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 523.270551][ T21] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 523.318865][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 523.349559][ T9502] loop0: detected capacity change from 0 to 1024 [ 523.383324][ T21] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 523.417664][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 523.435217][ T21] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 523.465133][ T9502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.493144][ T9470] loop1: detected capacity change from 0 to 128 [ 523.544218][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 523.553959][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 523.581605][ T21] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 523.624245][ T7898] Bluetooth: hci4: command 0x0409 tx timeout [ 523.642390][ T21] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 523.783773][ T26] audit: type=1800 audit(1724802132.827:3243): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1226" name="bus" dev="loop1" ino=1048761 res=0 errno=0 [ 523.956821][ T26] audit: type=1800 audit(1724802132.907:3244): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1226" name="bus" dev="loop1" ino=1048761 res=0 errno=0 [ 524.198953][ T9509] loop4: detected capacity change from 0 to 1024 [ 524.211980][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.237398][ T9509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.248285][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.303681][ T9479] device bridge_slave_0 entered promiscuous mode [ 524.366705][ T21] usb 2-1: USB disconnect, device number 14 [ 524.373474][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.402897][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 524.415460][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.456440][ T9479] device bridge_slave_1 entered promiscuous mode [ 524.468121][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 524.514758][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 524.542059][ T9515] loop4: detected capacity change from 0 to 1024 [ 524.577865][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 524.614263][ T21] keyspan 2-1:0.107: device disconnected [ 524.641124][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.692631][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.774429][ T9515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.888952][ T9479] team0: Port device team_slave_0 added [ 524.954885][ T9479] team0: Port device team_slave_1 added [ 525.085403][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.116670][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.221764][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.274781][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.282011][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.359388][ T9520] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1240'. [ 525.411862][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.543703][ T9522] loop1: detected capacity change from 0 to 4096 [ 525.585797][ T9479] device hsr_slave_0 entered promiscuous mode [ 525.624892][ T9522] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 525.654719][ T9479] device hsr_slave_1 entered promiscuous mode [ 525.695178][ T9479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.702802][ T9479] Cannot create hsr debugfs directory [ 525.708651][ T1078] Bluetooth: hci4: command 0x041b tx timeout [ 525.735090][ T9522] ntfs: volume version 3.1. [ 525.740511][ T9526] loop2: detected capacity change from 0 to 512 [ 525.830814][ T9526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 525.850687][ T9526] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 525.915795][ T9526] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 527.032036][ T9532] loop0: detected capacity change from 0 to 256 [ 527.124675][ T26] audit: type=1326 audit(1724802136.167:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.224455][ T26] audit: type=1326 audit(1724802136.167:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.273134][ T9535] loop1: detected capacity change from 0 to 512 [ 527.273335][ T9528] loop2: detected capacity change from 0 to 2048 [ 527.304408][ T9532] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 527.309587][ T9479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.435329][ T9535] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1244: inline data xattr refers to an external xattr inode [ 527.462771][ T9479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.464419][ T9535] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1244: couldn't read orphan inode 12 (err -117) [ 527.507219][ T26] audit: type=1326 audit(1724802136.557:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.561852][ T9479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.584440][ T9535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 527.632911][ T26] audit: type=1326 audit(1724802136.557:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.721810][ T9539] loop0: detected capacity change from 0 to 1024 [ 527.741685][ T26] audit: type=1326 audit(1724802136.557:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.764168][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.794412][ T3614] Bluetooth: hci4: command 0x040f tx timeout [ 527.838148][ T26] audit: type=1326 audit(1724802136.557:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 527.861189][ T26] audit: type=1326 audit(1724802136.557:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 528.095463][ T9541] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1244: Directory hole found for htree leaf block 0 [ 528.142665][ T9541] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1244: Directory hole found for htree leaf block 0 [ 528.176474][ T9541] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1244: Directory hole found for htree leaf block 0 [ 528.879734][ T9479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.932958][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 529.952396][ T9543] binder: BINDER_SET_CONTEXT_MGR already set [ 529.959299][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 530.016974][ T9543] binder: 9542:9543 ioctl 4018620d 20000040 returned -16 [ 530.026093][ T9551] loop4: detected capacity change from 0 to 512 [ 530.205378][ T9551] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.227115][ T9479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.235496][ T9551] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 530.248114][ T9551] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096) [ 530.258342][ T9479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.302236][ T9479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.370856][ T9479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.464678][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 530.464696][ T26] audit: type=1326 audit(1724802139.517:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 530.501478][ T26] audit: type=1326 audit(1724802139.547:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 530.610723][ T9557] fuse: Bad value for 'user_id' [ 530.636051][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.681601][ T9558] loop4: detected capacity change from 0 to 2048 [ 530.866796][ T9557] loop2: detected capacity change from 0 to 16 [ 530.964752][ T9557] erofs: Unknown parameter 'PL' [ 531.002430][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.029297][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.085480][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.113435][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.142537][ T26] audit: type=1326 audit(1724802140.187:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.184811][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.216121][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.216531][ T26] audit: type=1326 audit(1724802140.187:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.223221][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.279728][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.334958][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.343550][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.350711][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.384939][ T26] audit: type=1326 audit(1724802140.187:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.475521][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.501958][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.527462][ T26] audit: type=1326 audit(1724802140.187:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.550610][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.573948][ T9565] loop1: detected capacity change from 0 to 512 [ 531.590890][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.604884][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.616220][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.626382][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.642852][ T26] audit: type=1326 audit(1724802140.187:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.651251][ T9479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.665252][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.693256][ T9479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.700327][ T9572] loop2: detected capacity change from 0 to 1024 [ 531.734303][ T26] audit: type=1326 audit(1724802140.187:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.760506][ T9565] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.1251: invalid block [ 531.773333][ T9565] EXT4-fs (loop1): Remounting filesystem read-only [ 531.780408][ T9565] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1251: invalid indirect mapped block 1024 (level 0) [ 531.781445][ T9572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.814213][ T9565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1251: bg 0: block 35: padding at end of block bitmap is not set [ 531.852985][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.865660][ T9565] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 531.878539][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.893341][ T9565] EXT4-fs (loop1): 1 truncate cleaned up [ 531.913177][ T26] audit: type=1326 audit(1724802140.187:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 531.924272][ T9565] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,bsddf,. Quota mode: none. [ 531.935622][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.969000][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.006711][ T26] audit: type=1326 audit(1724802140.187:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 532.042673][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.082285][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.111970][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.283234][ T9582] loop4: detected capacity change from 0 to 512 [ 532.320948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.333143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.335492][ T9578] loop0: detected capacity change from 0 to 4096 [ 532.376681][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.493113][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.510922][ T9578] ntfs: volume version 3.1. [ 532.517094][ T9582] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 532.545222][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.604182][ T9582] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 532.705623][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.716135][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.829624][ T9589] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1254: Directory hole found for htree leaf block 0 [ 535.283531][ T9591] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 535.840115][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.914003][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.972144][ T9479] device veth0_vlan entered promiscuous mode [ 536.018684][ T9479] device veth1_vlan entered promiscuous mode [ 536.195422][ T9479] device veth0_macvtap entered promiscuous mode [ 536.231006][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.245166][ T9597] loop0: detected capacity change from 0 to 512 [ 536.250718][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.275458][ T9602] binder: BINDER_SET_CONTEXT_MGR already set [ 536.287634][ T9602] binder: 9598:9602 ioctl 4018620d 20000040 returned -16 [ 536.309219][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.320748][ T9604] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 0, id = 0 [ 536.332730][ T9479] device veth1_macvtap entered promiscuous mode [ 536.352901][ T9597] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 536.381142][ T9597] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 536.413585][ T9597] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 536.442805][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.487550][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.513470][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.544098][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.577650][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.611633][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.640899][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.664229][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.689181][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.716143][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.743442][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.777531][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.799605][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.819786][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 536.851667][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.918094][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.967222][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.989124][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 536.989136][ T26] audit: type=1326 audit(1724802146.037:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.017787][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.044955][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.075729][ T9609] IPVS: stopping backup sync thread 9604 ... [ 537.089554][ T26] audit: type=1326 audit(1724802146.037:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.114701][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.157197][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.183066][ T9601] loop0: detected capacity change from 0 to 2048 [ 537.209224][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.247215][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.271085][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.291406][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.305607][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.316621][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.326956][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.338069][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.353724][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.379933][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.455908][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.467418][ T9614] loop2: detected capacity change from 0 to 1024 [ 537.490691][ T9479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.515298][ T9614] EXT4-fs (loop2): Ignoring removed orlov option [ 537.532150][ T9479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.541367][ T9614] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 537.551269][ T9479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.570207][ T9479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.585833][ T5994] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 537.639764][ T9614] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nodiscard,sysvgroups,max_batch_time=0x0000000000000009,debug_want_extra_isize=0x0000000000000080,orlov,norecovery,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 537.704369][ T26] audit: type=1326 audit(1724802146.747:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.761096][ T26] audit: type=1326 audit(1724802146.747:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.783569][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.793817][ T26] audit: type=1326 audit(1724802146.747:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.816205][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.824474][ T26] audit: type=1326 audit(1724802146.747:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.846975][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.877425][ T3570] Bluetooth: Wrong link type (-71) [ 537.902984][ T26] audit: type=1326 audit(1724802146.747:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.926823][ T26] audit: type=1326 audit(1724802146.747:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 537.949180][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.958983][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.976395][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.984471][ T5994] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 537.992654][ T5994] usb 2-1: config 0 has no interface number 0 [ 538.001838][ T26] audit: type=1326 audit(1724802146.747:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 538.058071][ T5994] usb 2-1: config 0 interface 233 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 538.078595][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.097734][ T26] audit: type=1326 audit(1724802146.747:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.0.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 538.157893][ T5994] usb 2-1: config 0 interface 233 has no altsetting 0 [ 538.178937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.192061][ T5994] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 538.214489][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.227632][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.286168][ T5994] usb 2-1: config 0 descriptor?? [ 538.338010][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.503596][ T9627] loop0: detected capacity change from 0 to 512 [ 538.752500][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 538.887856][ T9627] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.060450][ T9627] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 539.365820][ T9627] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 539.533945][ T9642] loop4: detected capacity change from 0 to 1024 [ 539.634253][ T5994] usb 2-1: string descriptor 0 read error: -71 [ 539.671789][ T9642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.678432][ T5994] ums-realtek 2-1:0.233: USB Mass Storage device detected [ 539.769968][ T9628] loop0: detected capacity change from 0 to 2048 [ 539.804319][ T5994] usb 2-1: USB disconnect, device number 15 [ 540.042200][ T9656] Cannot find add_set index 0 as target [ 540.266671][ T9663] loop0: detected capacity change from 0 to 512 [ 540.301311][ T9667] binder: BINDER_SET_CONTEXT_MGR already set [ 540.307781][ T9667] binder: 9660:9667 ioctl 4018620d 20000040 returned -16 [ 540.472904][ T9669] loop1: detected capacity change from 0 to 1024 [ 541.154204][ T9669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.186742][ C0] eth0: bad gso: type: 1, size: 1408 [ 541.238067][ T9663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 541.255694][ T9663] ext4 filesystem being mounted at /110/bus supports timestamps until 2038 (0x7fffffff) [ 541.346134][ T9673] loop4: detected capacity change from 0 to 512 [ 541.417513][ T9659] device veth0_vlan left promiscuous mode [ 541.594578][ T9673] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.259229][ T9673] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 542.434710][ T9673] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096) [ 542.632352][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 542.632367][ T26] audit: type=1326 audit(1724802151.677:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 542.753061][ T26] audit: type=1326 audit(1724802151.677:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 542.838496][ T9677] loop4: detected capacity change from 0 to 2048 [ 542.886929][ T9659] delete_channel: no stack [ 543.051021][ T26] audit: type=1326 audit(1724802152.097:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 543.303776][ T26] audit: type=1326 audit(1724802152.097:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 544.494450][ T26] audit: type=1326 audit(1724802152.097:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 544.643075][ T26] audit: type=1326 audit(1724802152.097:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 544.735492][ T26] audit: type=1326 audit(1724802152.097:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 544.789256][ T9707] loop0: detected capacity change from 0 to 512 [ 544.832504][ T26] audit: type=1326 audit(1724802152.097:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 544.896103][ T26] audit: type=1326 audit(1724802152.097:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 545.055392][ T9707] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 545.058782][ T26] audit: type=1326 audit(1724802152.097:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 545.082920][ T9707] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 545.171714][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 545.347082][ T9707] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 545.876237][ T9716] loop4: detected capacity change from 0 to 1024 [ 545.964503][ T9718] loop1: detected capacity change from 0 to 512 [ 546.022461][ T9716] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1282'. [ 546.125352][ T9718] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 546.249744][ T9718] ext4 filesystem being mounted at /136/bus supports timestamps until 2038 (0x7fffffff) [ 546.553609][ T9709] loop0: detected capacity change from 0 to 2048 [ 547.768664][ T9736] binder: BINDER_SET_CONTEXT_MGR already set [ 547.794241][ T9736] binder: 9733:9736 ioctl 4018620d 20000040 returned -16 [ 547.968865][ T3765] hfsplus: b-tree write err: -5, ino 4 [ 548.228555][ T9746] 9pnet: Insufficient options for proto=fd [ 548.784274][ T3569] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 549.027859][ T3569] usb 5-1: Using ep0 maxpacket: 16 [ 549.544907][ T3569] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 549.586844][ T3569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 549.637419][ T3569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 549.677048][ T9754] UHID_CREATE from different security context by process 503 (syz.1.1291), this is not allowed. [ 549.788688][ T9758] loop0: detected capacity change from 0 to 1024 [ 549.854384][ T3569] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 549.890706][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.910936][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 549.917596][ T9762] binder: 9760:9762 ioctl 4018620d 20000040 returned -16 [ 549.935928][ T3569] usb 5-1: Product: syz [ 549.940883][ T3569] usb 5-1: Manufacturer: syz [ 549.952806][ T3569] usb 5-1: SerialNumber: syz [ 549.962832][ T26] kauditd_printk_skb: 178 callbacks suppressed [ 549.962848][ T26] audit: type=1800 audit(1724802159.007:3667): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1293" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 549.993588][ T3569] usb 5-1: config 0 descriptor?? [ 551.058843][ T3609] usb 5-1: USB disconnect, device number 12 [ 551.145239][ T9769] loop1: detected capacity change from 0 to 2048 [ 551.164777][ T3909] hfsplus: b-tree write err: -5, ino 4 [ 551.207457][ T9769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.450355][ T26] audit: type=1326 audit(1724802160.497:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.0.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x0 [ 551.550278][ T9776] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 551.601093][ T9776] overlayfs: missing 'workdir' [ 552.237276][ T9780] loop1: detected capacity change from 0 to 512 [ 552.341961][ T9780] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 552.389888][ T9780] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 552.408954][ T9780] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 552.421082][ T9789] loop0: detected capacity change from 0 to 1024 [ 552.724372][ T26] audit: type=1326 audit(1724802161.767:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 552.782760][ T9789] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 552.871848][ T26] audit: type=1326 audit(1724802161.797:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 552.966771][ T26] audit: type=1326 audit(1724802161.797:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 552.979267][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 553.088398][ T9783] loop1: detected capacity change from 0 to 2048 [ 553.104283][ T9796] binder: BINDER_SET_CONTEXT_MGR already set [ 553.241305][ T26] audit: type=1326 audit(1724802161.797:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 553.268189][ T9796] binder: 9794:9796 ioctl 4018620d 20000040 returned -16 [ 553.295500][ T26] audit: type=1326 audit(1724802161.797:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 553.374943][ T9802] tc_dump_action: action bad kind [ 553.966698][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 554.024351][ T26] audit: type=1326 audit(1724802161.797:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 554.134406][ T9804] loop0: detected capacity change from 0 to 2048 [ 554.154824][ T26] audit: type=1326 audit(1724802161.797:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 554.225623][ T9808] usb usb1: usbfs: process 9808 (syz.2.1306) did not claim interface 0 before use [ 554.269802][ T9804] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 554.284206][ T26] audit: type=1326 audit(1724802161.887:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 554.338591][ T9804] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 554.362089][ T9804] System zones: 0-19 [ 554.383619][ T9804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 554.635132][ T9804] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1305: Directory hole found for htree leaf block 0 [ 555.096405][ T9824] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1305: Directory hole found for htree leaf block 0 [ 555.610472][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 555.610490][ T26] audit: type=1326 audit(1724802164.657:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aadd5ae79 code=0x7fc00000 [ 555.958682][ T9832] loop0: detected capacity change from 0 to 512 [ 556.014908][ T9837] input: syz0 as /devices/virtual/input/input21 [ 556.036292][ T9837] input: failed to attach handler leds to device input21, error: -6 [ 556.106285][ T9835] loop2: detected capacity change from 0 to 512 [ 556.139832][ T9832] EXT4-fs (loop0): 1 truncate cleaned up [ 556.174863][ T9832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 556.194264][ T7901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 556.246691][ T9835] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 556.252751][ T9832] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1310: Directory hole found for htree leaf block 0 [ 556.284554][ T9835] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 556.380756][ T9835] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 556.694287][ T7901] usb 2-1: Using ep0 maxpacket: 16 [ 556.966704][ T9846] loop4: detected capacity change from 0 to 1024 [ 557.114421][ T7901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 557.194197][ T7901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 557.205933][ T26] audit: type=1326 audit(1724802166.257:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 557.236131][ T7901] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 557.264178][ T7901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.321596][ T7901] usb 2-1: config 0 descriptor?? [ 557.334246][ T26] audit: type=1326 audit(1724802166.257:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 557.418481][ T9851] usb usb1: usbfs: process 9851 (syz.0.1317) did not claim interface 0 before use [ 557.427060][ T9839] loop2: detected capacity change from 0 to 2048 [ 557.456058][ T9844] hfsplus: invalid catalog entry type in lookup [ 557.535855][ T9844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 557.592206][ T9856] binder: BINDER_SET_CONTEXT_MGR already set [ 557.604451][ T9856] binder: 9852:9856 ioctl 4018620d 20000040 returned -16 [ 557.787844][ T26] audit: type=1326 audit(1724802166.827:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 557.795429][ T9833] udc-core: couldn't find an available UDC or it's busy [ 557.864348][ T9833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 557.893747][ T26] audit: type=1326 audit(1724802166.827:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 557.937140][ T26] audit: type=1326 audit(1724802166.827:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 557.994651][ T7901] hid (null): bogus close delimiter [ 558.006470][ T7901] hid (null): invalid report_count 58028 [ 558.050337][ T7901] hid (null): unknown global tag 0xd [ 558.089494][ T26] audit: type=1326 audit(1724802166.827:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 558.124551][ T7901] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 558.132006][ T7901] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 558.192639][ T7901] hid-generic 0003:0158:0100.0009: bogus close delimiter [ 558.195507][ T9833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1313'. [ 558.210609][ T7901] hid-generic 0003:0158:0100.0009: item 0 0 2 10 parsing failed [ 558.222541][ T26] audit: type=1326 audit(1724802166.827:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 558.260998][ T7901] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 558.361581][ T26] audit: type=1326 audit(1724802166.827:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 558.476284][ T26] audit: type=1326 audit(1724802166.827:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 558.583323][ T9869] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 559.020753][ T7] usb 2-1: USB disconnect, device number 16 [ 559.183860][ T9880] loop2: detected capacity change from 0 to 512 [ 560.051828][ T9889] binder: BINDER_SET_CONTEXT_MGR already set [ 560.110314][ T9880] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.122126][ T9889] binder: 9881:9889 ioctl 4018620d 20000040 returned -16 [ 560.127697][ T9896] usb usb1: usbfs: process 9896 (syz.0.1328) did not claim interface 0 before use [ 560.142549][ T9893] loop1: detected capacity change from 0 to 64 [ 560.155831][ T9880] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 560.189312][ T9880] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 560.600120][ T9888] loop2: detected capacity change from 0 to 2048 [ 560.650475][ T9900] attempt to access beyond end of device [ 560.650475][ T9900] loop1: rw=34817, want=69, limit=64 [ 560.665495][ T9900] attempt to access beyond end of device [ 560.665495][ T9900] loop1: rw=34817, want=74, limit=64 [ 560.726660][ T9900] attempt to access beyond end of device [ 560.726660][ T9900] loop1: rw=34817, want=582, limit=64 [ 560.784205][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 560.784220][ T26] audit: type=1326 audit(1724802169.827:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 560.889538][ T26] audit: type=1326 audit(1724802169.827:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.030635][ T26] audit: type=1326 audit(1724802169.827:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.070947][ T26] audit: type=1326 audit(1724802169.827:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.170197][ T9911] loop2: detected capacity change from 0 to 1024 [ 561.408673][ T9906] loop4: detected capacity change from 0 to 512 [ 561.483750][ T9911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.500411][ T9906] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.523912][ T26] audit: type=1326 audit(1724802169.857:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.567932][ T9906] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 561.582213][ T9906] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096) [ 561.593209][ T26] audit: type=1326 audit(1724802169.857:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.636638][ T26] audit: type=1326 audit(1724802169.857:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.724818][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 561.731020][ T9915] binder: 9913:9915 ioctl 4018620d 20000040 returned -16 [ 561.785528][ T26] audit: type=1326 audit(1724802169.857:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.808217][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.816046][ T26] audit: type=1326 audit(1724802169.857:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.838751][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.848185][ T26] audit: type=1326 audit(1724802169.857:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 561.908354][ C0] eth0: bad gso: type: 1, size: 1408 [ 562.022187][ T9912] loop4: detected capacity change from 0 to 2048 [ 562.414345][ T3609] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 562.455902][ T9924] loop4: detected capacity change from 0 to 4096 [ 562.524917][ T9924] NILFS (loop4): unrecognized mount option "Ž" [ 562.776492][ T3609] usb 3-1: Using ep0 maxpacket: 32 [ 562.781882][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.924484][ T3609] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 562.940760][ T3609] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 563.179165][ T3609] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 563.204174][ T3609] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 563.220359][ T3609] usb 3-1: config 0 interface 0 has no altsetting 0 [ 563.555833][ T3609] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 563.565607][ T3609] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 563.574883][ T3609] usb 3-1: Product: syz [ 563.579537][ T3609] usb 3-1: Manufacturer: syz [ 563.586499][ T3609] usb 3-1: SerialNumber: syz [ 563.598168][ T3609] usb 3-1: config 0 descriptor?? [ 563.645654][ T3609] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 563.958953][ T3609] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 564.549588][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 564.814252][ T9952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 564.821603][ T9952] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 564.868211][ T3609] usb 3-1: USB disconnect, device number 15 [ 564.899158][ T3609] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 565.245797][ T9952] vhci_hcd vhci_hcd.0: Device attached [ 565.484726][ T4384] IPVS: stopping master sync thread 7964 ... [ 565.513515][ T9969] loop0: detected capacity change from 0 to 8 [ 565.574346][ T3569] usb 16-1: SetAddress Request (2) to port 0 [ 565.584949][ T9969] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 565.591849][ T3569] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 565.782143][ T9969] cramfs: Error -5 while decompressing! [ 565.788215][ T9969] cramfs: ffffffff915952c2(26)->ffff888058a3c000(4096) [ 565.795167][ T9969] cramfs: Error -3 while decompressing! [ 565.800713][ T9969] cramfs: ffffffff915952dc(16)->ffff8880575bc000(4096) [ 565.807688][ T9969] cramfs: Error -5 while decompressing! [ 565.813239][ T9969] cramfs: ffffffff915952c2(26)->ffff888058a3c000(4096) [ 565.824699][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 565.824715][ T26] audit: type=1800 audit(1724802174.867:3879): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1344" name="file3" dev="loop0" ino=348 res=0 errno=0 [ 565.999063][ T9974] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1345'. [ 566.361026][ T4384] device hsr_slave_0 left promiscuous mode [ 566.404234][ T4384] device hsr_slave_1 left promiscuous mode [ 566.452136][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.493262][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.522303][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.551537][ T9979] loop2: detected capacity change from 0 to 512 [ 566.561133][ T9954] vhci_hcd: connection reset by peer [ 566.577869][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.594764][ T155] vhci_hcd: stop threads [ 566.620801][ T9988] x_tables: duplicate underflow at hook 2 [ 566.626946][ T155] vhci_hcd: release socket [ 566.639736][ T4384] device bridge_slave_1 left promiscuous mode [ 566.660544][ T9979] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.666844][ T155] vhci_hcd: disconnect device [ 566.681067][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.730580][ T4384] device bridge_slave_0 left promiscuous mode [ 566.743916][ T9979] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 566.745436][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.761453][ T9979] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 566.808189][ T4384] device veth1_macvtap left promiscuous mode [ 566.818151][ T4384] device veth0_macvtap left promiscuous mode [ 566.825067][ T4384] device veth1_vlan left promiscuous mode [ 566.831078][ T4384] device veth0_vlan left promiscuous mode [ 566.868833][ T9995] binder: BINDER_SET_CONTEXT_MGR already set [ 566.876862][ T9995] binder: 9993:9995 ioctl 4018620d 20000040 returned -16 [ 566.956020][ T26] audit: type=1326 audit(1724802176.007:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.025029][ T26] audit: type=1326 audit(1724802176.027:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.114341][ T9981] loop2: detected capacity change from 0 to 2048 [ 567.224494][ T4277] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 567.274242][ T4277] Bluetooth: hci2: Injecting HCI hardware error event [ 567.283717][ T3577] Bluetooth: hci2: hardware error 0x00 [ 567.354220][ T26] audit: type=1326 audit(1724802176.397:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.500430][ T26] audit: type=1326 audit(1724802176.397:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.570963][ T26] audit: type=1326 audit(1724802176.397:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.636049][ T26] audit: type=1326 audit(1724802176.397:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.711397][ T26] audit: type=1326 audit(1724802176.397:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.748090][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 567.764940][ T26] audit: type=1326 audit(1724802176.397:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.791790][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 567.808106][ T26] audit: type=1326 audit(1724802176.397:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.2.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044898ae79 code=0x7fc00000 [ 567.831557][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.876076][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.947138][ T3569] usb 16-1: device descriptor read/8, error -110 [ 570.988355][ T4384] bond0 (unregistering): Released all slaves [ 571.614979][ T3569] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 571.717592][ T3569] usb usb16-port1: attempt power cycle [ 572.958662][ T3569] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 573.112853][T10016] tmpfs: Unknown parameter 'fd' [ 573.284994][ T3569] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 573.330134][T10016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 573.340724][ T3569] usb usb16-port1: unable to enumerate USB device [ 573.381930][T10030] input: syz0 as /devices/virtual/input/input23 [ 573.453245][T10035] loop1: detected capacity change from 0 to 22 [ 573.771638][T10035] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 573.815009][T10035] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 574.164365][ T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 574.388922][T10042] binder: BINDER_SET_CONTEXT_MGR already set [ 574.407948][T10042] binder: 10038:10042 ioctl 4018620d 20000040 returned -16 [ 574.424373][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 574.460031][T10041] loop4: detected capacity change from 0 to 512 [ 574.538999][T10041] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 574.561095][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.588667][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.603235][T10041] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 574.634801][ T21] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 574.655437][T10041] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096) [ 574.684719][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.746715][ T21] usb 1-1: config 0 descriptor?? [ 575.086518][T10032] loop0: detected capacity change from 0 to 512 [ 575.092946][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 575.092961][ T26] audit: type=1326 audit(1724802184.137:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 575.185691][ T26] audit: type=1326 audit(1724802184.137:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 575.251881][T10032] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,grpquota,,errors=continue. Quota mode: writeback. [ 575.266065][T10043] loop4: detected capacity change from 0 to 2048 [ 575.297003][T10032] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 575.452013][ T26] audit: type=1326 audit(1724802184.497:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 575.511013][T10057] loop1: detected capacity change from 0 to 1024 [ 575.563105][ T26] audit: type=1326 audit(1724802184.527:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 575.625506][T10059] loop4: detected capacity change from 0 to 2048 [ 575.632138][ T26] audit: type=1326 audit(1724802184.527:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 575.694153][T10057] EXT4-fs (loop1): Ignoring removed nobh option [ 575.700668][T10057] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 575.756275][T10059] EXT4-fs (loop4): cluster size (2048) smaller than block size (4096) [ 575.932859][T10057] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,nomblk_io_submit,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 575.955576][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.987982][ T26] audit: type=1326 audit(1724802184.527:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 576.010537][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.050509][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 576.110768][T10068] input: syz0 as /devices/virtual/input/input24 [ 576.252961][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 576.563878][ T21] usb 1-1: USB disconnect, device number 16 [ 576.652509][ T26] audit: type=1326 audit(1724802184.527:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 576.674276][ T26] audit: type=1326 audit(1724802184.527:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 576.882445][ T26] audit: type=1326 audit(1724802184.527:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 576.905205][ T26] audit: type=1326 audit(1724802184.527:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.4.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669602e79 code=0x7fc00000 [ 577.534179][ T5994] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 578.314142][ T5994] usb 4-1: Using ep0 maxpacket: 16 [ 578.354667][ T3610] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 578.454700][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.647495][ T5994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.853009][ T5994] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.903826][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.942699][ T5994] usb 4-1: config 0 descriptor?? [ 578.984808][ T5994] usb 4-1: can't set config #0, error -71 [ 579.014341][ T5994] usb 4-1: USB disconnect, device number 14 [ 579.024630][ T3610] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 579.050719][ T3610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.079705][ T3610] usb 3-1: Product: syz [ 579.083924][ T3610] usb 3-1: Manufacturer: syz [ 579.101972][ T3610] usb 3-1: SerialNumber: syz [ 579.131111][ T3610] usb 3-1: config 0 descriptor?? [ 579.266500][ T3610] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 579.333258][T10085] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 579.348890][T10085] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1370'. [ 579.526206][T10076] udc-core: couldn't find an available UDC or it's busy [ 579.526232][T10076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.666072][ T3610] gspca_sunplus: reg_r err -110 [ 580.789801][T10106] loop0: detected capacity change from 0 to 512 [ 580.795375][T10103] loop1: detected capacity change from 0 to 512 [ 580.803358][T10115] loop4: detected capacity change from 0 to 1024 [ 580.844198][T10106] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.844224][T10106] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 580.850763][T10103] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.850786][T10103] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 580.851078][T10106] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 580.856618][T10103] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 580.880126][T10115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.957024][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 580.957040][ T26] audit: type=1326 audit(1724802190.007:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 580.957082][ T26] audit: type=1326 audit(1724802190.007:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 581.132740][T10110] loop0: detected capacity change from 0 to 2048 [ 581.154931][ T4277] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 581.197688][ T26] audit: type=1326 audit(1724802190.247:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 581.250735][ T26] audit: type=1326 audit(1724802190.247:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 581.310115][ T3610] usb 3-1: USB disconnect, device number 16 [ 581.396562][T10108] loop1: detected capacity change from 0 to 2048 [ 581.444216][ T4277] usb 4-1: Using ep0 maxpacket: 8 [ 581.490004][ T26] audit: type=1326 audit(1724802190.537:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 581.512575][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.699175][ T26] audit: type=1326 audit(1724802190.537:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 581.784438][ T4277] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=cb.d8 [ 581.817485][ T26] audit: type=1326 audit(1724802190.537:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 581.823703][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 581.840871][ T26] audit: type=1326 audit(1724802190.537:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 581.943357][T10124] input: syz0 as /devices/virtual/input/input25 [ 582.323906][ T26] audit: type=1326 audit(1724802190.537:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 582.541913][ T4277] usb 4-1: Manufacturer: syz [ 582.546635][ T4277] usb 4-1: SerialNumber: syz [ 582.559042][ T4277] usb 4-1: config 0 descriptor?? [ 582.576527][ T26] audit: type=1326 audit(1724802190.537:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff645502e79 code=0x7fc00000 [ 582.626748][ T4277] gspca_main: spca501-2.14.0 probing 0000:0000 [ 583.163127][ T4277] gspca_spca501: reg write: error -110 [ 583.227013][ T4277] spca501 4-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 583.360587][ T4277] spca501: probe of 4-1:0.0 failed with error -22 [ 583.466628][T10133] loop0: detected capacity change from 0 to 128 [ 584.942440][T10133] FAT-fs (loop0): Directory bread(block 11554) failed [ 584.962217][T10133] FAT-fs (loop0): Directory bread(block 11555) failed [ 585.105985][T10133] FAT-fs (loop0): Directory bread(block 11556) failed [ 585.122622][T10144] loop1: detected capacity change from 0 to 256 [ 585.131775][T10133] FAT-fs (loop0): Directory bread(block 11557) failed [ 585.846710][T10133] FAT-fs (loop0): Directory bread(block 11558) failed [ 585.853832][T10133] FAT-fs (loop0): Directory bread(block 11559) failed [ 585.931585][ T3614] usb 4-1: USB disconnect, device number 15 [ 585.945844][T10133] FAT-fs (loop0): Directory bread(block 11560) failed [ 585.955153][T10133] FAT-fs (loop0): Directory bread(block 11561) failed [ 585.963477][T10133] FAT-fs (loop0): Directory bread(block 11562) failed [ 585.970838][T10133] FAT-fs (loop0): Directory bread(block 11563) failed [ 586.085646][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 586.984445][ T3610] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 587.074207][ T3614] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 587.692389][T10166] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 588.784977][T10169] loop2: detected capacity change from 0 to 16 [ 590.213848][T10169] erofs: (device loop2): mounted with root inode @ nid 36. [ 590.359205][ T3610] usb 2-1: device descriptor read/all, error -71 [ 590.394218][ T3614] usb 4-1: device descriptor read/all, error -71 [ 590.868161][T10181] loop1: detected capacity change from 0 to 512 [ 591.102689][T10191] loop2: detected capacity change from 0 to 1024 [ 591.820886][T10181] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 591.840524][T10181] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 591.848908][ T3609] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 591.852456][T10193] binder: 10192:10193 ioctl c0306201 200003c0 returned -14 [ 591.869773][T10181] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 591.886683][T10191] hfsplus: invalid btree extent records (0 size) [ 591.893229][T10191] hfsplus: failed to load extents file [ 592.194442][ T3609] usb 1-1: Using ep0 maxpacket: 16 [ 592.237212][T10195] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1398'. [ 592.256275][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 592.256310][ T26] audit: type=1326 audit(1724802201.307:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 592.285100][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.337043][ T26] audit: type=1326 audit(1724802201.307:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 592.361270][ T3609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.372383][ T3609] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.416857][T10183] loop1: detected capacity change from 0 to 2048 [ 592.474240][ T3609] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.510253][T10174] loop4: detected capacity change from 0 to 32768 [ 592.590022][ T3609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 592.612080][ T3609] usb 1-1: SerialNumber: syz [ 592.790693][T10204] loop2: detected capacity change from 0 to 2048 [ 593.376021][ T3609] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 593.406060][ T3609] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 593.416022][T10204] loop2: p1 p2 p3 [ 593.433799][ T26] audit: type=1326 audit(1724802202.477:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c7175e79 code=0x7fc00000 [ 593.564218][ T3609] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 593.646274][ T3609] usb 1-1: USB disconnect, device number 17 [ 593.779865][ T3722] udevd[3722]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 593.779981][ T3677] udevd[3677]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 593.811063][T10210] loop2: detected capacity change from 0 to 1024 [ 593.823899][ T3721] udevd[3721]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 593.845652][T10210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.857045][T10209] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1402'. [ 593.979345][T10212] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1401'. [ 596.473848][T10230] loop2: detected capacity change from 0 to 256 [ 596.603590][T10234] loop0: detected capacity change from 0 to 1024 [ 596.610828][T10230] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 596.626968][T10230] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 596.676496][T10234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.801989][T10239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1409'. [ 596.838932][ T26] audit: type=1800 audit(1724802205.887:4088): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1405" name="bus" dev="loop2" ino=1048773 res=0 errno=0 [ 599.821042][T10260] loop2: detected capacity change from 0 to 8 [ 599.910898][T10263] loop1: detected capacity change from 0 to 1024 [ 599.938397][T10260] squashfs image failed sanity check [ 600.041608][T10263] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 600.100963][T10269] loop0: detected capacity change from 0 to 1024 [ 600.168219][T10269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.448002][T10273] xt_l2tp: v2 sid > 0xffff: 16777216 [ 600.495025][T10273] device vlan2 entered promiscuous mode [ 600.527031][T10273] team0: Device vlan2 is already an upper device of the team interface [ 600.609746][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 600.619973][T10275] device syzkaller1 entered promiscuous mode [ 600.694598][ T3569] Bluetooth: hci3: command 0x0406 tx timeout [ 602.002389][T10285] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1420'. [ 602.312811][T10292] loop2: detected capacity change from 0 to 512 [ 602.426317][T10292] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 602.453691][T10290] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 602.463703][T10290] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10290, name: syz.0.1423 [ 602.472894][T10290] 7 locks held by syz.0.1423/10290: [ 602.478150][T10290] #0: ffffffff8da3ab08 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 602.487536][T10290] #1: ffffffff8da3a968 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0xb8/0x400 [ 602.497889][T10290] #2: ffff888078b7d690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: netlink_dump+0xd0/0xc40 [ 602.507887][T10290] #3: ffffffff8db174a8 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 602.518227][T10290] #4: ffffffff8c91fbe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 602.527628][T10290] #5: ffffc90001871eb8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 602.537723][T10290] #6: ffff88807a781820 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 602.547800][T10290] Preemption disabled at: [ 602.547809][T10290] [<0000000000000000>] 0x0 [ 602.556601][T10290] CPU: 1 PID: 10290 Comm: syz.0.1423 Not tainted 5.15.165-syzkaller #0 [ 602.564837][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 602.574877][T10290] Call Trace: [ 602.578172][T10290] [ 602.581105][T10290] dump_stack_lvl+0x1e3/0x2d0 [ 602.585777][T10290] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 602.591400][T10290] ? panic+0x860/0x860 [ 602.595484][T10290] ___might_sleep+0x547/0x6a0 [ 602.600155][T10290] ? __might_sleep+0xc0/0xc0 [ 602.604731][T10290] ? memcpy+0x3c/0x60 [ 602.608700][T10290] ? nla_put+0x12d/0x1e0 [ 602.612973][T10290] ? skb_put+0x110/0x1f0 [ 602.617209][T10290] ? nla_put+0x12d/0x1e0 [ 602.621464][T10290] ? memcpy+0x3c/0x60 [ 602.625442][T10290] __lock_sock_fast+0x2f/0xe0 [ 602.630115][T10290] mptcp_diag_get_info+0x282/0xa10 [ 602.635223][T10290] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 602.640427][T10290] ? mptcp_diag_dump_one+0x280/0x280 [ 602.645702][T10290] ? memset+0x1f/0x40 [ 602.649685][T10290] ? nla_reserve_64bit+0x121/0x1c0 [ 602.654797][T10290] inet_sk_diag_fill+0xf6a/0x1cb0 [ 602.659824][T10290] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 602.665532][T10290] ? __might_sleep+0xc0/0xc0 [ 602.670113][T10290] ? inet_diag_bc_sk+0x19d/0x10d0 [ 602.675125][T10290] ? __rwlock_init+0x140/0x140 [ 602.679913][T10290] ? do_raw_spin_unlock+0x137/0x8b0 [ 602.685122][T10290] mptcp_diag_dump+0xd1d/0x1330 [ 602.689979][T10290] ? __netlink_dump_start+0x52f/0x6f0 [ 602.695350][T10290] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 602.701954][T10290] __inet_diag_dump+0x20e/0x3a0 [ 602.706802][T10290] inet_diag_dump_compat+0x1bd/0x2d0 [ 602.712076][T10290] ? inet_diag_dump_start_compat+0x20/0x20 [ 602.717875][T10290] ? __alloc_skb+0x397/0x590 [ 602.722466][T10290] netlink_dump+0x605/0xc40 [ 602.726971][T10290] ? netlink_lookup+0x1d0/0x1d0 [ 602.731811][T10290] ? __inet_diag_dump_start+0x8a/0x990 [ 602.737262][T10290] ? __inet_diag_dump_start+0x831/0x990 [ 602.742801][T10290] __netlink_dump_start+0x52f/0x6f0 [ 602.748020][T10290] inet_diag_rcv_msg_compat+0x202/0x4e0 [ 602.753564][T10290] ? inet_diag_unregister+0xb0/0xb0 [ 602.758761][T10290] ? read_lock_is_recursive+0x10/0x10 [ 602.764132][T10290] ? sock_diag_rcv_msg+0xb8/0x400 [ 602.769170][T10290] ? __mutex_trylock_common+0x17e/0x2e0 [ 602.774713][T10290] ? mutex_lock_io_nested+0x60/0x60 [ 602.779937][T10290] ? __inet_diag_dump+0x3a0/0x3a0 [ 602.784957][T10290] ? inet_diag_dump_start_compat+0x20/0x20 [ 602.790799][T10290] ? inet_diag_dump+0x50/0x50 [ 602.795469][T10290] ? rcu_lock_release+0x20/0x20 [ 602.800313][T10290] ? __copy_skb_header+0x47b/0x600 [ 602.805428][T10290] ? dev_queue_xmit+0x20/0x20 [ 602.810121][T10290] ? inet_diag_unregister+0xb0/0xb0 [ 602.815314][T10290] sock_diag_rcv_msg+0xd5/0x400 [ 602.820170][T10290] netlink_rcv_skb+0x1cf/0x410 [ 602.824957][T10290] ? sock_diag_bind+0xa0/0xa0 [ 602.829649][T10290] ? netlink_ack+0xb10/0xb10 [ 602.834247][T10290] sock_diag_rcv+0x26/0x40 [ 602.838657][T10290] netlink_unicast+0x7b6/0x980 [ 602.843428][T10290] ? netlink_detachskb+0x90/0x90 [ 602.848359][T10290] ? __virt_addr_valid+0x3bb/0x460 [ 602.853473][T10290] ? 0xffffffff81000000 [ 602.857622][T10290] ? __check_object_size+0x300/0x410 [ 602.862898][T10290] ? bpf_lsm_netlink_send+0x5/0x10 [ 602.868013][T10290] netlink_sendmsg+0xa30/0xd60 [ 602.872812][T10290] ? netlink_getsockopt+0x5b0/0x5b0 [ 602.878045][T10290] ? futex_wait+0x634/0x740 [ 602.882545][T10290] ? aa_sock_msg_perm+0x91/0x150 [ 602.887513][T10290] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 602.892789][T10290] ? security_socket_sendmsg+0x7d/0xa0 [ 602.898258][T10290] ? netlink_getsockopt+0x5b0/0x5b0 [ 602.903454][T10290] ____sys_sendmsg+0x59e/0x8f0 [ 602.908212][T10290] ? iovec_from_user+0x300/0x390 [ 602.913173][T10290] ? __sys_sendmsg_sock+0x30/0x30 [ 602.918227][T10290] ___sys_sendmsg+0x252/0x2e0 [ 602.922950][T10290] ? __sys_sendmsg+0x260/0x260 [ 602.927739][T10290] ? __fdget+0x191/0x220 [ 602.931984][T10290] __se_sys_sendmsg+0x19a/0x260 [ 602.936939][T10290] ? __x64_sys_sendmsg+0x80/0x80 [ 602.941901][T10290] ? syscall_enter_from_user_mode+0x2e/0x240 [ 602.947876][T10290] ? lockdep_hardirqs_on+0x94/0x130 [ 602.953069][T10290] ? syscall_enter_from_user_mode+0x2e/0x240 [ 602.959052][T10290] do_syscall_64+0x3b/0xb0 [ 602.963459][T10290] ? clear_bhb_loop+0x15/0x70 [ 602.968133][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 602.974021][T10290] RIP: 0033:0x7ff645502e79 [ 602.978443][T10290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.998038][T10290] RSP: 002b:00007ff64397f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.006444][T10290] RAX: ffffffffffffffda RBX: 00007ff64569ef80 RCX: 00007ff645502e79 [ 603.014405][T10290] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 603.022363][T10290] RBP: 00007ff64557093e R08: 0000000000000000 R09: 0000000000000000 [ 603.030321][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.038293][T10290] R13: 0000000000000000 R14: 00007ff64569ef80 R15: 00007ffd3e58c8b8 [ 603.046294][T10290] [ 603.049328][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.104792][T10292] EXT4-fs (loop2): 1 truncate cleaned up [ 603.111366][T10292] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.