last executing test programs: 25.364859532s ago: executing program 1 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="180000000000000000000000000025ac310296434d006a004a0fb2b6aa12dcf543303450ea25aa823e842206882ba5b06f6b3d769863e05298a1dc81f41b818bea1fafb6376a14ddcba4d5a216440046f9f6a9c562d6f0a21639241a05771d8d4d357f86deb1c0a045a6633c5f9987845a0aa0a6d028ec4aade2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') recvmsg(r3, &(0x7f0000002500)={&(0x7f0000002080)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000002440)=""/188, 0xbc}, 0x10040) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) setxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.syz\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fadvise64(r3, 0x2, 0x2, 0x5) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00`\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000014000380100003800c0001800800010000000000"], 0x28}}, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 24.503554155s ago: executing program 2 (id=3295): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x0, 0x2080, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0xa0) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x8, &(0x7f0000000180)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000700)=""/122, 0x7a}], 0x3, 0x0) write$P9_RVERSION(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x13) dup(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') getdents64(r5, 0xffffffffffffffff, 0x43) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000001c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@nostrict}, {@unhide}, {@uid}, {@shortad}, {@gid}, {@shortad}, {@utf8}]}, 0x4, 0xc3d, &(0x7f0000001940)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000000200)) 24.402818354s ago: executing program 1 (id=3296): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) msgget(0x1, 0x11) set_mempolicy(0x3, 0x0, 0x0) unshare(0x46060480) r2 = shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000233000/0x2000)=nil, 0x0) mlockall(0x2) r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x10, &(0x7f000000e000/0x4000)=nil) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000080)=""/3) shmat(0x0, &(0x7f000003d000/0x1000)=nil, 0x4000) mmap$binder(&(0x7f0000395000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) set_mempolicy(0x8001, &(0x7f0000000040)=0x7ff5, 0x80) mlockall(0x1) shmdt(r3) shmat(r4, &(0x7f00003b7000/0x1000)=nil, 0x6000) mlockall(0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f00003dc000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) mlockall(0x0) shmat(0x0, &(0x7f0000308000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) 21.341979254s ago: executing program 2 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) unshare(0x0) bpf$PROG_LOAD(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x11, 0x4e, 0x8, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}]}, 0x28}}, 0x20000810) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.432950582s ago: executing program 2 (id=3304): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000100), 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) 19.570382945s ago: executing program 1 (id=3307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000080)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16YJa\xf5\x82\xbc\x11\xda\x82\"-\xb2\x03b\xcc\x82\xef]\x83\xf1w\xcb\x9ew{\xb0\xc5\xcc2F\xf1\xacp\xdf\x1e\x9f\xd5Y\x03\xe0\xd0\x90\xea\x06', 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000000000000002e0100ffffffffffff8056a8000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000070a01f0ff00000000000000000000000900010073797a30000000000900020073797a3200000000"], 0x2c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x9, 0x8}, {0x3, 0x400, 0xf1, 0x7ff}}}}, 0x15) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0xf01}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x8000000) keyctl$update(0x2, 0x0, &(0x7f0000000600)="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", 0x552) 18.542533513s ago: executing program 1 (id=3310): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x0, 0x2080, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0xa0) process_vm_writev(0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x8, &(0x7f0000000180)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000700)=""/122, 0x7a}], 0x3, 0x0) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x13) dup(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') getdents64(r4, 0xffffffffffffffff, 0x43) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000001c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@nostrict}, {@unhide}, {@uid}, {@shortad}, {@gid}, {@shortad}, {@utf8}]}, 0x4, 0xc3d, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtJW/TzG42zodzMbCBbL3ZRbK8axVvQI4VkQXjNSsrF0sLGluyO6w0kiW5eEMJLiSUkLa4hJLLGjaB3tVXLYQG3KttCQHRq9KL4rYbs72bBNKWXqzKmXlHGmltS/hDknd/P2P/5+M5c94zq0dzzuy8cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPj6N04ODae9HgUAsJvOTL45NOL1HwA+Uc45/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHspivhupHj3B6003b7eMXC60bxydWp84u6LDaZIUYmiXV/+HRg+OnLslVePj3bz/ss/al+INybPnaydWphfXJpdXp6dqU01GxcWZmZ3/AgPu/xWR9pPQG3+7SszFy8u146+PLLp7qvVOweePlQ9MXp45K1u7dT4xMRkT01f/wOv/SPSo3soPkaeiiK+GSnee+mDVI+ISjx8L2zzu+NxG4y+sv/aGzE1PtHekLlGvblS3pkquaovotqz0Fi3R3ahFx/KWMS18r9TOeAj5eZNLtaX6ufnZmtn60srjZXGQjNVOqMtt6calRhNEYsR0Sr2evDsN/1RxLFIcefXrXQ+IopuH7x4ZvLNoZHtH6BvFwZ5j9VWi4jVeAJ6FvapA1HEX0SKH04PxYXcV+22eT/iK2W+FnG5zFsprufrqfwFMRrxK68n8ETriyJ+ESkWUivNdHu/vV95+lu115sXF3pqu/uVT/zxwW6yb8I+NhBFnG/v8bfSg7/ZBQAAAAAAAAAAAADsjiJ+Giluzr+QFqN3Tmmjeal2rn5+rvOp4O5n/2t5qbW1tbVq6mQt51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5Wzmjktefs5ZzKOdYzrM5p3Mu5ryW83rOGzlv5ryVczXn7ZytnGHeEwAAAAAAAAAAAAAAAAAAAI/YYBQxESluvPuH7fNKR/u89J8+MXpm/Lnec8Z/bpvHKWtfjoifxs7OydufzzWeKuWfR79dwPYGoojv5PP//fFeDwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgXKlHEdyPFj37TSpEiYixiOjp5u9jr0QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApYFUxKlI8V/fGGhfX42IL0bEh2vln4j/Xdtqr0cMAAAAAAAAAAAAAAAAAAAAH0OpiMuR4sfvtVI1Iq5W7xx4+lD1xOjhkbeKKCKVJb31b0yeO1k7tTC/uDS7vDw7U5tqNi4szMzudHUDpxvNK1enxicey8Zsa/Axj39w4NTC4jtLjUt/sHLX+w8OnDy/vLJUv3D3u2Mw+iKGem850h7w1PhEe9BzjXqzvWiq3GOAfRG1nW4MAAAAAAAAAAAAAAAAAAAA+8bBVMT476V4/mfHUnfeeF9nzv+nOteK9dqf/NHGdwHMbcmu3u8P2MnltNOBHmlPvK9NjU9MTPbc3Nf/0dJyTCkV8dlIcfjvP9+eD5/i4F3nxpd1fxopRv/vWK6rHi7rxjZVDRyZGp+onVlovnRybm7hQn2lfn5utja5WL+w4y8OAAAAAAAAAAAAAAAAAAAAgPs4mIr4s0hx7PXV1D3vfJ7/39e51jP//7WI7mnnB9LmXNee2//b7bn9ncufPjH6+tHn73X745j/X44ppSI+jBTP/NXn2+fT787/H9pSW9b9OFL84ntfynWVp8q64e7mdB7xYmNudqisfTFSfP9stzbata/m2s9s1A6Xtf8QKZ79/c21x3Ptcxu1R8vaO5Fi4szdaz+7UTtS1g5Giq/+Sa1be7Cs/XquPbRR+/KFhbmZnT69fDKV/f9vkeLLw99M3Z/5e/Z/z/d/XNuS6z7S8/e//Kj6v9pz27Xc12u5/4e36f/LkeLPr38p13V672i+/5n2vxv9//1I8Tuf2lz7Sq59dqN2eKebBXup7P9/ihSrt/9l/Wc+93/urI0O7e3/L/Ztzu5+waPt/79srF/cpv+f6bmtmsc18iBPCHyCLL/z7bfrc3OzSy644MITeaGIx/HIe/2bCXjcyv3//44UX7tcpO5xbN7//63OtY3j///5zsb+/4ktuW6Pjv+f7bntRD5q6e+LGFiZX+z/XMTA8jvffqkxX780e2m2OTIyevx3jw0fPT7c/1TEQEpzs0PtS+3D/B0/d/CkK/v/7Ujxk7/55/X3sTcf/9/9/b+DW3LdHvX/Z3q3adNxzY6fCvjEKfv/ryPFv974YP3/N93v/b/u+3wvPL85B7tFe9T/z/XcVsv/jPbc9kIRcXKn6wIAAAAAAAAAgCfEwVTEzyLF37b+cf2c95s//xNf7tb2fv7vXvbD+f8BgPsrX/8nI8XPD341db9DZief/5/Zkuv26PO/h3pum9mlec07fpIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOABpSjiQKR49wetdLsor3cMnG40r1ydGp+4+2KDKVJUomjXl38Hho+OHHvl1eOj3bz/8o/aF+KNyXMna6cW5heXZpeXZ2dqU83GhYWZ2R0/wsMuv9WR9hNQm3/7yszFi8u1oy+PbLr7avXOgacPVU+MHh55q1s7NT4xMdlT09f/wGv/iPToHoqPkaeiiJ9Hivde+iD9exFRiYfqhb7Y/nfH4zbYHsWR9kZMjU+0N2SuUW+ulHemysZIqz0LjXV7ZBd68aGMRVyLiEo54CPl5k0u1pfq5+dma2frSyuNlcZCM1U6oy23pxqVGE0RixHRKvZ68Ow3/VHE30WKO79upf8oIopuH7x4ZvLNoZHtH6BvFwZ5j9VWi4jVeAJ6FvapA1HEc5Hih9ND8Z9Fp6/abfN+xFfKfC3icpm3UlzP11P5C2I04ldeT+CJ1hdFnI0UC6mV3i9y77f3K09/q/Z68+JCT213v/J+xweDO1jnnh8f7Cb7JuxjA1HEL9t7/K30S6/nAAAAAAAAAAAAALDPFfG1SHFz/oXUnh+6Pqe00bxUO1c/P9eZ9tv97H8tL7W2trZWTZ2s5RzKOZbzbM7pnIs5r+W8nvNGzps5b+VczXk7ZytnVPL6c9ZyDuUcy3k253TOxZzXcl7PeSPnzZy3cq7mvJ2zlTN8ThoAAAAAAAAAAAAAAAAAgMekEkV8L1L86DettFZ0zi87HZ28bZ4rfKz9fwAAAP//QYxGsA==") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000000200)) 11.258869612s ago: executing program 1 (id=3325): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000016000000180000ea1800000003000000000000000000000700000000000000000000000d00000000003000"], 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/84, 0x54}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r5 = eventfd(0x0) eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 10.69272733s ago: executing program 1 (id=3326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=0']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='check=strict,overriderockperm,cruft\x00iocharset=cp932,check=relaxed,nojoliet,check=relaxed,nojoliet,\x00'], 0x3d, 0x549, &(0x7f0000000c40)="$eJzs3WFv00YYwPHHpYUukxAaE0JVgaNsUpFKcBwIinjlOZf0wLEj20HtK1TRFFWkMFEmrX2z8YZt0vYheLsPsW+E9hGYbCeloU0DlDao+/8iuIt99j3nRn7kNj4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy6vZdskS3wTtJTWcV4vC5ru3va33LJDrA8UB/YpY6T+ZnpaL+aKL375bfSH9b05m83ezMp0W07L99YVzd89PTvS3PyDgY7G5tf1kpdvtPB93IEfo0pnh6xo6MHFomm5DKxOHqlqp2DcX67GqG1/Hy3Gim8qLtJuEkZr3rqtStVpWurgctoNGzfV1f+GdG45tV9S9Yku7URwGN+8VY2/R+L4JGlmbdHXa5k76QbxvEpVot6nU2nq3Ux41gLRR6UMaOaMaObbjlEqOU6rcrt6+Y9uTexbY75E9Lcb/ocV4fcazN3A4E738L74YCaQtS6L2fXlSk0hCaQ5Z39PP/9/f1Af2uzv/97P8xXerZyTL/5fzd5eH5f8hsRzfa1O2ZFueyIp0pSsdeT72iI731RAtgRiJJRQjTXGzJaq3RElVKlIRWx7KotQlFiV1MeKLlliWJZZEdPaJ8iQSLa4kEkokSubFk+uipCRVqUpZlGgpyrKE0pZAGlITN9vLmqxnx70syhoW406j0tBhFPqfu444B4yW/I/D+6znb+Aw3vbzPwAAAAAAOLGs7Lfv6fX/lFzKanXja3vcYQEAAAAAgM8o+8v/bFpMpbVLYnH9DwAAAADASWNl99hZIlKQK3ltTazsdil+CQAAAAAAwAmR/f3/clpkc6BcEWtnuhSu/wEAAAAAOCF+HznHftw6Y/3zr0TRlPWytfSdteGm7dyNU/l2p97fY1Kfsc72dpIVlbyYnPT0rDWdN9qZBPNNr1gbFYe1XwC/fkwA5yflT7mat7m6mper/TV5L4W68XXRC/27JXHdsxOJXkp+err+s2TD/yNonrVkbb3bKT561l3NYnmZ7uXlRm8CxT3zKB4Qy4tsvoXsnot9RzyV3YjR67eQ92vvHv9EvvnER/T5SubyNnO9GW8Lg+OfTvssFQdGn67biWJa1rud0iFH/kqu5W2uzV/Li32icIrDfga9Y+HsjuKTjsXeKKz3oyiPiqJ8yCgAYFzWRmQha2/i/4Sz3Kdld/nI7P5K5vM28zPZiXVyZp+8Yo86o9uHzG5/73kG0rAcm/b7106/eVZ9nW7wemi/se9Y6SE89WLjR7mwubV9Y31j5XHnceep45Qr9i3bvu3IVDaMXrEr0rdnyD0AgNzoZ+yMbGHdyq+qz4nsf1X9zc5XCorySJ5JV1ZlIbvbIPvGwb57Lez6GsLCiKvWQpYm8ye8LBxwbXk6u8uhv1/nwLaDMZSP40cBAMCxmRuRhz8k/y+MuO4ezOWDV8enZVjb0rEfCwAA/i909MYqJL9ZUWRaD0vVaslNFrWKQu++ikytoZUJEh15i27Q0KoVhUnohX5aeWBqOlZxu9UKo0TVw0i1wtgsZU9+V71Hv8e66QaJ8eKWr91YKy8MEtdLVM3EX6lW+wffxIs6yjaOW9ozdeO5iQkDFYftyNNFpWKtdzU0NR0kpm7SaqBakWm60bJ6EPrtplaWWBKZVhLmO+z3ZYJ6GDWz3RbHfbABAPhCbG5tP1npdjvPj7Ay7jECAIBBZGkAAAAAAAAAAAAAAAAAAAAAAL58x3H/H5UTXulPBf2lxHNEFeukD3CgMvLU8cuRn5wAHKn/AgAA//9FAkx+") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003010040"]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x0, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, 0xffffffffffffffff, 0x0) 7.203524257s ago: executing program 4 (id=3335): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x550, &(0x7f0000000b80)="$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") r0 = socket$inet(0x2b, 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) sendmsg$unix(r4, &(0x7f00000016c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80442, &(0x7f0000000400)={'trans=virtio,', {[{@access_client}, {@msize={'msize', 0x3d, 0xe}}, {@access_client}, {@uname={'uname', 0x3d, 'udf\x00'}}, {@cache_loose}, {}, {@noextend}, {@mmap}], [{@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}]}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)=0x3) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 6.057379915s ago: executing program 4 (id=3336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0xa000000c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r7) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r7}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 5.928603695s ago: executing program 0 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x4, 0x0, 0x1}}, 0xb8}}, 0x4000040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000de"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @dev}, &(0x7f0000000280)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000fbff8500000004000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffbff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x100, 0x0, &(0x7f0000000200), 0x41000, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x5, 0x4}, 0x10, 0xab51, r6, 0x8, &(0x7f00000004c0)=[0xffffffffffffffff, r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000500)=[{0x5, 0x2, 0x7, 0x9}, {0x1, 0x3, 0x5, 0x7}, {0x4, 0x5, 0xa, 0xb}, {0x5, 0x1, 0x1, 0xc}, {0x0, 0x4, 0xd, 0x9}, {0x3, 0x2, 0xa, 0x6}, {0x4, 0x1, 0x3, 0xc}, {0x1, 0x2, 0x9, 0x9}], 0x10, 0x1, @void, @value}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r9, 0xf501, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r12, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0xcc, r12, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae0}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x78a7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x6}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4001}, 0xc010) 5.915412256s ago: executing program 3 (id=3288): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x22a, &(0x7f0000000540)="$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") socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x800, 0x7fff}, {0x2, 0x96}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x1}, @ext={0x0, 0x0}}, {0x3, 0x0, 0x0, 0x0, @time={0xdb, 0x7}, {0x1, 0x82}, {}, @connect}], 0x54) ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f00000018c0)) sendmmsg$alg(r4, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="36d53d9ef645a160d0c0ee6ee3e9b0d397a723c6c9bad6891c548faf0363d6d41fc53934f54d4244c9eff439af60d2190faa3ef5d0b4b583be77ebf82f79d7439407da7392f8e841b2d07908af54be4c0961510fee4a248e35051749123b01bd934e3d", 0x63}, {&(0x7f0000000300)="f96b3effd32cd604a1f48f7f0acd40e9daaeff9282e8353fdda651df362fafc493e836d401473b19bc2489b337198323dde4a7b618e04ee22f30e9f132b124abc9ac53659eb9821d6fea3cc8143e37d2428cbef3ab50df515e429a072215456b200e20e027e95d019cc6fb18906362b6a331a30db859b536efd0556584765e6ad7fcdb00a8b6f3534dc15fb502fd12076707d1a35de2", 0x96}, {&(0x7f00000003c0)="cf67d3b73521abda80546c7ab2dd5602064a65ce28b91d5b85a8aa6c07c5c6fce0b15d0c2ca584c514bc7cd7b897c919b1bcbb60a9d3e49dcd9b2b1c08a6762725dec2cc0dcc2b0c3ddeb8a2b5fdf145cc01c6b46f0e736a14ab41742d0e96fcd9780e11768a8b3f441c1a183df7ecc510dd1690aa0093496eeaf333c3ddf22dc332e22bace46bbede93fd24aa415c061fdefc06f578df1a8729d47f1bc3088c9c7bf5a5da4b27d27dcdee8024990146f9c72ecd1f27eedc52a114a02d2036", 0xbf}], 0x4, &(0x7f0000000780)=[@iv={0xf8, 0x117, 0x2, 0xde, "fa55d7ca51b3703b845573fd1710d98a2c3ee5a4a8c02115cd3a97f3a995513afed13cb423d9577ea0561e1f47eed1a05d5bf7b4be8c0b3883b72b7af67b64a26c8f122e5f5b5f968a68a5c1438a3101291b8e7e00441aedfc72c53ad5dc48d99dcb6ec480f2d9e780869049ec04125ef91142df621de13382f0c4df4c13e1214be5e77890990fc99c98604c45b7084a91babf058509bba3b4ea557ca23e64abb5afd33bd599af5817bf6994819bd4da3160155b98abca1ca0cdc0e4d5164b86f743d8125ede2ce223af0b3d6e70d8fb6099ee7d557ef55324189f9b26b9"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x110, 0x40000}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)="94256fb6", 0x4}, {&(0x7f00000008c0)="3792609bbeda48057cd3b6205a1a5174417732c12baea73f1814c8d403d65cd49ca57b61fcc4dd4e3f894ebf271c78a9085d2e8a5f20a6e1afd45edbb6e46b3bb9a561d0870811799ff54b27074b1a5c458e55f3a268430bb99b74ae1bd1210aab3ee8e8aa40c866a0766d4929af5e282e78ee9939c052663faa9040fc12d1384b8f1d7057e5af717a71c8d10e1edf0bd4d587d0b224954f11f428b3ecb91bed7b84855b67c820fded2af56c3b147200bb99fab6f19fe171671ec810357be541a1751f14a01bf28dc7795ff775d1d86f6462e5b97e7da036bf1e6b9510743e7ae7d3584b", 0xe4}, {&(0x7f00000009c0)="3b7ea4266cd7cd35f834f3456ae5a162da287e0c5874cc0eccd0ebc56d5ccda410438e2064b3d2229b212e7f25ab9cf0d9af7c67ff8f440d85381f695f855d91d2ecfc7f87b397d3817edd028280dac1e444b868694650f1f8c5cc65bb27da164cbbfafc305883d2eb6053a7a7c94f36df99c7e32879a960bb8a65c5741bd8b316eab4f14b796c8591452f945be6c150a2f0cdb553eed270803dfcb3858ce356a4a13d7ccdf51fec29b7ece63b8f9ed38011d8ccc086ccabeb43578db34aa9a0faf17d833ae14b147a8406ec2a1cab5351ff164584ea3c588dedb80bbff0c67b2a4b04e937d4b56ebe2922fcaf5e8c1f04ecc18ba1d7d7ee", 0xf8}, {&(0x7f0000000480)="0b03530da10d4d43836bb9981ba10885105fe5725dd6f19be8de9ae788dfc685dd2ee0934966be24e8ab2e01dd6878ea75ef35bf4c7eedb7c2fc400a80b23b5fa7bf3f12ed223a675ccf759df3cd69ce4c966e050916c9", 0x57}, {&(0x7f0000000ac0)="a21da793327d32188a359ef3cd27364eba5126a71be1e06ab238db680a7ec0ee66821154b2b24fe83d42cb1da232bd27f023c318cb2bb389f421d5412137c1919020c410902b3f8ddd6f677c78dd6c8612a633c40578ff1932b1605ba5cf19bc6d43a11873765dffd30ba028f179984b2f1b8eb45a96662c9f0c0355c0b96cef966ae412f3c86d606f3349648705db51457f432dbbd5dc45e649a6eeba4e469253940dfe9a75b49299c0b7e3c38f2bb705cf2f1aa1767fbef00c298e88d1c8ded381b9198f327a7c9afae55e918a959fcf3ac9fa47e54eee635c798b083443fc4b4af46b30f2496c650798bbe24f9d7c7bbdabb7725a", 0xf6}, {&(0x7f0000000bc0)="b45068090dc0a7a45f9c2e4c0df4b96e3c3b014abd1a0edb437f81bcb18a8b8d56446bc4b9eca3ab87f536eaaa01451e855b778939fde69a0273ea032f1a4f7881505155c19c1cac4db49604c8aa3b3d8bf557bfff3943116be1a8544893a8d42e606041444228adedbc808000752f72b6844cbcf976c186bc7a80b13b5a85797d6c5cb3563f0d6608cfa59f0e87b2a50c92949bef4ec8d658bb8603c17ec04f41a3c9a283b860de28d6e7cef951a93a0635d0a6a6348222f2688e0f73417518656ba2261b1cde02af6f2a0c1ffaba9f", 0xd0}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20040040}], 0x2, 0x20008011) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000080)=0xfffffffffffffff8) 5.550580657s ago: executing program 0 (id=3338): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './control\x00'}) r1 = io_uring_setup(0x4b05, &(0x7f0000001740)={0x0, 0x1002b29, 0x2, 0xfffffffe, 0x7, 0x0, r0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r2 = syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xc0849, 0x0, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mknod(0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) chdir(&(0x7f0000002340)='./bus\x00') syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000080)='./control/file0\x00', 0x4080, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC, @ANYRES64=r2], 0x2, 0xc2d, &(0x7f0000001900)="$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") mkdir(&(0x7f0000000440)='./control\x00', 0x0) r6 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x91500, 0x2) rmdir(&(0x7f0000000000)='./control\x00') close(r6) rmdir(&(0x7f0000000040)='./control/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x302, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002f00)={0x2, 0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007280)=[{0x0}, {0x0, 0x2}], 0x0, 0x2}, 0x20) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64=r3], 0xfd, 0x1511, &(0x7f0000002f40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5.51736076s ago: executing program 4 (id=3339): r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2d00230f8404316e551256d55aa726eca5addb4b476292748d522552f7d9df1be001d2663159c666ce892a133f640233905124d3fa6fb86eed0b2769a0d020a9da97cbecad68af93ce94a70cb40dc8c1e8a1a685c4df6c78d4d666c9616c04ac051fc2de7e36503c254a7c2b9fa63a823f53f07b84895ebd2670e2392a0ea684a29bb453dd74131fa989a4647161360ebbc1a655df7d"]) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x15) r3 = dup(r1) ioprio_set$pid(0x0, 0x0, 0x4007) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145442, 0x0) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x82) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES32], 0x54}}, 0x800) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000002", @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0xc4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="9a", 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r8, 0x4004560e, &(0x7f00000000c0)) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) 5.385889522s ago: executing program 4 (id=3340): r0 = io_uring_setup(0x7d5, &(0x7f0000000300)) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040)=0x3e8, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140), 0xee, 0x482, &(0x7f0000000980)="$eJzs3EtsG0UfAPD/rvPo80u+Uh4tLQQKouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCgqHcgNV4o44InFH4gQXRDkgJK5wR5Uq1EsLJ6O1d1PHtVOnduoU/37SOjO7a838PTvr8YydAPrWWPaQRGyJiN8jYqSWXX7CWO3PjWvnZ/6+dn4miUrljb+S6nnXr52fKU4tnre5lqlUIoaz5HCTci++HTFdLs+dyfMTi6fem1g4e+65E6emj88dnzs9dfjwgf27hw5NHewovjT/m8V1feeH87t2vPLWpddmjl565/I3WX235Mfr47gjWbQNxmqvbqNHs4cnOypsXfkle9hatyMZaH3y+F2oEO0rRUTWXIPV/j8Spdi4dGwkXv6kp5UD1lSlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599ia2fcsKE7w4+eW7hc+wCUxX0j32pHBpbmDgYbPt9201hEHL3wz5fZFt2YhwAAuI3vj0TEs83Gf2k8UJy0p7ZKMhIRoxHx/4jYFhH3RcT2iLg/onrugxHx0CrLb1whuXX8k165s8jac/VIxAv52tby8V8x+ovRUp7bWo1/MDl2ojy3LyL+FxF7Y3A4y0+uUMYPL/32eZFuHDfXj/+yLSu/GAvm9bgy0DBBNzu9ON1p3IWrH0fsHGgWfxLFMk4SETsiYucdlnHi6a93tTp2+/hXsMI6U7sqX0U8VWv/C7Es/ptNlbRcn5x8/tDUwYkNUZ7bN1FcFbf6+deLr7cqv6P4uyBr/01Nr/+lVeDRZEPEwtlzJ6vrtQurL+PiH5/W9ellq8tZ/Om3Eau+/oeSN6vpoXzfB9OLi2cmI4aSV2/dP3XzuUW+OD+Lf++e5v1/W12NH46I7CLeHRGP5Iu4Wds9FhGPZ7fIFeL/6cUn3m11rHX7rzAr30VZ/LO3a/+ob//VJ0onf/xu9fEXsvY/UE3tzfe0c/9rt4KdvHYAAABwr0ir34FP0vGldJqOj9e+w789NqXl+YXFZ47Nv396tvZd+dEYTIuZrpG6+dDJfG64yE815Pfn88ZflDZW8+Mz8+XZXgcPfW5zi/6f+bPU69oBa64L62jAPUr/h/6l/0P/0v+hf+n/0L+a9f+PelAP4O7z/g/9S/+H/qX/Q//S/6EvtfxtfNrRT/57nCj+d8J6qU+PEhvXsohIex/gGiY+SyLWQTXOnjs5sNaX8XDTQy1vGaN37eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQBf8GAAD//3J84eA=") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20044840) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80000000, 0x2000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettid() sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x4000010) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x0, 0x3, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r6, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 5.084163267s ago: executing program 0 (id=3341): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2a, 0x0, @empty=0x1000000}, 0xb, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) inotify_init1(0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x1, 0x200, &(0x7f0000000880)="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"}) 4.5784124s ago: executing program 3 (id=3342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = getpid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setreuid(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000700)={0x8001}) r4 = syz_pidfd_open(r2, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x9, 0xde4b, 0xfff, 0xfffffff7, 0x6}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001180)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x40095505, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000069078ac0314bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000b0780000"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r6, &(0x7f0000000000)={0x10}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) 4.469947019s ago: executing program 0 (id=3343): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x24000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005c7f8e20d3131133d7ea01020301090212000100000000090400"], 0x0) memfd_create(0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000004c0)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES64=r3, @ANYRES16, @ANYRES32, @ANYBLOB="0c00990000000200000000000800a0008a0900000800260094030000080027"], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x24000014) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3}]}, 0x98}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.073958663s ago: executing program 4 (id=3344): getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) socket$can_j1939(0x1d, 0x2, 0x7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc1) io_uring_setup(0x5bc9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{0xffffffffffffffff, 0x2}], &(0x7f0000001440), 0x1}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x43, 0x0, 0x0, 0x100, 0xf, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xa, 0x5, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r2, r2, r2], &(0x7f0000000480)=[{0x5, 0x3, 0x2, 0x6}], 0x10, 0x3, @void, @value}, 0x90) acct(&(0x7f0000000080)='./file0\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) getpriority(0x2, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7}) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x0, [0x0, 0xffff, 0x5]}, &(0x7f0000000540)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00'}, 0x24) 3.918519266s ago: executing program 3 (id=3345): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x22a, &(0x7f0000000540)="$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") socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x800, 0x7fff}, {0x2, 0x96}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x1}, @ext={0x0, 0x0}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f00000018c0)) sendmmsg$alg(r4, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="36d53d9ef645a160d0c0ee6ee3e9b0d397a723c6c9bad6891c548faf0363d6d41fc53934f54d4244c9eff439af60d2190faa3ef5d0b4b583be77ebf82f79d7439407da7392f8e841b2d07908af54be4c0961510fee4a248e35051749123b01bd934e3d", 0x63}, {&(0x7f0000000300)="f96b3effd32cd604a1f48f7f0acd40e9daaeff9282e8353fdda651df362fafc493e836d401473b19bc2489b337198323dde4a7b618e04ee22f30e9f132b124abc9ac53659eb9821d6fea3cc8143e37d2428cbef3ab50df515e429a072215456b200e20e027e95d019cc6fb18906362b6a331a30db859b536efd0556584765e6ad7fcdb00a8b6f3534dc15fb502fd12076707d1a35de2", 0x96}, {&(0x7f00000003c0)="cf67d3b73521abda80546c7ab2dd5602064a65ce28b91d5b85a8aa6c07c5c6fce0b15d0c2ca584c514bc7cd7b897c919b1bcbb60a9d3e49dcd9b2b1c08a6762725dec2cc0dcc2b0c3ddeb8a2b5fdf145cc01c6b46f0e736a14ab41742d0e96fcd9780e11768a8b3f441c1a183df7ecc510dd1690aa0093496eeaf333c3ddf22dc332e22bace46bbede93fd24aa415c061fdefc06f578df1a8729d47f1bc3088c9c7bf5a5da4b27d27dcdee8024990146f9c72ecd1f27eedc52a114a02d2036", 0xbf}], 0x4, &(0x7f0000000780)=[@iv={0xf8, 0x117, 0x2, 0xde, "fa55d7ca51b3703b845573fd1710d98a2c3ee5a4a8c02115cd3a97f3a995513afed13cb423d9577ea0561e1f47eed1a05d5bf7b4be8c0b3883b72b7af67b64a26c8f122e5f5b5f968a68a5c1438a3101291b8e7e00441aedfc72c53ad5dc48d99dcb6ec480f2d9e780869049ec04125ef91142df621de13382f0c4df4c13e1214be5e77890990fc99c98604c45b7084a91babf058509bba3b4ea557ca23e64abb5afd33bd599af5817bf6994819bd4da3160155b98abca1ca0cdc0e4d5164b86f743d8125ede2ce223af0b3d6e70d8fb6099ee7d557ef55324189f9b26b9"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x110, 0x40000}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)="94256fb6", 0x4}, {&(0x7f00000008c0)="3792609bbeda48057cd3b6205a1a5174417732c12baea73f1814c8d403d65cd49ca57b61fcc4dd4e3f894ebf271c78a9085d2e8a5f20a6e1afd45edbb6e46b3bb9a561d0870811799ff54b27074b1a5c458e55f3a268430bb99b74ae1bd1210aab3ee8e8aa40c866a0766d4929af5e282e78ee9939c052663faa9040fc12d1384b8f1d7057e5af717a71c8d10e1edf0bd4d587d0b224954f11f428b3ecb91bed7b84855b67c820fded2af56c3b147200bb99fab6f19fe171671ec810357be541a1751f14a01bf28dc7795ff775d1d86f6462e5b97e7da036bf1e6b9510743e7ae7d3584b", 0xe4}, {&(0x7f00000009c0)="3b7ea4266cd7cd35f834f3456ae5a162da287e0c5874cc0eccd0ebc56d5ccda410438e2064b3d2229b212e7f25ab9cf0d9af7c67ff8f440d85381f695f855d91d2ecfc7f87b397d3817edd028280dac1e444b868694650f1f8c5cc65bb27da164cbbfafc305883d2eb6053a7a7c94f36df99c7e32879a960bb8a65c5741bd8b316eab4f14b796c8591452f945be6c150a2f0cdb553eed270803dfcb3858ce356a4a13d7ccdf51fec29b7ece63b8f9ed38011d8ccc086ccabeb43578db34aa9a0faf17d833ae14b147a8406ec2a1cab5351ff164584ea3c588dedb80bbff0c67b2a4b04e937d4b56ebe2922fcaf5e8c1f", 0xf0}, {&(0x7f0000000480)="0b03530da10d4d43836bb9981ba10885105fe5725dd6f19be8de9ae788dfc685dd2ee0934966be24e8ab2e01dd6878ea75ef35bf4c7eedb7c2fc400a80b23b5fa7bf3f12ed223a675ccf759df3cd69ce4c966e050916c9", 0x57}, {&(0x7f0000000ac0)="a21da793327d32188a359ef3cd27364eba5126a71be1e06ab238db680a7ec0ee66821154b2b24fe83d42cb1da232bd27f023c318cb2bb389f421d5412137c1919020c410902b3f8ddd6f677c78dd6c8612a633c40578ff1932b1605ba5cf19bc6d43a11873765dffd30ba028f179984b2f1b8eb45a96662c9f0c0355c0b96cef966ae412f3c86d606f3349648705db51457f432dbbd5dc45e649a6eeba4e469253940dfe9a75b49299c0b7e3c38f2bb705cf2f1aa1767fbef00c298e88d1c8ded381b9198f327a7c9afae55e918a959fcf3ac9fa47e54eee635c798b083443fc4b4af46b30f2496c650798bbe24f9d7c7bbdabb7725a", 0xf6}, {&(0x7f0000000bc0)="b45068090dc0a7a45f9c2e4c0df4b96e3c3b014abd1a0edb437f81bcb18a8b8d56446bc4b9eca3ab87f536eaaa01451e855b778939fde69a0273ea032f1a4f7881505155c19c1cac4db49604c8aa3b3d8bf557bfff3943116be1a8544893a8d42e606041444228adedbc808000752f72b6844cbcf976c186bc7a80b13b5a85797d6c5cb3563f0d6608cfa59f0e87b2a50c92949bef4ec8d658bb8603c17ec04f41a3c9a283b860de28d6e7cef951a93a0635d0a6a634", 0xb6}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20040040}], 0x2, 0x20008011) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000080)=0xfffffffffffffff8) 2.849289677s ago: executing program 3 (id=3346): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000284850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000380), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x1, 0x2, 0x4, 0x4, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98}}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='afs_call\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20e", 0x2, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) mknod$loop(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.764219474s ago: executing program 4 (id=3347): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000480)) write(r3, &(0x7f0000000600)="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", 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000002c0)=""/226) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.58144911s ago: executing program 2 (id=3305): timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000080)="d3967696f869cc53bf48accfe191562cdbae50c2d03234dc7921788794df9996bdc7f99142aeedb0c79c0ea7141aaa270d7fca7479"}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r10, r8, r9}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='security'], &(0x7f0000000100)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in6=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0) 1.388090051s ago: executing program 0 (id=3348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioprio_get$uid(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x0, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) 1.363816404s ago: executing program 2 (id=3349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x100000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000040)=0x1b, 0x4) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a3240, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x0, 0x2, 0x6, 0x9, 0x100}, @call={0x85, 0x0, 0x0, 0xa4}, @call={0x85, 0x0, 0x0, 0x49}, @call={0x85, 0x0, 0x0, 0xb8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4f1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) dup3(r8, r4, 0x80000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, '.'}}], [], 0x2c}) fchown(r6, 0x0, 0x0) 702.57642ms ago: executing program 3 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x80000001, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x46040, &(0x7f0000000240)={[{@bh}]}, 0x1, 0x769, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) getsockopt$inet_int(r2, 0x10d, 0x0, &(0x7f0000000940), &(0x7f0000000080)=0x4) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/21, 0x15) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22000, 0x114) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="180000000000000000005e17179000000000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYBLOB="4617350f71adb2856e82b8778a213917c73e36ca72bd6a74863c6136d2c12afb655712f514eec00c51d94b8b9dfb15d4e45eaf4931fc2a3ea409687cb4bd2af7951c8c05110c538c59086760921572f51143828d9d12fab97f8334a77750daa3e52232d186f8758ffc66e1b13f8f998d602541420ab1beabf19c6385bd6a78836fb8396e62225ae31003e357fd10e950a4cecdbcabf2caa613a199cb927288f775868cc7", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x7, 0x2, 0x0, 0x6, 0x0, [0x40, 0x6, 0xfffffffa, 0x4]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES64=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 628.884396ms ago: executing program 0 (id=3351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(0x0, 0x0, 0xada66a977c02d739) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1, 0x5b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200010600000000000005"], 0x1c}], 0x1}, 0x0) 601.378058ms ago: executing program 2 (id=3352): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffd, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) listen(r10, 0x0) sendmmsg$unix(r9, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10], 0x18}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r10, r8]}}], 0x18}}], 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_newaddrlabel={0x1c, 0x48, 0x8d5e98d5e2a3556b}, 0x1c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000500)=@multiplanar_fd={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c4f2737f"}, 0x0, 0x4, {0x0}}) set_mempolicy(0x3, &(0x7f0000000000)=0x8000000000000001, 0x9) set_mempolicy(0x0, &(0x7f0000000100), 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x0) 0s ago: executing program 3 (id=3353): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003c80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x25, 0x4}}}}, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x105982, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r3, r2, 0x0, 0x9205) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000100)={0x1}) r5 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x802) fcntl$setstatus(r5, 0x4, 0x2800) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_BMAP(r6, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x35}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) unshare(0x2a060400) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0585609, &(0x7f0000001680)={0x0, 0x9, 0x0, "d8ef5d46bab9d328096ff00a9956801adfee37d04bd2a343af577962d8428ccd"}) fchownat(r1, &(0x7f0000000040)='./file0\x00', r7, r8, 0x400) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000400)={0x1, [0x994]}) poll(&(0x7f0000000000), 0x51, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x23}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004055}, 0x24004080) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000000d4"], 0x78) syz_usb_connect$cdc_ncm(0x1, 0x77, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000ff2505a1a4400001020301090265000201a250050904000001020d0000072406000153d905240001000d240f0101040000b902f5700106241a01f0000724140800010109058103000200267f0904010000020d00000904010102020d00000905820220000601010905030200040000075005ff8c56623736df0000000000008a52ee86e35cdabe62c51b38ce264b0a11c22b7b5270a8e1923c48768d8c5bd09730f51e5542ee581eb83a5273226517f032d9eb76e7740569c25528d5bc1edbb6a33ea9044e743721bd91e8fb"], &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9d, 0x40, 0x3, 0x8, 0x52}, 0x40, &(0x7f0000000440)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "cf353e06608cb68a8cff7a8a7bac1b81"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xfff, 0x0, 0x4, [0x3f, 0xffcf, 0xc000, 0xff00cf, 0xc00f, 0xcf]}]}}) kernel console output (not intermixed with test programs): intk_skb: 10 callbacks suppressed [ 1271.502966][ T26] audit: type=1800 audit(2000001002.509:633): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3021" name="bus" dev="loop1" ino=1048855 res=0 errno=0 [ 1272.921052][T17146] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 1272.921052][T17146] program syz.4.3022 not setting count and/or reply_len properly [ 1273.576925][T17142] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1273.591802][T17142] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1273.602534][T17142] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1273.606727][T17148] netlink: 'syz.4.3026': attribute type 1 has an invalid length. [ 1273.610170][T17142] UDF-fs: Scanning with blocksize 512 failed [ 1273.671677][T17142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1273.830157][T16738] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1273.889443][T16738] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1273.983068][T17157] loop3: detected capacity change from 0 to 4096 [ 1274.128307][T17157] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1274.140184][T17157] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1274.154064][T17157] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1274.169425][T17157] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1274.181742][T17157] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1274.195140][T17157] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1274.210338][T17157] ntfs: volume version 3.1. [ 1274.215443][T17157] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1274.227514][T17157] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1274.799605][T17157] ntfs: (device loop3): ntfs_read_locked_inode(): Index collation rule is not COLLATION_FILE_NAME. [ 1275.207452][T17156] loop3: detected capacity change from 0 to 512 [ 1275.292009][T17156] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1275.303668][T17156] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 1275.370081][ T3652] hid-generic 0000:0000:0000.0011: item fetching failed at offset 0/2 [ 1275.469223][ T3652] hid-generic: probe of 0000:0000:0000.0011 failed with error -22 [ 1275.942879][T17184] loop4: detected capacity change from 0 to 512 [ 1275.993385][ T3558] Bluetooth: hci4: command 0x0406 tx timeout [ 1276.002092][T17184] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1276.874358][T17187] mmap: syz.4.3039 (17187): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1276.938687][T17192] netlink: 'syz.1.3041': attribute type 2 has an invalid length. [ 1276.947485][T17192] netlink: 'syz.1.3041': attribute type 1 has an invalid length. [ 1277.252617][T17199] program syz.3.3044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1277.465223][T17207] binder: 17196:17207 ioctl c0306201 20000680 returned -14 [ 1278.254736][T17211] loop1: detected capacity change from 0 to 164 [ 1278.331702][ T3669] Bluetooth: hci2: command 0x0409 tx timeout [ 1278.355323][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 1278.397779][T17211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1278.439399][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1278.546809][T17225] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.555593][T17225] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.564425][T17225] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.573221][T17225] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.594108][T17225] device vxlan0 entered promiscuous mode [ 1278.664806][T17185] chnl_net:caif_netlink_parms(): no params data found [ 1278.710296][T17232] loop3: detected capacity change from 0 to 512 [ 1278.723605][T17234] netlink: 'syz.0.3052': attribute type 2 has an invalid length. [ 1278.751812][T17234] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 1278.809860][T17232] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1278.892687][T17232] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1278.900110][T17232] EXT4-fs (loop3): mount failed [ 1280.394780][T16460] Bluetooth: hci2: command 0x041b tx timeout [ 1281.063169][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.175402][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.206220][T17185] device bridge_slave_0 entered promiscuous mode [ 1281.244461][T17267] loop4: detected capacity change from 0 to 1024 [ 1281.333007][ T9] device hsr_slave_0 left promiscuous mode [ 1281.341535][ T9] device hsr_slave_1 left promiscuous mode [ 1281.402603][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.454610][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.515465][T17271] binder: 17265:17271 ioctl c0306201 20000380 returned -14 [ 1281.580914][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.614402][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.664985][ T9] device bridge_slave_1 left promiscuous mode [ 1281.704889][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.753856][ T9] device bridge_slave_0 left promiscuous mode [ 1281.781370][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.820828][ T9] device hsr_slave_0 left promiscuous mode [ 1281.843215][ T9] device hsr_slave_1 left promiscuous mode [ 1281.871021][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.882815][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.899008][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.907404][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.922123][ T9] device bridge_slave_1 left promiscuous mode [ 1281.935452][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.983743][ T9] device bridge_slave_0 left promiscuous mode [ 1282.007543][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.037483][ T9] device hsr_slave_0 left promiscuous mode [ 1282.052974][ T9] device hsr_slave_1 left promiscuous mode [ 1282.109715][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.233762][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.247004][T17283] netlink: 'syz.3.3065': attribute type 2 has an invalid length. [ 1282.256190][T17283] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 1282.260745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.350787][T17284] loop1: detected capacity change from 0 to 512 [ 1282.668428][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.682034][ T9] device bridge_slave_1 left promiscuous mode [ 1282.690869][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.719284][ T9] device bridge_slave_0 left promiscuous mode [ 1282.726733][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.821507][T17284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1282.947857][ T9] device veth1_macvtap left promiscuous mode [ 1282.953896][ T9] device veth0_macvtap left promiscuous mode [ 1282.974894][ T9] device veth1_vlan left promiscuous mode [ 1282.984465][T17284] EXT4-fs (loop1): 1 truncate cleaned up [ 1282.990265][T17284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1283.026499][ T9] device veth0_vlan left promiscuous mode [ 1283.053988][ T9] device veth1_macvtap left promiscuous mode [ 1283.060281][ T9] device veth0_macvtap left promiscuous mode [ 1283.066852][ T9] device veth1_vlan left promiscuous mode [ 1283.072882][ T9] device veth0_vlan left promiscuous mode [ 1283.087425][ T9] device veth1_macvtap left promiscuous mode [ 1283.093808][ T9] device veth0_macvtap left promiscuous mode [ 1283.100664][ T9] device veth1_vlan left promiscuous mode [ 1283.106870][ T9] device veth0_vlan left promiscuous mode [ 1283.116689][ T3669] Bluetooth: hci2: command 0x040f tx timeout [ 1284.114819][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1284.134713][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1284.148249][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.162136][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.234565][ T9] bond0 (unregistering): Released all slaves [ 1284.373094][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1284.386594][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1284.399849][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.413576][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.464166][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1284.499709][ T9] bond0 (unregistering): Released all slaves [ 1284.624551][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1284.640964][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1284.656082][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.675694][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.751057][ T9] bond0 (unregistering): Released all slaves [ 1284.812891][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.821968][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.832767][T17185] device bridge_slave_1 entered promiscuous mode [ 1284.959600][T17185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.991344][T17185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.062030][T17305] loop1: detected capacity change from 0 to 1024 [ 1285.596459][T17305] hfsplus: extend alloc file! (8192,65536,366) [ 1285.748838][ T3669] Bluetooth: hci2: command 0x0419 tx timeout [ 1285.756225][T17185] team0: Port device team_slave_0 added [ 1285.872327][T17185] team0: Port device team_slave_1 added [ 1286.000211][T17311] loop4: detected capacity change from 0 to 2048 [ 1287.030006][T17311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1287.043938][T17311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1287.054789][T17311] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1287.062492][T17311] UDF-fs: Scanning with blocksize 512 failed [ 1287.074419][T17311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.143422][T17324] loop1: detected capacity change from 0 to 1024 [ 1287.154136][T16585] UDF-fs: error (device loop4): udf_read_inode: (ino 834) failed !bh [ 1287.168538][T16585] UDF-fs: error (device loop4): udf_read_inode: (ino 834) failed !bh [ 1287.181087][T17185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.254771][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.360521][T17324] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 1287.435480][T17185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.646745][T17333] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2745: inode #12: comm syz.1.3076: corrupted in-inode xattr [ 1288.350696][T17185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.357702][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.431591][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1288.431601][ T26] audit: type=1326 audit(2000001019.480:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1288.551391][ T26] audit: type=1326 audit(2000001019.480:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.261996][T17185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.396487][T17340] loop1: detected capacity change from 0 to 164 [ 1289.418025][ T26] audit: type=1326 audit(2000001019.510:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.558643][ T26] audit: type=1326 audit(2000001019.510:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.670700][ T26] audit: type=1326 audit(2000001019.510:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.709549][T17347] netlink: 'syz.1.3084': attribute type 2 has an invalid length. [ 1289.722487][T17185] device hsr_slave_0 entered promiscuous mode [ 1289.740908][T17185] device hsr_slave_1 entered promiscuous mode [ 1289.748229][T17347] netlink: 'syz.1.3084': attribute type 1 has an invalid length. [ 1289.772623][ T26] audit: type=1326 audit(2000001019.510:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.860789][ T26] audit: type=1326 audit(2000001019.510:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x7ffc0000 [ 1289.908980][T17185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.933706][T17185] Cannot create hsr debugfs directory [ 1290.695426][T17360] loop3: detected capacity change from 0 to 256 [ 1290.744920][T17185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.764208][T17185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.775734][T17360] exfat: Deprecated parameter 'utf8' [ 1290.789965][T17360] exfat: Deprecated parameter 'namecase' [ 1290.820087][T17360] exfat: Deprecated parameter 'namecase' [ 1290.825762][T17360] exfat: Deprecated parameter 'utf8' [ 1291.428502][T17360] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1291.614405][T17185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.642909][T17185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.361665][T11971] Bluetooth: hci0: command 0x0409 tx timeout [ 1292.405183][T17185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.587778][T17185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.612588][T17352] chnl_net:caif_netlink_parms(): no params data found [ 1292.856988][T17381] futex_wake_op: syz.0.3090 tries to shift op by 36; fix this program [ 1293.223189][T17385] loop1: detected capacity change from 0 to 512 [ 1294.216986][T17385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1294.239715][T17185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.259627][T17398] netlink: 'syz.3.3094': attribute type 2 has an invalid length. [ 1294.281727][T17185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.290149][T17398] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 1294.293997][T17385] EXT4-fs (loop1): 1 truncate cleaned up [ 1294.305543][T17385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1294.413317][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 1294.725061][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.777568][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.809676][T17352] device bridge_slave_0 entered promiscuous mode [ 1294.863346][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.904612][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.941767][T17352] device bridge_slave_1 entered promiscuous mode [ 1295.158849][T17352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.255554][T17352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.368868][T17185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1295.402124][T17185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1296.364398][T17352] team0: Port device team_slave_0 added [ 1296.438370][T17352] team0: Port device team_slave_1 added [ 1296.477915][T17185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1296.490832][T11974] Bluetooth: hci0: command 0x040f tx timeout [ 1296.500748][T17185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1296.575996][T17352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.591383][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.683107][T17352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.695939][T17352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.703233][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.732039][T17352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.838076][T17352] device hsr_slave_0 entered promiscuous mode [ 1296.854207][T17352] device hsr_slave_1 entered promiscuous mode [ 1296.863368][T17352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.871525][T17352] Cannot create hsr debugfs directory [ 1297.043177][ T3653] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1297.105535][T17352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.133930][T17352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.200268][T17352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.213216][T17352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.263357][T17185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.287158][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1297.296077][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1297.336200][T17352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.363526][T17352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.383304][T17432] loop3: detected capacity change from 0 to 2048 [ 1297.405938][T17185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.423554][ T3653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.441398][T17432] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1297.455421][T17432] NILFS (loop3): unrecognized mount option "ªªªªªª" [ 1297.476404][ T3653] usb 2-1: config 0 has no interfaces? [ 1297.482013][ T3653] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1297.502796][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.538378][ T3653] usb 2-1: config 0 descriptor?? [ 1297.574589][T17352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.587980][T17352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.607428][T17421] loop1: detected capacity change from 0 to 256 [ 1298.682783][T17421] FAT-fs (loop1): Unrecognized mount option "uni_xlatc=0" or missing value [ 1298.715985][T11971] Bluetooth: hci0: command 0x0419 tx timeout [ 1298.905832][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1298.933727][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1298.969262][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.976422][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.017229][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1299.110203][T17421] mkiss: ax0: crc mode is auto. [ 1299.150416][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1299.177912][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1299.196539][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.203618][T12230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.217898][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1299.228458][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1299.246864][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1299.268065][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1299.285877][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1299.309977][T17185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1299.333962][T17185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1299.363375][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1299.379198][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1299.394424][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1299.404003][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1299.423313][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1299.446783][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1299.463862][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1299.528339][ T1396] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.550350][T17352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1299.576580][T17352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1299.591743][T17352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1299.651108][T17352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1299.779526][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1299.807721][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1299.912721][T17185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.973797][ T5901] usb 2-1: USB disconnect, device number 28 [ 1300.014640][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1300.054079][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1300.196427][T17352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.304834][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1300.386830][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1300.836264][T17461] 9pnet: Insufficient options for proto=fd [ 1300.855682][T17185] device veth0_vlan entered promiscuous mode [ 1300.891576][T17352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.930153][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1300.946475][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1300.964599][T17463] Cannot find add_set index 0 as target [ 1300.982593][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1301.011655][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1301.057978][T17185] device veth1_vlan entered promiscuous mode [ 1301.084356][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1301.138033][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1301.155530][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.162609][T12230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.203281][T17465] loop1: detected capacity change from 0 to 736 [ 1301.283890][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1301.296350][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1301.335878][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1301.364605][T17465] rock: directory entry would overflow storage [ 1301.371321][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.378420][T12230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.386187][T17465] rock: sig=0x3b10, size=4, remaining=3 [ 1301.392872][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1301.561010][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1301.571367][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1301.590800][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1301.600095][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1301.621511][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1301.638640][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1301.702243][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1301.713884][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1301.727223][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1301.779974][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1301.832249][T17352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.871450][T17352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1301.912596][T17185] device veth0_macvtap entered promiscuous mode [ 1301.920676][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1301.932282][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1301.946012][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.605447][T17185] device veth1_macvtap entered promiscuous mode [ 1302.655738][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1302.678138][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.761255][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.817107][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.834692][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.846264][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.863834][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.875398][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.898145][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.913587][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.926151][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.948631][T17185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.971135][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1303.017234][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1303.066385][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.101155][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.139291][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.194218][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.212051][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.226740][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.337249][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.356503][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.374473][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.397889][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.419538][T17185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.498250][T17491] loop3: detected capacity change from 0 to 512 [ 1303.546439][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.572038][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1304.554070][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.812279][T17493] loop1: detected capacity change from 0 to 32768 [ 1304.883580][T17185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.896652][T17185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.905521][T17185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.915339][T17491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1304.925574][T17185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.934409][T17493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3117 (17493) [ 1304.993011][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1305.012409][T17491] EXT4-fs (loop3): 1 truncate cleaned up [ 1305.018584][T17491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1305.037079][T17493] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1305.048454][T17493] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1305.056556][T17493] BTRFS info (device loop1): max_inline at 0 [ 1305.062609][T17493] BTRFS info (device loop1): enabling disk space caching [ 1305.069697][T17493] BTRFS info (device loop1): turning off barriers [ 1305.076132][T17493] BTRFS info (device loop1): turning on flush-on-commit [ 1305.083140][T17493] BTRFS info (device loop1): doing ref verification [ 1305.089873][T17493] BTRFS info (device loop1): force clearing of disk cache [ 1305.097115][T17493] BTRFS info (device loop1): enabling ssd optimizations [ 1305.104121][T17493] BTRFS info (device loop1): max_inline at 4096 [ 1305.110468][T17493] BTRFS info (device loop1): disk space caching is enabled [ 1305.117688][T17493] BTRFS info (device loop1): has skinny extents [ 1305.124885][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1305.132982][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1305.346812][T12259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.369615][T12039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.433150][T12259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.472750][T12039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.495153][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1305.552518][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1305.559307][T17493] BTRFS info (device loop1): clearing free space tree [ 1305.568148][T17493] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1305.578311][T17493] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1305.756390][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1305.831927][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1305.941631][T17352] device veth0_vlan entered promiscuous mode [ 1305.949323][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1307.008920][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1307.545854][T17540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1307.742070][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1307.762881][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1307.778256][T17352] device veth1_vlan entered promiscuous mode [ 1307.857429][T17552] loop2: detected capacity change from 0 to 164 [ 1307.938936][T17552] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1308.023647][T17552] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.032621][T17552] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.041461][T17552] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.050209][T17552] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.070365][T17552] device vxlan0 entered promiscuous mode [ 1308.162692][T17352] device veth0_macvtap entered promiscuous mode [ 1308.181186][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1308.193972][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1308.259747][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1308.304240][T17572] loop1: detected capacity change from 0 to 8 [ 1308.314400][T17565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1308.370419][T17352] device veth1_macvtap entered promiscuous mode [ 1308.379959][T17572] SQUASHFS error: xz decompression failed, data probably corrupt [ 1308.399015][T17572] SQUASHFS error: Failed to read block 0x108: -5 [ 1308.408066][T17568] loop2: detected capacity change from 0 to 2048 [ 1308.417449][T17572] SQUASHFS error: Unable to read metadata cache entry [106] [ 1308.466354][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.470225][T17572] SQUASHFS error: Unable to read inode 0x0 [ 1308.493218][T17568] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1308.505919][T17568] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1308.516707][T17568] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1308.525545][T17568] UDF-fs: Scanning with blocksize 512 failed [ 1308.536893][T17568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1308.579803][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.613450][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.624046][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.636277][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.646757][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.662648][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.673232][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.689012][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.699825][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.716076][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.731745][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.743311][T17352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.752790][T17185] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1308.773536][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1308.781903][T17185] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1309.026160][T17577] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 1309.026160][T17577] program syz.1.3129 not setting count and/or reply_len properly [ 1309.700053][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1309.710442][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.749483][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.789647][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.839497][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.865270][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.889548][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.911526][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.939716][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.964450][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.989631][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.009609][T17352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.052599][T17352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.160478][T17352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.457457][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1310.472518][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1310.507980][T17352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.547916][T17352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.573835][T17352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.586858][T17594] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3135'. [ 1310.593088][T17352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.765594][T17599] loop3: detected capacity change from 0 to 164 [ 1310.813991][T17601] loop1: detected capacity change from 0 to 1024 [ 1310.899545][T17599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1310.915697][T17601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1310.940113][T17601] EXT4-fs (loop1): Ignoring removed orlov option [ 1310.946809][T17601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1311.025678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.073933][T17601] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,quota,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 1311.162575][T17599] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.171340][T17599] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.180010][T17599] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.189176][T17599] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.200732][T17599] device vxlan0 entered promiscuous mode [ 1311.258923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.390217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.554510][T12259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.600193][T17607] loop1: detected capacity change from 0 to 2048 [ 1311.633822][T12259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.684167][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.694465][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1311.896022][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.904104][ T26] audit: type=1326 audit(2000001042.938:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1311.912874][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1311.926464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.192995][T17607] loop1: p2 < > p3 p4 < > [ 1312.295781][T17607] loop1: partition table partially beyond EOD, truncated [ 1312.475575][T17607] loop1: p2 start 4294902784 is beyond EOD, truncated [ 1312.526450][ T26] audit: type=1326 audit(2000001043.148:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1312.561264][T17607] loop1: p3 start 4278191616 is beyond EOD, truncated [ 1312.794628][ T26] audit: type=1326 audit(2000001043.698:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1312.848629][ T26] audit: type=1326 audit(2000001043.698:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1312.919642][T11622] udevd[11622]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1312.980844][ T26] audit: type=1326 audit(2000001043.698:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.040014][ T26] audit: type=1326 audit(2000001043.698:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.141902][ T26] audit: type=1326 audit(2000001043.698:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.165846][ T26] audit: type=1326 audit(2000001043.698:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.188648][ T26] audit: type=1326 audit(2000001043.698:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.210798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.218506][ T26] audit: type=1326 audit(2000001043.698:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cee8bff9 code=0x7ffc0000 [ 1313.241154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.350889][T17612] chnl_net:caif_netlink_parms(): no params data found [ 1313.487621][T17653] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3148'. [ 1313.517510][T17655] loop3: detected capacity change from 0 to 164 [ 1313.569146][ T9] device hsr_slave_0 left promiscuous mode [ 1313.581985][ T9] device hsr_slave_1 left promiscuous mode [ 1313.635381][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.650479][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'. [ 1313.692939][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.715961][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.770155][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.847284][ T9] device bridge_slave_1 left promiscuous mode [ 1313.865690][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.876623][T17659] loop4: detected capacity change from 0 to 1024 [ 1313.887200][ T9] device bridge_slave_0 left promiscuous mode [ 1313.923694][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.949803][ T9] device hsr_slave_0 left promiscuous mode [ 1313.970368][ T9] device hsr_slave_1 left promiscuous mode [ 1313.988433][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.008512][T17659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1314.011650][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.088661][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.118037][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.160913][ T9] device bridge_slave_1 left promiscuous mode [ 1314.202475][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.222684][ T9] device bridge_slave_0 left promiscuous mode [ 1314.228902][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.277956][ T9] device veth1_macvtap left promiscuous mode [ 1314.407309][ T9] device veth0_macvtap left promiscuous mode [ 1314.413907][ T9] device veth1_vlan left promiscuous mode [ 1314.419971][ T9] device veth0_vlan left promiscuous mode [ 1314.439413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.446850][ T9] device veth1_macvtap left promiscuous mode [ 1314.456044][ T9] device veth0_macvtap left promiscuous mode [ 1314.463659][ T9] device veth1_vlan left promiscuous mode [ 1314.543301][T17673] loop1: detected capacity change from 0 to 512 [ 1314.551089][ T9] device veth0_vlan left promiscuous mode [ 1314.652282][T16460] Bluetooth: hci2: command 0x0409 tx timeout [ 1315.139034][T17673] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1315.176238][T17673] EXT4-fs (loop1): 1 truncate cleaned up [ 1315.181948][T17673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1315.516928][T17678] loop4: detected capacity change from 0 to 512 [ 1315.643855][T17678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1315.766687][T17678] EXT4-fs (loop4): 1 truncate cleaned up [ 1315.772633][T17678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1316.427938][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1316.567457][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1316.638820][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.694352][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.104446][T11283] Bluetooth: hci2: command 0x041b tx timeout [ 1317.336385][ T9] bond0 (unregistering): Released all slaves [ 1317.505830][T17689] xt_CONNSECMARK: invalid mode: 0 [ 1317.685631][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 1317.859887][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1317.873832][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1317.888335][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.902438][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.983571][ T9] bond0 (unregistering): Released all slaves [ 1318.073387][T17612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.106093][T17612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.158248][T17612] device bridge_slave_0 entered promiscuous mode [ 1318.167698][T17612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.179719][T17612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.212495][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'. [ 1318.222929][T17612] device bridge_slave_1 entered promiscuous mode [ 1318.321456][T17702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1318.518096][T17697] befs: (loop1): No write support. Marking filesystem read-only [ 1318.574964][T17612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.054694][T17612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.102312][T17697] print_req_error: 2 callbacks suppressed [ 1319.102803][T17697] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1319.142797][T17697] befs: (loop1): unable to read superblock [ 1319.151726][T16462] Bluetooth: hci2: command 0x040f tx timeout [ 1319.236301][T17711] overlayfs: './file0' not a directory [ 1320.294233][T17612] team0: Port device team_slave_0 added [ 1321.191386][T17726] loop3: detected capacity change from 0 to 164 [ 1321.215276][T16462] Bluetooth: hci2: command 0x0419 tx timeout [ 1321.380367][T17612] team0: Port device team_slave_1 added [ 1321.453923][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1321.552473][T17612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.565787][T17612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.715382][T17743] loop3: detected capacity change from 0 to 164 [ 1322.264627][T17612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.452054][T17612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.490695][T17612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.671698][T17612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.298751][T17550] Bluetooth: hci1: command 0x0406 tx timeout [ 1325.043992][T17612] device hsr_slave_0 entered promiscuous mode [ 1325.410560][T17612] device hsr_slave_1 entered promiscuous mode [ 1325.431686][T17766] loop1: detected capacity change from 0 to 164 [ 1326.397185][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1326.554927][T17772] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1327.385436][T17772] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1327.637411][T17793] loop1: detected capacity change from 0 to 512 [ 1328.387099][T17612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.439594][T17793] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1328.449858][T17612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.483576][T17793] EXT4-fs (loop1): 1 truncate cleaned up [ 1328.489334][T17793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1328.615362][T17612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.717395][T17612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.923043][T17612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.987031][T17612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.095352][T17612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.115940][T17612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.268946][T17612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1329.281328][T17612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.296662][T17612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1329.326682][T17612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1329.429902][T17612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.455582][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1329.504329][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1329.578862][T17612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.700673][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1329.735803][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1329.880075][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.887274][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.961958][T17806] loop1: detected capacity change from 0 to 512 [ 1330.167372][T17806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1330.202747][T17806] EXT4-fs (loop1): 1 truncate cleaned up [ 1330.208422][T17806] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1330.238412][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1330.322575][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1330.720660][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1330.729289][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.736427][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.808968][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1330.834285][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1330.880725][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1330.924328][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1330.993278][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1331.021568][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1331.092567][T17818] loop1: detected capacity change from 0 to 164 [ 1331.112028][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1331.137739][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1331.162767][T17612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1331.198204][T17612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1331.227005][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 1331.227671][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1331.267478][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1331.302253][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1331.572027][T17829] loop3: detected capacity change from 0 to 512 [ 1331.719851][T17829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1332.081616][T17829] EXT4-fs (loop3): 1 truncate cleaned up [ 1332.087396][T17829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1333.323365][T17837] QAT: Device 0 not found [ 1333.349097][T17839] xt_CONNSECMARK: invalid mode: 0 [ 1333.350310][T15908] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1333.390078][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1333.399299][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1333.426393][T15908] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1333.440753][T17612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.475914][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1333.554784][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1333.569064][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1334.508391][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1334.541027][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1334.808260][T17853] loop3: detected capacity change from 0 to 2048 [ 1334.923219][T17855] loop4: detected capacity change from 0 to 512 [ 1336.291597][T17612] device veth0_vlan entered promiscuous mode [ 1336.310261][T17612] device veth1_vlan entered promiscuous mode [ 1336.547561][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1336.629592][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1336.702087][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1336.841185][T17855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1337.717594][T17855] EXT4-fs: failed to create workqueue [ 1337.723095][T17855] EXT4-fs (loop4): mount failed [ 1337.760418][T17864] loop1: detected capacity change from 0 to 4132 [ 1337.785017][T17853] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1337.785844][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1337.800558][T17853] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1337.814342][T17853] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1337.822066][T17853] UDF-fs: Scanning with blocksize 512 failed [ 1337.841877][T17853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1337.844919][T17612] device veth0_macvtap entered promiscuous mode [ 1337.865392][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1337.888401][T17612] device veth1_macvtap entered promiscuous mode [ 1337.997418][T17864] __ntfs_error: 4 callbacks suppressed [ 1337.997436][T17864] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 1. [ 1338.014740][T17864] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1338.028205][T17864] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1338.043512][T17864] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1338.052385][T17864] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1338.065470][T17864] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1338.078108][T17864] ntfs: volume version 3.1. [ 1338.084184][T17864] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1338.096267][T17864] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1338.101617][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.131583][T17864] ntfs: (device loop1): ntfs_read_locked_inode(): Index collation rule is not COLLATION_FILE_NAME. [ 1338.142727][T17864] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xb as bad. Run chkdsk. [ 1338.156864][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.157269][T17866] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3206'. [ 1338.166918][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.166939][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.166963][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.166975][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.166999][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.167011][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.167029][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.167040][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.168592][T17612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.390956][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.410006][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.429887][T17863] loop1: detected capacity change from 0 to 512 [ 1338.448964][T17863] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1338.458702][T17863] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 1338.483870][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.519026][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.561295][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.623887][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.634003][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.644826][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.665786][T17870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3206'. [ 1338.722200][T17872] loop3: detected capacity change from 0 to 2048 [ 1339.102532][T17612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.121545][T17612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.192541][T17872] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1339.207871][T17872] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1339.218547][T17872] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1339.226992][T17872] UDF-fs: Scanning with blocksize 512 failed [ 1339.248175][T17872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.274966][T17612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.295504][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1339.308442][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1339.331197][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1339.369471][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1339.466548][T17612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.477893][T16892] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 1339.501805][T16892] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 1339.527264][T17612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.569848][T17612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.600433][T17612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.407335][T17882] loop1: detected capacity change from 0 to 1024 [ 1340.490667][T17882] hfsplus: failed to load root directory [ 1341.066726][T17886] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3211'. [ 1342.508081][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.347367][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.394016][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1343.415095][T12259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.434212][T12259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.490325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1343.649700][T15908] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1343.853278][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'. [ 1343.934233][T17907] chnl_net:caif_netlink_parms(): no params data found [ 1343.991092][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.005004][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.068013][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.079910][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.106769][T17907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.114366][T17907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.131087][T17907] device bridge_slave_0 entered promiscuous mode [ 1344.148951][T17907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.266847][T17925] kernel profiling enabled (shift: 17) [ 1344.309090][T11973] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1344.318332][T15908] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1344.328631][T17907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.339053][T15908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.505828][T17907] device bridge_slave_1 entered promiscuous mode [ 1344.507332][T15908] usb 5-1: config 0 descriptor?? [ 1344.560387][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.570870][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.598724][T17907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.610460][T17907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.644271][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.654754][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.677815][T11973] usb 3-1: Using ep0 maxpacket: 32 [ 1344.705128][T17907] team0: Port device team_slave_0 added [ 1344.721111][T17907] team0: Port device team_slave_1 added [ 1344.904527][T17903] netlink: 'syz.4.3217': attribute type 3 has an invalid length. [ 1344.925002][T17907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.927336][T11973] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1344.932251][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.957800][T11973] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1596, setting to 1024 [ 1344.969007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.969406][T17907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.251584][T17907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.275649][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.301628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.383754][T17936] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1345.401328][T17907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.444206][T15908] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1345.450509][T11973] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1345.460257][T11973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.526093][T17913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1345.536196][T17936] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1345.556011][T11973] hub 3-1:4.0: USB hub found [ 1345.567612][T15908] gs_usb 5-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 1345.580164][T15908] gs_usb: probe of 5-1:0.0 failed with error -71 [ 1345.749640][T15908] usb 5-1: USB disconnect, device number 27 [ 1345.777818][T11973] hub 3-1:4.0: 2 ports detected [ 1345.850503][T11973] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1345.853510][ T3652] Bluetooth: hci3: command 0x0409 tx timeout [ 1346.487959][T11973] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1346.495505][T11973] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1346.582153][T17907] device hsr_slave_0 entered promiscuous mode [ 1346.651664][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.659939][T11973] usb 3-1: USB disconnect, device number 49 [ 1346.808462][T17907] device hsr_slave_1 entered promiscuous mode [ 1347.570301][T17907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1347.642137][T17907] Cannot create hsr debugfs directory [ 1347.642170][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1347.831461][T17971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1347.948618][ T3653] Bluetooth: hci3: command 0x041b tx timeout [ 1350.097605][ T3653] Bluetooth: hci3: command 0x040f tx timeout [ 1350.146415][T17996] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1350.209361][T18002] loop1: detected capacity change from 0 to 164 [ 1350.298707][T18003] usb usb1: usbfs: process 18003 (syz.4.3236) did not claim interface 0 before use [ 1350.419561][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1350.550955][T18003] fuse: Unknown parameter 'dont_appraise' [ 1350.732556][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1350.868935][T17907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1351.171768][T17907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1351.199504][T17907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1351.313397][T18031] loop2: detected capacity change from 0 to 1024 [ 1351.410708][T18031] hfsplus: failed to load root directory [ 1351.521534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.030112][T17907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1352.203978][T16463] Bluetooth: hci3: command 0x0419 tx timeout [ 1352.492026][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1352.492064][ T26] audit: type=1804 audit(2000001083.438:655): pid=18038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3244" name="/newroot/6/file0/file1" dev="overlay" ino=50 res=1 errno=0 [ 1353.472434][T17907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.557213][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.580762][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.597151][T17907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.781357][ T9] device hsr_slave_0 left promiscuous mode [ 1353.800313][T18061] loop1: detected capacity change from 0 to 164 [ 1353.849723][ T9] device hsr_slave_1 left promiscuous mode [ 1353.856286][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.863888][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.882917][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.897956][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.937077][ T9] device bridge_slave_1 left promiscuous mode [ 1353.951463][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.979412][ T9] device bridge_slave_0 left promiscuous mode [ 1354.006100][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.038265][ T9] device hsr_slave_0 left promiscuous mode [ 1354.072774][ T9] device hsr_slave_1 left promiscuous mode [ 1354.093921][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.114470][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.155109][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.168726][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1354.194898][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.221807][ T9] device bridge_slave_1 left promiscuous mode [ 1354.243417][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.275107][ T9] device bridge_slave_0 left promiscuous mode [ 1354.281350][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.375593][ T9] device veth1_macvtap left promiscuous mode [ 1354.390761][ T9] device veth0_macvtap left promiscuous mode [ 1354.399615][ T9] device veth1_vlan left promiscuous mode [ 1354.418560][ T9] device veth0_vlan left promiscuous mode [ 1354.461282][ T9] device veth1_macvtap left promiscuous mode [ 1354.471433][ T9] device veth0_macvtap left promiscuous mode [ 1354.478248][ T9] device veth1_vlan left promiscuous mode [ 1354.484293][ T9] device veth0_vlan left promiscuous mode [ 1354.833299][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1354.850563][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1354.866058][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.879971][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.957488][ T9] bond0 (unregistering): Released all slaves [ 1355.122137][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1355.149885][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1355.190396][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.208761][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.737250][ T9] bond0 (unregistering): Released all slaves [ 1355.789966][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1355.799037][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1355.809514][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.816676][T12039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.826795][T18078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1355.871243][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1355.902332][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1355.993412][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1356.189218][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.196398][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.232948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.035703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1357.074297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1357.141646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1357.195439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1357.244763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1357.287872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.344567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1357.380270][T18124] loop4: detected capacity change from 0 to 2048 [ 1357.391586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.470383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1357.509432][T18124] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1357.527313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.564345][T17907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1357.585511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.632859][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1357.640885][T18124] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1357.809385][T18124] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1358.023138][T18124] UDF-fs: Scanning with blocksize 512 failed [ 1358.535447][T18124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1358.969735][T18158] loop2: detected capacity change from 0 to 512 [ 1359.599694][T18159] loop1: detected capacity change from 0 to 1024 [ 1359.616386][T18158] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1359.624526][T18158] System zones: 0-2, 18-18, 34-35 [ 1359.631401][T18158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1359.642568][T18158] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 1360.741003][T18169] loop2: detected capacity change from 0 to 164 [ 1360.769211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1360.829890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1360.858867][T17907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.057637][ T1396] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.070351][T18169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1361.498725][T18169] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.507586][T18169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.516452][T18169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.525268][T18169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.872184][T18169] device vxlan0 entered promiscuous mode [ 1362.000529][T17907] device veth0_vlan entered promiscuous mode [ 1362.022150][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1362.116119][T18190] xt_limit: Overflow, try lower: 0/0 [ 1362.160902][T18190] fuse: Unknown parameter 'fd0x0000000000000007' [ 1362.802633][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1362.819374][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1362.952775][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1362.979573][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1363.078340][T18200] loop2: detected capacity change from 0 to 512 [ 1363.762879][T18200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1363.763486][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1363.836777][T18200] EXT4-fs (loop2): 1 truncate cleaned up [ 1363.842456][T18200] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1363.971366][T17907] device veth1_vlan entered promiscuous mode [ 1364.066001][T17907] device veth0_macvtap entered promiscuous mode [ 1364.112328][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1364.176801][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1364.199692][T17907] device veth1_macvtap entered promiscuous mode [ 1364.233297][T18213] loop2: detected capacity change from 0 to 512 [ 1364.263910][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1364.277912][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1364.303671][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.316971][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.334001][T18216] loop1: detected capacity change from 0 to 8 [ 1364.340251][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.351096][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.362356][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.374116][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.384342][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.395258][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.407315][T17907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.414745][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.428564][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.440750][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.451349][T18213] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1364.466023][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.484239][T18216] SQUASHFS error: xz decompression failed, data probably corrupt [ 1364.496823][T18213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 1364.506779][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.517800][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.527966][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.539128][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.550009][T17907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.555505][T18216] SQUASHFS error: Failed to read block 0x108: -5 [ 1364.561233][T17907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.578792][T17907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.588212][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1364.589653][T18213] System zones: 1-12 [ 1364.617902][T18213] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.3275: corrupted in-inode xattr [ 1364.621731][T18216] SQUASHFS error: Unable to read metadata cache entry [106] [ 1364.637669][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1364.644039][T18216] SQUASHFS error: Unable to read inode 0x0 [ 1364.678724][T18213] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3275: couldn't read orphan inode 15 (err -117) [ 1364.692635][T17907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.701886][T17907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.715343][T17907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.725776][T18213] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 1364.751916][T17907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.891773][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1365.053307][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.555541][T18222] sg_write: data in/out 2012/42 bytes for SCSI command 0x0-- guessing data in; [ 1365.555541][T18222] program syz.1.3276 not setting count and/or reply_len properly [ 1365.733021][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.796039][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1366.259159][T12259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.272993][T12259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.320130][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.326783][T18229] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1366.458621][T18231] loop1: detected capacity change from 0 to 512 [ 1366.644414][T17550] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1366.989054][T18231] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1367.003675][T18231] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3279: invalid indirect mapped block 1 (level 1) [ 1367.018096][T18231] EXT4-fs (loop1): 1 truncate cleaned up [ 1367.023760][T18231] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1367.058649][T18230] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1367.288242][T17550] usb 3-1: Using ep0 maxpacket: 16 [ 1367.530601][T18243] loop3: detected capacity change from 0 to 2048 [ 1367.581164][T17550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1367.581241][T17550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1367.581353][T17550] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1367.581423][T17550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.613615][T18243] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1367.622471][T18243] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1367.622541][T18243] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1367.622575][T18243] UDF-fs: Scanning with blocksize 512 failed [ 1367.647035][T18243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1367.655901][T17550] usb 3-1: config 0 descriptor?? [ 1368.155526][T18229] udc-core: couldn't find an available UDC or it's busy [ 1368.155549][T18229] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1368.174443][T17550] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 1368.174477][T17550] hid-generic 0003:0158:0100.0013: unexpected long global item [ 1368.174780][T17550] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 1368.915182][T16463] usb 3-1: USB disconnect, device number 50 [ 1369.071819][T17907] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 1369.071982][T17907] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 1369.528962][T18254] loop1: detected capacity change from 0 to 512 [ 1369.672934][T18254] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3285: invalid indirect mapped block 256 (level 2) [ 1369.673643][T18254] EXT4-fs (loop1): 2 truncates cleaned up [ 1369.673667][T18254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1369.732867][T18257] loop2: detected capacity change from 0 to 512 [ 1369.735748][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1369.883841][T18257] kernel read not supported for file /file0 (pid: 18257 comm: syz.2.3286) [ 1369.884059][ T26] audit: type=1800 audit(2000001100.889:656): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3286" name="file0" dev="mqueue" ino=111805 res=0 errno=0 [ 1369.914011][T18257] loop2: detected capacity change from 0 to 256 [ 1370.229849][T18257] kernel read not supported for file /bus (pid: 18257 comm: syz.2.3286) [ 1370.230012][ T26] audit: type=1800 audit(2000001101.239:657): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3286" name="bus" dev="mqueue" ino=111806 res=0 errno=0 [ 1370.368082][T18268] loop4: detected capacity change from 0 to 128 [ 1370.466475][T18273] loop2: detected capacity change from 0 to 256 [ 1370.734852][T18263] chnl_net:caif_netlink_parms(): no params data found [ 1370.757201][T18273] FAT-fs (loop2): Directory bread(block 64) failed [ 1370.768162][T18273] FAT-fs (loop2): Directory bread(block 65) failed [ 1370.791615][T18273] FAT-fs (loop2): Directory bread(block 66) failed [ 1370.901793][T18273] FAT-fs (loop2): Directory bread(block 67) failed [ 1371.404472][T18273] FAT-fs (loop2): Directory bread(block 68) failed [ 1371.432037][T18273] FAT-fs (loop2): Directory bread(block 69) failed [ 1371.500307][T18273] FAT-fs (loop2): Directory bread(block 70) failed [ 1371.506863][T18273] FAT-fs (loop2): Directory bread(block 71) failed [ 1371.580625][T18273] FAT-fs (loop2): Directory bread(block 72) failed [ 1371.594188][T18273] FAT-fs (loop2): Directory bread(block 73) failed [ 1371.729186][T18289] loop1: detected capacity change from 0 to 512 [ 1372.058207][T18289] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 1372.090040][T18289] EXT4-fs (loop1): mount failed [ 1372.554002][T18296] loop4: detected capacity change from 0 to 40427 [ 1372.561356][T17550] Bluetooth: hci3: command 0x0409 tx timeout [ 1372.612736][T18296] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1372.620544][T18296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1372.732279][T18263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.751069][T18263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.759875][T18263] device bridge_slave_0 entered promiscuous mode [ 1372.761966][T18296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1372.769869][T18263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.779869][T18263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.793796][T18263] device bridge_slave_1 entered promiscuous mode [ 1373.157950][T18296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1373.165772][T18296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1373.607573][T18296] cannot load conntrack support for proto=3 [ 1375.821140][T18324] loop2: detected capacity change from 0 to 2048 [ 1376.189561][T17550] Bluetooth: hci3: command 0x041b tx timeout [ 1376.274624][T18324] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1376.304513][T18263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.318431][T18324] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1376.329047][T18324] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1376.336786][T18324] UDF-fs: Scanning with blocksize 512 failed [ 1376.345757][T18326] 9pnet_virtio: no channels available for device syz [ 1376.372075][T18324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.405864][T18263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.603026][T17612] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1376.611335][T17612] UDF-fs: error (device loop2): udf_read_inode: (ino 834) failed !bh [ 1376.761258][T18263] team0: Port device team_slave_0 added [ 1377.030154][T18263] team0: Port device team_slave_1 added [ 1377.105694][T18263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.130036][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.217329][T18263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.280901][T18263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.452796][T18263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.542284][T18263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.641137][T18263] device hsr_slave_0 entered promiscuous mode [ 1377.668900][T18263] device hsr_slave_1 entered promiscuous mode [ 1377.691652][T18263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1377.718284][T18263] Cannot create hsr debugfs directory [ 1377.743754][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.763416][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.915746][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.961120][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.080694][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.131972][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.284482][ T3611] Bluetooth: hci3: command 0x040f tx timeout [ 1378.299560][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.343679][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.562430][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.648138][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.740429][T18340] chnl_net:caif_netlink_parms(): no params data found [ 1378.808380][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.944416][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.961866][T18340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.980357][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.008998][T18340] device bridge_slave_0 entered promiscuous mode [ 1379.041978][T18340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.053570][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.072164][T18340] device bridge_slave_1 entered promiscuous mode [ 1379.189548][T18340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.308080][T18340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.356140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.766110][T18381] loop1: detected capacity change from 0 to 2048 [ 1379.849949][T18381] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1379.885331][T16462] Bluetooth: hci2: command 0x0409 tx timeout [ 1379.892099][T18340] team0: Port device team_slave_0 added [ 1379.903577][T18381] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1379.915977][T18381] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1379.923784][T18381] UDF-fs: Scanning with blocksize 512 failed [ 1379.931721][T18385] i2c i2c-0: Invalid block write size 47 [ 1379.943426][T18340] team0: Port device team_slave_1 added [ 1380.003744][T18340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.054395][T18381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1380.063639][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.089571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.101053][T18340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.113993][T18340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.171540][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.329219][T18340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.364706][ T3611] Bluetooth: hci3: command 0x0419 tx timeout [ 1381.046964][T18340] device hsr_slave_0 entered promiscuous mode [ 1381.087817][T18340] device hsr_slave_1 entered promiscuous mode [ 1381.155969][T18340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.182118][T18340] Cannot create hsr debugfs directory [ 1381.255475][T18263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1381.307894][T18263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1381.360956][T18263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1381.382944][T18263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1381.965940][ T3652] Bluetooth: hci2: command 0x041b tx timeout [ 1382.518567][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.544096][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1382.561120][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1382.996772][T18263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.022789][T16463] Bluetooth: hci2: command 0x040f tx timeout [ 1386.227995][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1386.246715][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1386.275534][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.282671][ T8961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.384893][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1386.404197][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1386.404733][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1386.405059][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.405090][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.437708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1386.438492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1386.457000][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1386.462648][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1386.496481][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1386.497189][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1386.498779][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1386.522047][T18263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1386.642041][T18451] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1386.647681][T18263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1386.670864][T15882] UDF-fs: error (device loop1): udf_read_inode: (ino 834) failed !bh [ 1386.685432][T15882] UDF-fs: error (device loop1): udf_read_inode: (ino 834) failed !bh [ 1386.742721][ T26] audit: type=1326 audit(2000001117.731:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.0.3323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc530d8ff9 code=0x0 [ 1386.768432][ T3653] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1386.816401][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1386.827593][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1386.851582][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1386.860551][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1386.869763][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1387.066663][T18340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1387.091961][T16463] Bluetooth: hci2: command 0x0419 tx timeout [ 1387.095758][T18263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.126282][T18340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1387.173286][ T3653] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 1387.201089][ T3653] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1387.216503][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1387.231339][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1387.270865][T18340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1387.293652][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1387.311045][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1387.338961][T18340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1387.383942][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1387.392770][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1387.408814][ T3653] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1387.419653][ T3653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.421164][T18263] device veth0_vlan entered promiscuous mode [ 1387.427698][ T3653] usb 5-1: Product: syz [ 1387.448230][ T3653] usb 5-1: Manufacturer: syz [ 1387.477564][ T3653] usb 5-1: SerialNumber: syz [ 1387.511847][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1387.522711][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1387.532497][ T3653] rndis_wlan 5-1:7.0: skipping garbage [ 1387.549284][ T3653] usb 5-1: bad CDC descriptors [ 1387.568866][ T3653] rndis_host 5-1:7.0: skipping garbage [ 1387.574357][ T3653] usb 5-1: bad CDC descriptors [ 1387.580879][ T3653] option 5-1:7.0: GSM modem (1-port) converter detected [ 1387.652344][T18469] netlink: 688 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1387.668791][T18263] device veth1_vlan entered promiscuous mode [ 1387.802225][ T9] device hsr_slave_0 left promiscuous mode [ 1387.802690][ T9] device hsr_slave_1 left promiscuous mode [ 1387.803202][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.803250][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.803795][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.803819][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.804324][ T9] device bridge_slave_1 left promiscuous mode [ 1387.804430][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.805767][ T9] device bridge_slave_0 left promiscuous mode [ 1387.805877][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.808011][ T7] usb 5-1: USB disconnect, device number 28 [ 1387.808945][ T7] option 5-1:7.0: device disconnected [ 1387.846289][ T9] device hsr_slave_0 left promiscuous mode [ 1387.847661][ T9] device hsr_slave_1 left promiscuous mode [ 1387.849123][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.849179][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.849745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.849771][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.860590][ T9] device bridge_slave_1 left promiscuous mode [ 1387.860690][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.883113][ T9] device bridge_slave_0 left promiscuous mode [ 1387.883221][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.913275][ T9] device veth1_macvtap left promiscuous mode [ 1387.913323][ T9] device veth0_macvtap left promiscuous mode [ 1387.913395][ T9] device veth1_vlan left promiscuous mode [ 1387.913466][ T9] device veth0_vlan left promiscuous mode [ 1387.915731][ T9] device veth1_macvtap left promiscuous mode [ 1387.915773][ T9] device veth0_macvtap left promiscuous mode [ 1387.922258][ T9] device veth1_vlan left promiscuous mode [ 1387.922326][ T9] device veth0_vlan left promiscuous mode [ 1388.448484][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1388.455718][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1388.470680][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.483200][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.572692][ T9] bond0 (unregistering): Released all slaves [ 1388.865307][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1388.882331][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1388.895217][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.910434][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.986706][ T9] bond0 (unregistering): Released all slaves [ 1389.056322][T18263] device veth0_macvtap entered promiscuous mode [ 1389.071674][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1389.081010][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1389.089255][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1389.102379][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1389.111684][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1389.172261][T18263] device veth1_macvtap entered promiscuous mode [ 1389.266528][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.295065][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.322252][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.339205][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.349505][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1389.360762][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.380857][T18263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.404317][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.422836][T18508] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3331'. [ 1389.433709][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.447463][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.462112][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.472323][T18263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.499465][T18263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.536737][T18263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.544663][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1389.565020][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1389.594711][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1389.597478][T16463] Bluetooth: hci4: command 0x0409 tx timeout [ 1389.607526][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1389.624650][T18340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.656946][T18263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.667387][T18263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.676958][T18263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.706376][T18263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.743155][T18471] chnl_net:caif_netlink_parms(): no params data found [ 1389.973311][T18340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.003172][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1390.011526][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1390.026287][T18533] loop4: detected capacity change from 0 to 512 [ 1390.122261][T18533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1390.144486][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1390.169956][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1390.181565][T18533] EXT4-fs (loop4): 1 truncate cleaned up [ 1390.187271][T18533] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1390.221849][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.228973][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.260522][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.269524][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.278787][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.285926][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.295451][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1390.319755][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.358220][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1390.401542][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1390.435290][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1390.536151][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1390.551424][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1390.607484][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1390.622225][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1390.712382][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.761306][T18471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.768374][T18471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.786414][T18471] device bridge_slave_0 entered promiscuous mode [ 1390.805243][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.815107][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.847999][T18340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1390.886977][T18555] loop4: detected capacity change from 0 to 164 [ 1390.923209][T18471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.932131][T18471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.948258][T18471] device bridge_slave_1 entered promiscuous mode [ 1390.973585][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.997093][T18471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.025783][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.081964][T18471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.354297][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1391.417209][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.482779][T18564] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.495034][T18564] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.506338][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1391.517192][T18564] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.528597][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1391.538287][T18564] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1391.546038][T18564] UDF-fs: Scanning with blocksize 512 failed [ 1391.554598][T18564] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.566918][T18564] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.578265][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1391.588869][T18564] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.600296][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1391.609942][T18564] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1391.617737][T18564] UDF-fs: Scanning with blocksize 1024 failed [ 1391.625862][T18564] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.637818][T18564] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.649214][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1391.659572][T18564] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.670970][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1391.680729][T18564] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1391.688458][T18564] UDF-fs: Scanning with blocksize 2048 failed [ 1391.696359][T18564] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1391.730070][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1391.740421][T18564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1391.750258][T18564] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1391.757983][T18564] UDF-fs: Scanning with blocksize 4096 failed [ 1391.760153][ T3611] Bluetooth: hci4: command 0x041b tx timeout [ 1391.764087][T18564] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1391.812777][T18471] team0: Port device team_slave_0 added [ 1391.830581][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.887795][T18471] team0: Port device team_slave_1 added [ 1391.924864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1391.968900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1391.980276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1392.025513][T18573] loop3: detected capacity change from 0 to 8 [ 1392.076342][T18471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.085507][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.174819][T18471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.190619][T18471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.197560][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.229716][T18471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.237456][T18570] netlink: 'syz.0.3337': attribute type 4 has an invalid length. [ 1392.254391][T18573] SQUASHFS error: xz decompression failed, data probably corrupt [ 1392.256621][T18340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.267429][T18573] SQUASHFS error: Failed to read block 0x108: -5 [ 1392.277915][T18573] SQUASHFS error: Unable to read metadata cache entry [106] [ 1392.300752][T18570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1392.310367][T18573] SQUASHFS error: Unable to read inode 0x0 [ 1392.321688][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1392.337826][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1392.366608][T18471] device hsr_slave_0 entered promiscuous mode [ 1392.381902][T18471] device hsr_slave_1 entered promiscuous mode [ 1392.469198][T18583] hugetlbfs: Bad value for 'uid' [ 1392.526736][T18340] device veth0_vlan entered promiscuous mode [ 1392.595299][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1392.611559][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1392.623508][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1392.631409][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1392.689189][T18586] loop4: detected capacity change from 0 to 512 [ 1392.737198][T18587] sg_write: data in/out 2012/42 bytes for SCSI command 0x0-- guessing data in; [ 1392.737198][T18587] program syz.3.3288 not setting count and/or reply_len properly [ 1392.932344][T18586] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1392.956708][T18586] EXT4-fs (loop4): invalid journal inode [ 1393.339447][T18340] device veth1_vlan entered promiscuous mode [ 1393.450745][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1393.466816][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1393.489843][T18471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.501265][T18471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.520354][T18340] device veth0_macvtap entered promiscuous mode [ 1393.538799][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1393.552166][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1393.577286][T18471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.594593][T18471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.612073][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1393.622615][T18340] device veth1_macvtap entered promiscuous mode [ 1393.657417][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.681692][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.698911][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.709833][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.727026][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.740928][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.758694][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.778150][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.792579][T18340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.800859][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1393.818482][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1393.826773][ T3611] Bluetooth: hci4: command 0x040f tx timeout [ 1393.842578][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1393.869753][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.883589][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.887816][T18600] loop4: detected capacity change from 0 to 256 [ 1393.894520][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.910708][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.920924][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.933158][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.950151][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.960991][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.975925][T18340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.004194][T18471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.015919][T18471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.028669][T18602] loop3: detected capacity change from 0 to 8 [ 1394.049379][T18600] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1394.075271][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1394.104038][T18600] Process accounting resumed [ 1394.109250][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1394.110228][T18602] SQUASHFS error: xz decompression failed, data probably corrupt [ 1394.125780][T18602] SQUASHFS error: Failed to read block 0x108: -5 [ 1394.134671][T18602] SQUASHFS error: Unable to read metadata cache entry [106] [ 1394.142342][T18602] SQUASHFS error: Unable to read inode 0x0 [ 1394.185972][T18340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.205010][T18340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.288253][T18340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.316696][T18340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.358371][T18471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.420892][T18471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.488732][T18606] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 1394.488732][T18606] program syz.3.3345 not setting count and/or reply_len properly [ 1395.104511][T18600] Process accounting resumed [ 1395.157530][T18608] loop3: detected capacity change from 0 to 128 [ 1395.170272][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.193370][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.222293][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1395.230598][T12039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.249006][T12039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.277076][T12259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1395.303658][T18471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1395.334336][T18471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1395.370157][T18471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1395.906304][ T3611] Bluetooth: hci4: command 0x0419 tx timeout [ 1396.167641][T18471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1397.222542][T18621] overlayfs: './file0' not a directory [ 1397.301007][T18471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.381946][T18471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.430337][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1397.453230][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1397.479554][T18634] loop3: detected capacity change from 0 to 2048 [ 1397.500030][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1397.572983][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.610973][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.618157][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.923730][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.954777][T18638] [ 1397.957124][T18638] ===================================================== [ 1397.964047][T18638] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1397.971243][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.971491][T18638] 5.15.167-syzkaller #0 Not tainted [ 1397.984714][T18638] ----------------------------------------------------- [ 1397.990424][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.991631][T18638] syz.3.3353/18638 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1397.991653][T18638] ffff888053ce5360 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16a/0x490 [ 1398.010323][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.015985][T18638] [ 1398.015985][T18638] and this task is already holding: [ 1398.015993][T18638] ffff8880240ef028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xe7/0xb60 [ 1398.016042][T18638] which would create a new lock dependency: [ 1398.023071][ T8961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.030367][T18638] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 1398.061164][T18638] [ 1398.061164][T18638] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1398.070613][T18638] (&dev->event_lock#2){-.-.}-{2:2} [ 1398.070653][T18638] [ 1398.070653][T18638] ... which became HARDIRQ-irq-safe at: [ 1398.081633][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1398.083550][T18638] lock_acquire+0x1db/0x4f0 [ 1398.083574][T18638] _raw_spin_lock_irqsave+0xd1/0x120 [ 1398.083592][T18638] input_event+0x8a/0xd0 [ 1398.083606][T18638] psmouse_report_standard_packet+0x50/0x200 [ 1398.083625][T18638] psmouse_process_byte+0x45b/0x640 [ 1398.103313][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1398.105713][T18638] psmouse_handle_byte+0x46/0x4b0 [ 1398.105736][T18638] psmouse_interrupt+0x697/0x10a0 [ 1398.105751][T18638] serio_interrupt+0x88/0x130 [ 1398.115882][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1398.117059][T18638] i8042_interrupt+0x355/0x750 [ 1398.144254][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1398.147709][T18638] __handle_irq_event_percpu+0x292/0xa70 [ 1398.147734][T18638] handle_irq_event+0xff/0x2b0 [ 1398.147750][T18638] handle_edge_irq+0x245/0xbf0 [ 1398.153329][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1398.160503][T18638] __common_interrupt+0xd7/0x1f0 [ 1398.160531][T18638] common_interrupt+0x9f/0xc0 [ 1398.160548][T18638] asm_common_interrupt+0x22/0x40 [ 1398.160565][T18638] lock_acquire+0x252/0x4f0 [ 1398.160578][T18638] fs_reclaim_acquire+0xa7/0x120 [ 1398.160593][T18638] slab_pre_alloc_hook+0x22/0xc0 [ 1398.160610][T18638] kmem_cache_alloc+0x3f/0x280 [ 1398.160626][T18638] prepare_creds+0x3c/0x610 [ 1398.160644][T18638] copy_creds+0x149/0xca0 [ 1398.160661][T18638] copy_process+0x8a7/0x3ef0 [ 1398.160675][T18638] kernel_clone+0x210/0x960 [ 1398.160688][T18638] kernel_thread+0x168/0x1e0 [ 1398.160702][T18638] call_usermodehelper_exec_work+0x58/0x220 [ 1398.160718][T18638] process_one_work+0x8a1/0x10c0 [ 1398.179138][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1398.183942][T18638] worker_thread+0xaca/0x1280 [ 1398.183970][T18638] kthread+0x3f6/0x4f0 [ 1398.183983][T18638] ret_from_fork+0x1f/0x30 [ 1398.184001][T18638] [ 1398.184001][T18638] to a HARDIRQ-irq-unsafe lock: [ 1398.184008][T18638] (tasklist_lock){.+.?}-{2:2} [ 1398.184027][T18638] [ 1398.184027][T18638] ... which became HARDIRQ-irq-unsafe at: [ 1398.184035][T18638] ... [ 1398.184039][T18638] lock_acquire+0x1db/0x4f0 [ 1398.184055][T18638] _raw_read_lock+0x32/0x40 [ 1398.184075][T18638] do_wait+0x2a7/0xaf0 [ 1398.184090][T18638] kernel_wait+0xe5/0x230 [ 1398.197751][T18471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1398.198922][T18638] call_usermodehelper_exec_work+0xb5/0x220 [ 1398.206790][T18471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1398.208481][T18638] process_one_work+0x8a1/0x10c0 [ 1398.220373][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1398.222874][T18638] worker_thread+0xaca/0x1280 [ 1398.230287][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1398.231940][T18638] kthread+0x3f6/0x4f0 [ 1398.237461][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1398.241166][T18638] ret_from_fork+0x1f/0x30 [ 1398.241190][T18638] [ 1398.241190][T18638] other info that might help us debug this: [ 1398.241190][T18638] [ 1398.241197][T18638] Chain exists of: [ 1398.241197][T18638] &dev->event_lock#2 --> &client->buffer_lock [ 1398.251476][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1398.252162][T18638] --> tasklist_lock [ 1398.260967][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1398.264673][T18638] [ 1398.264673][T18638] [ 1398.264679][T18638] Possible interrupt unsafe locking scenario: [ 1398.264679][T18638] [ 1398.264685][T18638] CPU0 CPU1 [ 1398.264689][T18638] ---- ---- [ 1398.264694][T18638] lock(tasklist_lock); [ 1398.264706][T18638] local_irq_disable(); [ 1398.264712][T18638] lock(&dev->event_lock#2); [ 1398.264729][T18638] lock(&client->buffer_lock); [ 1398.264742][T18638] [ 1398.264746][T18638] lock(&dev->event_lock#2); [ 1398.264763][T18638] [ 1398.264763][T18638] *** DEADLOCK *** [ 1398.264763][T18638] [ 1398.264769][T18638] 7 locks held by syz.3.3353/18638: [ 1398.264780][T18638] #0: ffff8880252ba110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0 [ 1398.264834][T18638] #1: ffff88814850c230 (&dev->event_lock [ 1398.277273][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1398.280453][T18638] #2 [ 1398.338886][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1398.339976][T18638] ){-.-.}-{2:2} [ 1398.347441][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1398.352148][T18638] , at: input_inject_event+0xc0/0x300 [ 1398.360967][T18471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.364662][T18638] #2: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1398.364715][T18638] #3: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1398.364760][T18638] #4: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1398.364804][T18638] #5: ffff8880240ef028 (&client->buffer_lock [ 1398.380784][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1398.381122][T18638] ){....}-{2:2}, at: evdev_pass_values+0xe7/0xb60 [ 1398.381160][T18638] #6: ffffffff8c91fc60 [ 1398.394601][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1398.401147][T18638] (rcu_read_lock [ 1398.420341][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1398.420530][T18638] ){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1398.428616][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1398.433327][T18638] [ 1398.433327][T18638] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1398.433338][T18638] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 1398.433370][T18638] IN-HARDIRQ-W at: [ 1398.433379][T18638] lock_acquire+0x1db/0x4f0 [ 1398.441696][T18471] device veth0_vlan entered promiscuous mode [ 1398.444065][T18638] _raw_spin_lock_irqsave+0xd1/0x120 [ 1398.444091][T18638] input_event+0x8a/0xd0 [ 1398.444107][T18638] psmouse_report_standard_packet+0x50/0x200 [ 1398.451921][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1398.455050][T18638] psmouse_process_byte+0x45b/0x640 [ 1398.455074][T18638] psmouse_handle_byte+0x46/0x4b0 [ 1398.455090][T18638] psmouse_interrupt+0x697/0x10a0 [ 1398.455107][T18638] serio_interrupt+0x88/0x130 [ 1398.455127][T18638] i8042_interrupt+0x355/0x750 [ 1398.455147][T18638] __handle_irq_event_percpu+0x292/0xa70 [ 1398.455169][T18638] handle_irq_event+0xff/0x2b0 [ 1398.455187][T18638] handle_edge_irq+0x245/0xbf0 [ 1398.455202][T18638] __common_interrupt+0xd7/0x1f0 [ 1398.455217][T18638] common_interrupt+0x9f/0xc0 [ 1398.467325][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1398.469728][T18638] asm_common_interrupt+0x22/0x40 [ 1398.469756][T18638] lock_acquire+0x252/0x4f0 [ 1398.478714][T18471] device veth1_vlan entered promiscuous mode [ 1398.486136][T18638] fs_reclaim_acquire+0xa7/0x120 [ 1398.486162][T18638] slab_pre_alloc_hook+0x22/0xc0 [ 1398.486179][T18638] kmem_cache_alloc+0x3f/0x280 [ 1398.486195][T18638] prepare_creds+0x3c/0x610 [ 1398.486214][T18638] copy_creds+0x149/0xca0 [ 1398.509306][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1398.513236][T18638] copy_process+0x8a7/0x3ef0 [ 1398.513263][T18638] kernel_clone+0x210/0x960 [ 1398.516693][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1398.523080][T18638] kernel_thread+0x168/0x1e0 [ 1398.523104][T18638] call_usermodehelper_exec_work+0x58/0x220 [ 1398.531483][T18471] device veth0_macvtap entered promiscuous mode [ 1398.533786][T18638] process_one_work+0x8a1/0x10c0 [ 1398.533811][T18638] worker_thread+0xaca/0x1280 [ 1398.533829][T18638] kthread+0x3f6/0x4f0 [ 1398.546911][T18471] device veth1_macvtap entered promiscuous mode [ 1398.555154][T18638] ret_from_fork+0x1f/0x30 [ 1398.555181][T18638] IN-SOFTIRQ-W at: [ 1398.555193][T18638] lock_acquire+0x1db/0x4f0 [ 1398.555209][T18638] _raw_spin_lock_irqsave+0xd1/0x120 [ 1398.576202][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.579754][T18638] input_inject_event+0xc0/0x300 [ 1398.579778][T18638] led_trigger_event+0x109/0x1e0 [ 1398.579796][T18638] kbd_bh+0x18a/0x260 [ 1398.579813][T18638] tasklet_action_common+0x3cb/0x4a0 [ 1398.579832][T18638] handle_softirqs+0x3a7/0x930 [ 1398.579848][T18638] __irq_exit_rcu+0x157/0x240 [ 1398.579864][T18638] irq_exit_rcu+0x5/0x20 [ 1398.579879][T18638] sysvec_apic_timer_interrupt+0x91/0xb0 [ 1398.579900][T18638] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1398.579923][T18638] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1398.579943][T18638] evdev_write+0x668/0x7c0 [ 1398.590312][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.594366][T18638] vfs_write+0x30c/0xe50 [ 1398.594390][T18638] ksys_write+0x1a2/0x2c0 [ 1398.594411][T18638] do_syscall_64+0x3b/0xb0 [ 1398.594428][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1398.599893][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.606603][T18638] INITIAL USE at: [ 1398.606617][T18638] lock_acquire+0x1db/0x4f0 [ 1398.606636][T18638] _raw_spin_lock_irqsave+0xd1/0x120 [ 1398.606654][T18638] input_inject_event+0xc0/0x300 [ 1398.606670][T18638] led_trigger_event+0x109/0x1e0 [ 1398.606688][T18638] kbd_led_trigger_activate+0xb9/0x100 [ 1398.606709][T18638] led_trigger_set+0x55a/0x970 [ 1398.606726][T18638] led_trigger_set_default+0x1c2/0x200 [ 1398.606742][T18638] led_classdev_register_ext+0x6cf/0x8d0 [ 1398.606758][T18638] input_leds_connect+0x503/0x740 [ 1398.612939][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.617963][T18638] input_register_device+0xdae/0x1150 [ 1398.617986][T18638] atkbd_connect+0x7a7/0xa70 [ 1398.618001][T18638] serio_driver_probe+0x74/0x90 [ 1398.618019][T18638] really_probe+0x24e/0xb60 [ 1398.618038][T18638] __driver_probe_device+0x1a2/0x3d0 [ 1398.618057][T18638] driver_probe_device+0x50/0x420 [ 1398.618076][T18638] __driver_attach+0x479/0x690 [ 1398.618094][T18638] bus_for_each_dev+0x17c/0x1f0 [ 1398.618110][T18638] serio_handle_event+0x56a/0x8f0 [ 1398.618128][T18638] process_one_work+0x8a1/0x10c0 [ 1398.618148][T18638] worker_thread+0xaca/0x1280 [ 1398.618166][T18638] kthread+0x3f6/0x4f0 [ 1398.618181][T18638] ret_from_fork+0x1f/0x30 [ 1398.618201][T18638] } [ 1398.629771][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.632007][T18638] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1398.643026][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.648013][T18638] -> (&client->buffer_lock){....}-{2:2} { [ 1398.648043][T18638] INITIAL USE at: [ 1398.648052][T18638] lock_acquire+0x1db/0x4f0 [ 1398.648071][T18638] _raw_spin_lock+0x2a/0x40 [ 1398.648089][T18638] evdev_pass_values+0xe7/0xb60 [ 1398.648111][T18638] evdev_events+0x198/0x2c0 [ 1398.648130][T18638] input_pass_values+0x873/0x1200 [ 1398.648147][T18638] input_handle_event+0xc9b/0x1600 [ 1398.648162][T18638] input_inject_event+0x1fc/0x300 [ 1398.655568][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.658538][T18638] evdev_write+0x668/0x7c0 [ 1398.658563][T18638] vfs_write+0x30c/0xe50 [ 1398.666074][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.671584][T18638] ksys_write+0x1a2/0x2c0 [ 1398.671609][T18638] do_syscall_64+0x3b/0xb0 [ 1398.679045][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.685495][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1398.685522][T18638] } [ 1398.685527][T18638] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 1398.685550][T18638] ... acquired at: [ 1398.685555][T18638] lock_acquire+0x1db/0x4f0 [ 1398.685572][T18638] _raw_spin_lock+0x2a/0x40 [ 1398.685589][T18638] evdev_pass_values+0xe7/0xb60 [ 1398.685607][T18638] evdev_events+0x198/0x2c0 [ 1398.685624][T18638] input_pass_values+0x873/0x1200 [ 1398.685640][T18638] input_handle_event+0xc9b/0x1600 [ 1398.685653][T18638] input_inject_event+0x1fc/0x300 [ 1398.685668][T18638] evdev_write+0x668/0x7c0 [ 1398.685685][T18638] vfs_write+0x30c/0xe50 [ 1398.685703][T18638] ksys_write+0x1a2/0x2c0 [ 1398.685718][T18638] do_syscall_64+0x3b/0xb0 [ 1398.685734][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1398.685753][T18638] [ 1398.685757][T18638] [ 1398.685757][T18638] the dependencies between the lock to be acquired [ 1398.685763][T18638] and HARDIRQ-irq-unsafe lock: [ 1398.685780][T18638] -> (tasklist_lock){.+.?}-{2:2} { [ 1398.685809][T18638] HARDIRQ-ON-R at: [ 1398.685819][T18638] lock_acquire+0x1db/0x4f0 [ 1398.685835][T18638] _raw_read_lock+0x32/0x40 [ 1398.685853][T18638] do_wait+0x2a7/0xaf0 [ 1398.685872][T18638] kernel_wait+0xe5/0x230 [ 1398.697093][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.700031][T18638] call_usermodehelper_exec_work+0xb5/0x220 [ 1398.700055][T18638] process_one_work+0x8a1/0x10c0 [ 1398.708356][T18471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.713688][T18638] worker_thread+0xaca/0x1280 [ 1398.713713][T18638] kthread+0x3f6/0x4f0 [ 1398.723884][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1398.726834][T18638] ret_from_fork+0x1f/0x30 [ 1398.737879][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1398.740823][T18638] IN-SOFTIRQ-R at: [ 1398.740837][T18638] lock_acquire+0x1db/0x4f0 [ 1398.748329][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1398.754127][T18638] _raw_read_lock+0x32/0x40 [ 1398.754151][T18638] send_sigurg+0xc8/0x380 [ 1398.754168][T18638] sk_send_sigurg+0x6a/0xb0 [ 1398.754185][T18638] tcp_urg+0x2b8/0xb40 [ 1398.754201][T18638] tcp_rcv_state_process+0x1959/0x4520 [ 1398.754220][T18638] tcp_v6_do_rcv+0x867/0x10f0 [ 1398.754238][T18638] tcp_v6_rcv+0x2220/0x27b0 [ 1398.754255][T18638] ip6_protocol_deliver_rcu+0x93d/0x12d0 [ 1398.754272][T18638] ip6_input_finish+0xa2/0x130 [ 1398.765372][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1398.767910][T18638] NF_HOOK+0x364/0x410 [ 1398.767935][T18638] NF_HOOK+0x364/0x410 [ 1398.779945][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.781044][T18638] __netif_receive_skb+0x1c6/0x530 [ 1398.788524][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.793846][T18638] process_backlog+0x363/0x7f0 [ 1398.793870][T18638] __napi_poll+0xc7/0x440 [ 1398.793886][T18638] net_rx_action+0x617/0xda0 [ 1398.793904][T18638] handle_softirqs+0x3a7/0x930 [ 1398.793920][T18638] run_ksoftirqd+0xc6/0x120 [ 1398.793936][T18638] smpboot_thread_fn+0x51b/0x9d0 [ 1398.793952][T18638] kthread+0x3f6/0x4f0 [ 1398.793968][T18638] ret_from_fork+0x1f/0x30 [ 1398.793987][T18638] SOFTIRQ-ON-R at: [ 1398.793999][T18638] lock_acquire+0x1db/0x4f0 [ 1398.803375][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.807294][T18638] _raw_read_lock+0x32/0x40 [ 1398.807316][T18638] do_wait+0x2a7/0xaf0 [ 1398.807336][T18638] kernel_wait+0xe5/0x230 [ 1398.807353][T18638] call_usermodehelper_exec_work+0xb5/0x220 [ 1398.807372][T18638] process_one_work+0x8a1/0x10c0 [ 1398.816540][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.819887][T18638] worker_thread+0xaca/0x1280 [ 1398.828192][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.834152][T18638] kthread+0x3f6/0x4f0 [ 1398.834173][T18638] ret_from_fork+0x1f/0x30 [ 1398.834193][T18638] INITIAL USE at: [ 1398.834204][T18638] lock_acquire+0x1db/0x4f0 [ 1398.834220][T18638] _raw_write_lock_irq+0xcf/0x110 [ 1398.834240][T18638] copy_process+0x22be/0x3ef0 [ 1398.834258][T18638] kernel_clone+0x210/0x960 [ 1398.834274][T18638] kernel_thread+0x168/0x1e0 [ 1398.834291][T18638] rest_init+0x21/0x330 [ 1398.843340][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.848446][T18638] start_kernel+0x48c/0x540 [ 1398.848471][T18638] secondary_startup_64_no_verify+0xb1/0xbb [ 1398.848491][T18638] INITIAL READ USE at: [ 1398.848503][T18638] lock_acquire+0x1db/0x4f0 [ 1398.848518][T18638] _raw_read_lock+0x32/0x40 [ 1398.848534][T18638] do_wait+0x2a7/0xaf0 [ 1398.857973][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.862614][T18638] kernel_wait+0xe5/0x230 [ 1398.869175][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.875566][T18638] call_usermodehelper_exec_work+0xb5/0x220 [ 1398.875589][T18638] process_one_work+0x8a1/0x10c0 [ 1398.875607][T18638] worker_thread+0xaca/0x1280 [ 1398.875623][T18638] kthread+0x3f6/0x4f0 [ 1398.875640][T18638] ret_from_fork+0x1f/0x30 [ 1398.875660][T18638] } [ 1398.875666][T18638] ... key at: [] tasklist_lock+0x18/0x40 [ 1398.875690][T18638] ... acquired at: [ 1398.875696][T18638] lock_acquire+0x1db/0x4f0 [ 1398.875711][T18638] _raw_read_lock+0x32/0x40 [ 1398.875726][T18638] send_sigio+0xd2/0x330 [ 1398.885827][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.888055][T18638] kill_fasync+0x20c/0x490 [ 1398.888076][T18638] pipe_release+0x1ab/0x330 [ 1398.888094][T18638] __fput+0x3fe/0x8e0 [ 1398.888112][T18638] task_work_run+0x129/0x1a0 [ 1398.888130][T18638] exit_to_user_mode_loop+0x106/0x130 [ 1398.888147][T18638] exit_to_user_mode_prepare+0xb1/0x140 [ 1398.888163][T18638] syscall_exit_to_user_mode+0x5d/0x240 [ 1398.888184][T18638] do_syscall_64+0x47/0xb0 [ 1398.888200][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1398.888221][T18638] [ 1398.888225][T18638] -> (&f->f_owner.lock){...-}-{2:2} { [ 1398.888254][T18638] IN-SOFTIRQ-R at: [ 1398.896934][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.900671][T18638] lock_acquire+0x1db/0x4f0 [ 1398.906690][T18471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.911015][T18638] _raw_read_lock_irqsave+0xd9/0x120 [ 1398.911039][T18638] send_sigurg+0x25/0x380 [ 1398.911057][T18638] sk_send_sigurg+0x6a/0xb0 [ 1398.921086][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1398.928505][T18638] tcp_urg+0x2b8/0xb40 [ 1398.928527][T18638] tcp_rcv_state_process+0x1959/0x4520 [ 1398.928543][T18638] tcp_v6_do_rcv+0x867/0x10f0 [ 1398.928560][T18638] tcp_v6_rcv+0x2220/0x27b0 [ 1398.928576][T18638] ip6_protocol_deliver_rcu+0x93d/0x12d0 [ 1398.928597][T18638] ip6_input_finish+0xa2/0x130 [ 1398.940037][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1398.942155][T18638] NF_HOOK+0x364/0x410 [ 1398.942179][T18638] NF_HOOK+0x364/0x410 [ 1398.952635][T18471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.955030][T18638] __netif_receive_skb+0x1c6/0x530 [ 1398.955054][T18638] process_backlog+0x363/0x7f0 [ 1398.955072][T18638] __napi_poll+0xc7/0x440 [ 1398.955089][T18638] net_rx_action+0x617/0xda0 [ 1398.955108][T18638] handle_softirqs+0x3a7/0x930 [ 1398.955126][T18638] run_ksoftirqd+0xc6/0x120 [ 1398.955142][T18638] smpboot_thread_fn+0x51b/0x9d0 [ 1398.955159][T18638] kthread+0x3f6/0x4f0 [ 1398.964412][T18471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.968189][T18638] ret_from_fork+0x1f/0x30 [ 1398.976852][T18471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.981668][T18638] INITIAL USE at: [ 1398.981682][T18638] lock_acquire+0x1db/0x4f0 [ 1398.990602][T18471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.996973][T18638] _raw_write_lock_irq+0xcf/0x110 [ 1398.996998][T18638] f_modown+0x38/0x340 [ 1398.997015][T18638] f_setown+0x127/0x1d0 [ 1398.997030][T18638] do_fcntl+0x1b7/0x1600 [ 1398.997046][T18638] __se_sys_fcntl+0xd8/0x1b0 [ 1398.997064][T18638] do_syscall_64+0x3b/0xb0 [ 1398.997082][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1398.997102][T18638] INITIAL READ USE at: [ 1398.997115][T18638] lock_acquire+0x1db/0x4f0 [ 1398.997131][T18638] _raw_read_lock_irq+0xd6/0x120 [ 1398.997149][T18638] f_getown+0x22/0x240 [ 1398.997163][T18638] sock_ioctl+0x3ee/0x770 [ 1400.355797][T18638] __se_sys_ioctl+0xf1/0x160 [ 1400.362544][T18638] do_syscall_64+0x3b/0xb0 [ 1400.369114][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.377171][T18638] } [ 1400.379732][T18638] ... key at: [] __alloc_file.__key+0x0/0x10 [ 1400.387866][T18638] ... acquired at: [ 1400.391748][T18638] lock_acquire+0x1db/0x4f0 [ 1400.396409][T18638] _raw_read_lock_irqsave+0xd9/0x120 [ 1400.401871][T18638] send_sigio+0x2f/0x330 [ 1400.406370][T18638] kill_fasync+0x20c/0x490 [ 1400.410965][T18638] pipe_write+0x1356/0x1b90 [ 1400.415680][T18638] vfs_write+0xacd/0xe50 [ 1400.420223][T18638] ksys_write+0x1a2/0x2c0 [ 1400.424729][T18638] do_syscall_64+0x3b/0xb0 [ 1400.429331][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.434410][T18644] loop2: detected capacity change from 0 to 8 [ 1400.435400][T18638] [ 1400.435406][T18638] -> (&new->fa_lock){....}-{2:2} { [ 1400.435434][T18638] INITIAL USE at: [ 1400.435443][T18638] lock_acquire+0x1db/0x4f0 [ 1400.435462][T18638] _raw_write_lock_irq+0xcf/0x110 [ 1400.435483][T18638] fasync_remove_entry+0xfb/0x1d0 [ 1400.435502][T18638] sock_fasync+0x86/0xf0 [ 1400.478212][T18638] __fput+0x766/0x8e0 [ 1400.483750][T18638] task_work_run+0x129/0x1a0 [ 1400.489886][T18638] do_exit+0x6a3/0x2480 [ 1400.495585][T18638] do_group_exit+0x144/0x310 [ 1400.501717][T18638] get_signal+0xc66/0x14e0 [ 1400.507670][T18638] arch_do_signal_or_restart+0xc3/0x1890 [ 1400.514845][T18638] exit_to_user_mode_loop+0x97/0x130 [ 1400.521672][T18638] exit_to_user_mode_prepare+0xb1/0x140 [ 1400.528761][T18638] syscall_exit_to_user_mode+0x5d/0x240 [ 1400.535851][T18638] do_syscall_64+0x47/0xb0 [ 1400.541817][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.549251][T18638] INITIAL READ USE at: [ 1400.553570][T18638] lock_acquire+0x1db/0x4f0 [ 1400.560053][T18638] _raw_read_lock_irqsave+0xd9/0x120 [ 1400.567406][T18638] kill_fasync+0x16a/0x490 [ 1400.573885][T18638] pipe_write+0x1356/0x1b90 [ 1400.580366][T18638] vfs_write+0xacd/0xe50 [ 1400.586583][T18638] ksys_write+0x1a2/0x2c0 [ 1400.592911][T18638] do_syscall_64+0x3b/0xb0 [ 1400.599427][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.607302][T18638] } [ 1400.609776][T18638] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1400.618436][T18638] ... acquired at: [ 1400.622216][T18638] lock_acquire+0x1db/0x4f0 [ 1400.626869][T18638] _raw_read_lock_irqsave+0xd9/0x120 [ 1400.632312][T18638] kill_fasync+0x16a/0x490 [ 1400.636886][T18638] evdev_pass_values+0x5ad/0xb60 [ 1400.641978][T18638] evdev_events+0x198/0x2c0 [ 1400.646632][T18638] input_pass_values+0x873/0x1200 [ 1400.651806][T18638] input_handle_event+0xc9b/0x1600 [ 1400.657072][T18638] input_inject_event+0x1fc/0x300 [ 1400.662247][T18638] evdev_write+0x668/0x7c0 [ 1400.666817][T18638] vfs_write+0x30c/0xe50 [ 1400.671226][T18638] ksys_write+0x1a2/0x2c0 [ 1400.675895][T18638] do_syscall_64+0x3b/0xb0 [ 1400.680466][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.686517][T18638] [ 1400.688816][T18638] [ 1400.688816][T18638] stack backtrace: [ 1400.694675][T18638] CPU: 1 PID: 18638 Comm: syz.3.3353 Not tainted 5.15.167-syzkaller #0 [ 1400.702889][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1400.712928][T18638] Call Trace: [ 1400.716187][T18638] [ 1400.719100][T18638] dump_stack_lvl+0x1e3/0x2d0 [ 1400.723761][T18638] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1400.729371][T18638] ? panic+0x860/0x860 [ 1400.733424][T18638] ? print_shortest_lock_dependencies+0xee/0x150 [ 1400.739730][T18638] validate_chain+0x4d01/0x5930 [ 1400.744568][T18638] ? reacquire_held_locks+0x660/0x660 [ 1400.749919][T18638] ? try_to_wake_up+0x807/0x1300 [ 1400.755012][T18638] ? __lock_acquire+0x1ff0/0x1ff0 [ 1400.760019][T18638] ? register_lock_class+0x100/0x9a0 [ 1400.765283][T18638] ? is_dynamic_key+0x1f0/0x1f0 [ 1400.770114][T18638] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1400.775998][T18638] ? mark_lock+0x98/0x340 [ 1400.780307][T18638] __lock_acquire+0x1295/0x1ff0 [ 1400.785141][T18638] lock_acquire+0x1db/0x4f0 [ 1400.789621][T18638] ? kill_fasync+0x16a/0x490 [ 1400.794194][T18638] ? read_lock_is_recursive+0x10/0x10 [ 1400.799546][T18638] ? read_lock_is_recursive+0x10/0x10 [ 1400.804898][T18638] ? read_lock_is_recursive+0x10/0x10 [ 1400.810247][T18638] _raw_read_lock_irqsave+0xd9/0x120 [ 1400.815515][T18638] ? kill_fasync+0x16a/0x490 [ 1400.820085][T18638] ? _raw_read_lock+0x40/0x40 [ 1400.824743][T18638] kill_fasync+0x16a/0x490 [ 1400.829137][T18638] evdev_pass_values+0x5ad/0xb60 [ 1400.834059][T18638] ? evdev_pass_values+0x5d1/0xb60 [ 1400.839152][T18638] evdev_events+0x198/0x2c0 [ 1400.843633][T18638] ? evdev_event+0x170/0x170 [ 1400.848204][T18638] input_pass_values+0x873/0x1200 [ 1400.853213][T18638] input_handle_event+0xc9b/0x1600 [ 1400.858304][T18638] input_inject_event+0x1fc/0x300 [ 1400.863306][T18638] evdev_write+0x668/0x7c0 [ 1400.867704][T18638] ? evdev_read+0xe00/0xe00 [ 1400.872187][T18638] ? end_current_label_crit_section+0x147/0x170 [ 1400.878495][T18638] ? common_file_perm+0x17d/0x1d0 [ 1400.883500][T18638] ? fsnotify_perm+0x64/0x590 [ 1400.888158][T18638] ? security_file_permission+0x75/0xa0 [ 1400.893683][T18638] ? evdev_read+0xe00/0xe00 [ 1400.898170][T18638] vfs_write+0x30c/0xe50 [ 1400.902405][T18638] ? file_end_write+0x250/0x250 [ 1400.907235][T18638] ? read_lock_is_recursive+0x10/0x10 [ 1400.912583][T18638] ? __context_tracking_exit+0x4c/0x80 [ 1400.918027][T18638] ? __lock_acquire+0x1ff0/0x1ff0 [ 1400.923030][T18638] ? __fdget+0x19c/0x220 [ 1400.927254][T18638] ? __fdget_pos+0x1e9/0x380 [ 1400.931831][T18638] ksys_write+0x1a2/0x2c0 [ 1400.936145][T18638] ? print_irqtrace_events+0x210/0x210 [ 1400.941583][T18638] ? __ia32_sys_read+0x80/0x80 [ 1400.946324][T18638] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1400.952291][T18638] ? lockdep_hardirqs_on+0x94/0x130 [ 1400.957468][T18638] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1400.963431][T18638] do_syscall_64+0x3b/0xb0 [ 1400.967825][T18638] ? clear_bhb_loop+0x15/0x70 [ 1400.972481][T18638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.978356][T18638] RIP: 0033:0x7f15f7dacff9 [ 1400.982751][T18638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.002333][T18638] RSP: 002b:00007f15f6225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1401.010727][T18638] RAX: ffffffffffffffda RBX: 00007f15f7f64f80 RCX: 00007f15f7dacff9 [ 1401.018678][T18638] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000008 [ 1401.026628][T18638] RBP: 00007f15f7e1f296 R08: 0000000000000000 R09: 0000000000000000 [ 1401.034580][T18638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.042530][T18638] R13: 0000000000000000 R14: 00007f15f7f64f80 R15: 00007fffcfdc65f8 [ 1401.050488][T18638] [ 1401.118223][T18471] ieee80211 phy129: Selected rate control algorithm 'minstrel_ht' [ 1401.135599][T18644] SQUASHFS error: xz decompression failed, data probably corrupt [ 1401.165646][T18644] SQUASHFS error: Failed to read block 0x108: -5 [ 1401.172006][T18644] SQUASHFS error: Unable to read metadata cache entry [106] [ 1401.201992][T18644] SQUASHFS error: Unable to read inode 0x0 [ 1401.208128][ T8961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.217938][T18471] ieee80211 phy130: Selected rate control algorithm 'minstrel_ht' [ 1401.217953][ T8961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.237187][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1401.248646][ T8961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.256706][ T8961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.264637][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1401.475490][T18647] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 1401.475490][T18647] program syz.2.3354 not setting count and/or reply_len properly [ 1402.078568][ T9] device veth1_to_bond left promiscuous mode [ 1402.084670][ T9] bridge1: port 2(veth1_to_bond) entered disabled state [ 1402.093049][ T9] device bridge_slave_1 left promiscuous mode [ 1402.099241][ T9] bridge1: port 1(bridge_slave_1) entered disabled state [ 1402.109085][ T9] device hsr_slave_0 left promiscuous mode [ 1402.115175][ T9] device hsr_slave_1 left promiscuous mode [ 1402.121476][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.129370][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.138946][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.146634][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.154069][ T9] device bridge_slave_0 left promiscuous mode [ 1402.160419][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.170215][ T9] device veth1_macvtap left promiscuous mode [ 1402.179854][ T9] device veth0_macvtap left promiscuous mode [ 1402.186019][ T9] device veth1_vlan left promiscuous mode [ 1402.191809][ T9] device veth0_vlan left promiscuous mode [ 1402.307475][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1402.321196][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1402.332186][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.344596][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.401808][ T9] bond0 (unregistering): Released all slaves