last executing test programs: 15.869658848s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000800450000140000000200009078827861ba4f1360a068c6f12486dc00000002e00000021532a663967e593165d46e6ce716a0620f8088cf0a0617bb591f177312ff6306eb177bbe14e934e9ff57476b26ebd761d2466790586cd00ca4b019327ab242e3795f990e01cd0f763650bd522696168b756d888801630260af2bfc6e46"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x4}, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtaction={0x888, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x874, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_nat={0x230, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd31, 0x7f, 0x4, 0x9, 0xfffeffff}, @rand_addr=0x64010102, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x1, 0x7, 0x9, 0x81}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3c, 0x101, 0xffffffffeffffffe, 0x7, 0x7}, @multicast2, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe75, 0x8, 0x0, 0x1, 0x10001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x1000, 0x1, 0xfff, 0x4}, @multicast2, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3ff, 0x4, 0x6, 0x7}, @private=0xa010100, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xa8, 0x7, 0x8001, 0x400}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x20000000, 0x2, 0x4d}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x6, 0x20, 0x8001}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x7, 0x20, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0x1}}]}, {0x77, 0x6, "a162a43252baf5878dc7771782e12f5cd1dbccfa2122b4730ebe7131ab2d8755769c5cc242591a469999b853afb0126ac31b468adfaa9bc482af2eba458d6056136be412a9347cfd31fb2ffe318ca1059da592ee16ea56ad5524568ed586cca41f3c1999f3bc42ce7be1197c3a32ed62b93c01"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x1d0, 0x1f, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x101, 0x4, 0x81, 0x75a}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x7, 0x5}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2248, 0xffffffffffffffff, 0x8000, 0x3f}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x6, 0x3, 0x3b6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xf1c7, 0x5, 0x0, 0x1}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x0, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0xff1, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2f, 0x8, 0x8, 0x8ef4}, 0x12}}]}, {0xc3, 0x6, "3bf603962e99e7a3c34d986e3c7c5e4ce113a07272b3306e017bcfcfc4ec967885ae0efaf1ede8432d32036915dfeb5a6f07d3896f11707941e31b6cad86cb4f68eac843da127a42919dbe6f67a93ee4ef7468b81410ea2b06e9c098b13479c56eae171eed9b629be9cfcd1a8a9de3db5773af8afc1381c553f771e6539c8100b0f4f43fb8aae164262514b8f8c48039141afd17e8f10e3b7b084b5856b95e3e9c978932136c4ea3f3bc584b9db8ecfba962159a4d9d66cc9853f1b5a6cfde"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x888}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe8820004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}}, 0x880) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) unshare(0x22020600) socket$inet(0xa, 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r5) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 14.519504455s ago: executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x84000c12) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) write(r1, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f510daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f09d21078e1852fc7c96413d9d65c52ce9baa6bc26de7f028738a17120de30a433c9c3c8e276f3ae5e18a1f95767fffe8e98b0c3f134f12263b01c36866d4e0e856cc14ecf50279adb9438c6219c49cae973d8e7faf33dcdeb96d7ef7e89ae828cb91df22939307bb1f7fb7392e1e24f6b63166b89937c00eb8fea0245cd93e4aa803160bd71c18ab654485ab985f1dd2eb9abf53131a9680dcafe4000d3ea528dd52aba3e4ff6a3883ec614253d5627bd91522d881128328ed1e00907fa6cc48cec5268bbedd85ec02d8bac3183460dd1a27fbc06b5642473a41a6cbfb07f53deab2473b37c3d10a125d610f1b9ea5c83e7d462048f25fc1e79295eeff750a23faf5d542758c421bb0673504c9dbae2959f77000000000000", 0x200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000480)=0x3) dup(r3) r4 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5b}], 0x9}) io_uring_enter(r4, 0x2, 0x0, 0x0, 0x0, 0x0) 14.419996991s ago: executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x0, 0x3c8, 0x2b0, 0xf0, 0x2b0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0\x00', 'gretap0\x00'}, 0x11e, 0xa8, 0xf0, 0x1f000000, {0x0, 0x7}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@remote, 0x20, 0x1e}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x7400}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@local}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@ipv6header={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-generic)\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) unlinkat(r3, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) write$tun(r2, &(0x7f00000000c0)={@val={0x500, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[{0x7f}, {0x5}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0x9, 0x3}, @timestamp={0x8, 0xa, 0xfffffffd}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x56) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="e69b5738845dfcea03cc8ef31d0dbd302a7f27d6e0ed9cfc4bfbcd93538c5ca9", 0x20) 14.184788397s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x42, 0x0, 0x0, 0x4}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f00000007c0)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsync(0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$yama_ptrace_scope(r3, 0x0, 0x0) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e22, @empty}}}, 0x88) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x100}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000b00)={'sit0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ac203, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x400}) getsockopt$inet_int(r7, 0x0, 0x6, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000200)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x108000, &(0x7f0000000240)) r9 = dup(r1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x101, 0x100}}) 14.008980224s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000800450000140000000200009078827861ba4f1360a068c6f12486dc00000002e00000021532a663967e593165d46e6ce716a0620f8088cf0a0617bb591f177312ff6306eb177bbe14e934e9ff57476b26ebd761d2466790586cd00ca4b019327ab242e3795f990e01cd0f763650bd522696168b756d888801630260af2bfc6e46"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x4}, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtaction={0x888, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x874, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_nat={0x230, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd31, 0x7f, 0x4, 0x9, 0xfffeffff}, @rand_addr=0x64010102, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x1, 0x7, 0x9, 0x81}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3c, 0x101, 0xffffffffeffffffe, 0x7, 0x7}, @multicast2, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe75, 0x8, 0x0, 0x1, 0x10001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x1000, 0x1, 0xfff, 0x4}, @multicast2, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3ff, 0x4, 0x6, 0x7}, @private=0xa010100, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xa8, 0x7, 0x8001, 0x400}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x20000000, 0x2, 0x4d}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x6, 0x20, 0x8001}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x7, 0x20, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0x1}}]}, {0x77, 0x6, "a162a43252baf5878dc7771782e12f5cd1dbccfa2122b4730ebe7131ab2d8755769c5cc242591a469999b853afb0126ac31b468adfaa9bc482af2eba458d6056136be412a9347cfd31fb2ffe318ca1059da592ee16ea56ad5524568ed586cca41f3c1999f3bc42ce7be1197c3a32ed62b93c01"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x1d0, 0x1f, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x101, 0x4, 0x81, 0x75a}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x7, 0x5}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2248, 0xffffffffffffffff, 0x8000, 0x3f}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x6, 0x3, 0x3b6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xf1c7, 0x5, 0x0, 0x1}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x0, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0xff1, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2f, 0x8, 0x8, 0x8ef4}, 0x12}}]}, {0xc3, 0x6, "3bf603962e99e7a3c34d986e3c7c5e4ce113a07272b3306e017bcfcfc4ec967885ae0efaf1ede8432d32036915dfeb5a6f07d3896f11707941e31b6cad86cb4f68eac843da127a42919dbe6f67a93ee4ef7468b81410ea2b06e9c098b13479c56eae171eed9b629be9cfcd1a8a9de3db5773af8afc1381c553f771e6539c8100b0f4f43fb8aae164262514b8f8c48039141afd17e8f10e3b7b084b5856b95e3e9c978932136c4ea3f3bc584b9db8ecfba962159a4d9d66cc9853f1b5a6cfde"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x888}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe8820004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}}, 0x880) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) unshare(0x22020600) socket$inet(0xa, 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r5) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 12.745607257s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xff}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB], 0x2c}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r10, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4004550c, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r12) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x12000, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4) sendmsg$DEVLINK_CMD_RATE_GET(r13, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r14, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x164, r15, 0x1987836d650005d3, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xad7a4ad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3479d932}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3813a805}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1668adce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ff15976}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35a5ac8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f540dff}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a38aa41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69f52600}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f06058}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe346}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x593a62c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c8a6324}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf82e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x650ef062}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x612f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e7229ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ab880db}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a58}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3b8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79863b02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536bc869}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffab}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0e7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x2000004}, 0x4040000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 7.587426848s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000800450000140000000200009078827861ba4f1360a068c6f12486dc00000002e00000021532a663967e593165d46e6ce716a0620f8088cf0a0617bb591f177312ff6306eb177bbe14e934e9ff57476b26ebd761d2466790586cd00ca4b019327ab242e3795f990e01cd0f763650bd522696168b756d888801630260af2bfc6e46"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x4}, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtaction={0x888, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x874, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_nat={0x230, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd31, 0x7f, 0x4, 0x9, 0xfffeffff}, @rand_addr=0x64010102, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x1, 0x7, 0x9, 0x81}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3c, 0x101, 0xffffffffeffffffe, 0x7, 0x7}, @multicast2, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe75, 0x8, 0x0, 0x1, 0x10001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x1000, 0x1, 0xfff, 0x4}, @multicast2, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3ff, 0x4, 0x6, 0x7}, @private=0xa010100, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xa8, 0x7, 0x8001, 0x400}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x20000000, 0x2, 0x4d}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x6, 0x20, 0x8001}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x7, 0x20, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0x1}}]}, {0x77, 0x6, "a162a43252baf5878dc7771782e12f5cd1dbccfa2122b4730ebe7131ab2d8755769c5cc242591a469999b853afb0126ac31b468adfaa9bc482af2eba458d6056136be412a9347cfd31fb2ffe318ca1059da592ee16ea56ad5524568ed586cca41f3c1999f3bc42ce7be1197c3a32ed62b93c01"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x1d0, 0x1f, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x101, 0x4, 0x81, 0x75a}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x7, 0x5}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2248, 0xffffffffffffffff, 0x8000, 0x3f}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x6, 0x3, 0x3b6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xf1c7, 0x5, 0x0, 0x1}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x0, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0xff1, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2f, 0x8, 0x8, 0x8ef4}, 0x12}}]}, {0xc3, 0x6, "3bf603962e99e7a3c34d986e3c7c5e4ce113a07272b3306e017bcfcfc4ec967885ae0efaf1ede8432d32036915dfeb5a6f07d3896f11707941e31b6cad86cb4f68eac843da127a42919dbe6f67a93ee4ef7468b81410ea2b06e9c098b13479c56eae171eed9b629be9cfcd1a8a9de3db5773af8afc1381c553f771e6539c8100b0f4f43fb8aae164262514b8f8c48039141afd17e8f10e3b7b084b5856b95e3e9c978932136c4ea3f3bc584b9db8ecfba962159a4d9d66cc9853f1b5a6cfde"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x888}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe8820004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xfc, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}}, 0x880) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) unshare(0x22020600) socket$inet(0xa, 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r6, 0x406, r6) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 6.365256175s ago: executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="e4", 0x8ec0}], 0xc0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x38}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 6.2706019s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0xa, &(0x7f0000000140)="e69b5738845dfcea03cc8ef31d0dbd302a7f27d6e0ed9cfc", 0x18) 6.238760814s ago: executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x421, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x34}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800080, &(0x7f00000001c0)={[{@flush_merge}, {@fastboot}, {@background_gc_off}, {@noinline_dentry}, {@two_active_logs}, {@fsync_mode_strict}, {@disable_ext_identify}, {@prjjquota}, {@fsync_mode_strict}, {}, {@six_active_logs}, {@fastboot}, {@whint_mode_fs}]}, 0x1, 0x5501, &(0x7f00000059c0)="$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") r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'gretap0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x70a, 0x0, 0x0, {0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "5f724e0100001b85000000000000000000"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x800) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_FAIL(r12, 0x9361, 0x80000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000025002dfee7d85efc7ed5580474d426c7ba6a"], &(0x7f0000000000)='syzkaller\x00'}, 0xffffffffffffff4e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r7, r8, 0x0, 0x100800001) 5.932432891s ago: executing program 0: socket$netlink(0x10, 0x3, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x40010, r1, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000200)='personality\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000080)=""/77, 0x4d}], 0x1, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000340)=[@release={0x40046306, 0x2}, @free_buffer, @register_looper, @release={0x40046306, 0x8}], 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000000000000011,iocharset=iso8859-4,dmask=00000000000000000000011,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=remount-ro,errors=remount-ro,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB='e,\x00'/18], 0x5, 0x1510, &(0x7f00000037c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 4.782360277s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x68, 0x2}, 0x0, 0x0) 4.746637983s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000800450000140000000200009078827861ba4f1360a068c6f12486dc00000002e00000021532a663967e593165d46e6ce716a0620f8088cf0a0617bb591f177312ff6306eb177bbe14e934e9ff57476b26ebd761d2466790586cd00ca4b019327ab242e3795f990e01cd0f763650bd522696168b756d888801630260af2bfc6e46"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x4}, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtaction={0x888, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x874, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_nat={0x230, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd31, 0x7f, 0x4, 0x9, 0xfffeffff}, @rand_addr=0x64010102, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x1, 0x7, 0x9, 0x81}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3c, 0x101, 0xffffffffeffffffe, 0x7, 0x7}, @multicast2, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe75, 0x8, 0x0, 0x1, 0x10001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x1000, 0x1, 0xfff, 0x4}, @multicast2, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3ff, 0x4, 0x6, 0x7}, @private=0xa010100, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xa8, 0x7, 0x8001, 0x400}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x20000000, 0x2, 0x4d}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x6, 0x20, 0x8001}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x7, 0x20, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0x1}}]}, {0x77, 0x6, "a162a43252baf5878dc7771782e12f5cd1dbccfa2122b4730ebe7131ab2d8755769c5cc242591a469999b853afb0126ac31b468adfaa9bc482af2eba458d6056136be412a9347cfd31fb2ffe318ca1059da592ee16ea56ad5524568ed586cca41f3c1999f3bc42ce7be1197c3a32ed62b93c01"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x1d0, 0x1f, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x101, 0x4, 0x81, 0x75a}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x7, 0x5}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2248, 0xffffffffffffffff, 0x8000, 0x3f}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x6, 0x3, 0x3b6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xf1c7, 0x5, 0x0, 0x1}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x0, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0xff1, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2f, 0x8, 0x8, 0x8ef4}, 0x12}}]}, {0xc3, 0x6, "3bf603962e99e7a3c34d986e3c7c5e4ce113a07272b3306e017bcfcfc4ec967885ae0efaf1ede8432d32036915dfeb5a6f07d3896f11707941e31b6cad86cb4f68eac843da127a42919dbe6f67a93ee4ef7468b81410ea2b06e9c098b13479c56eae171eed9b629be9cfcd1a8a9de3db5773af8afc1381c553f771e6539c8100b0f4f43fb8aae164262514b8f8c48039141afd17e8f10e3b7b084b5856b95e3e9c978932136c4ea3f3bc584b9db8ecfba962159a4d9d66cc9853f1b5a6cfde"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x888}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe8820004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xfc, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}}, 0x880) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) unshare(0x22020600) socket$inet(0xa, 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r6, 0x406, r6) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 4.689018331s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="08000504000001", 0x7) 4.610992304s ago: executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000300), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000880)='./file0\x00', 0x1000840, &(0x7f0000000840)=ANY=[@ANYRES8=r0], 0x3, 0x365, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xfd) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r4, 0xc0104307, &(0x7f0000000000)=0x1) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1400000000000000290000000b00000003000000000000001400000000000000290000000b00000000000006000000001400000000000000290000000800000000000000000000001400000000000000290000000b100000000000050000000030"], 0x90}, 0x0) r5 = dup3(r1, r2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x5}}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) setregid(0xffffffffffffffff, r8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000006c0)=ANY=[@ANYBLOB="253f0bfe76a6e7a69869e77b457275b0ff0a6fb158b488e6e6a54a09130cccf713940d1b507918a735", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303630302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313830302c626c6b73697a653d3078303030303030303030303030303030302c646566636f6e746578743d756e636f6e66696e65645f752c6f626a5f747970653d267b282b5e5c2d26fd2c7569643c", @ANYRESDEC=r9, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000540)="b9e92faf228bb95cf3f6dd1a573c386277e0013b4bdc1c") r11 = io_uring_setup(0x3453, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2a8}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) close(r11) clock_nanosleep(0x3, 0x0, &(0x7f00000000c0), 0xfffffffffffffffe) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) 3.59285845s ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file2\x00', 0x10000, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@barrier}, {@part={'part', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x9}}, {@gid}, {@nodecompose}, {@gid}]}, 0x2, 0x6da, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x80, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f55a652aec2dc140000009b0200000000000000"], 0x14}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$kcm(0x29, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) llistxattr(&(0x7f0000002280)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f00000024c0)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) umount2(&(0x7f0000000000)='./file2\x00', 0x0) 2.642375465s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_io_uring_setup(0x6038, &(0x7f0000000200)={0x0, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) (async) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3c096eff7fc6e5539b9b3b098b9b721b5d840908080d07428f091ac6e7049b3441959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b5d520a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8dd0, 0x2) writev(r7, &(0x7f0000001a00)=[{0x0}, {&(0x7f00000006c0)='#', 0x1}], 0x2) (async) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x7d, &(0x7f0000000000)={r8}, 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='$'], 0x22) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@offload={0xc}]}, 0xfc}}, 0x0) (async) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x3) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file3\x00', 0x10, &(0x7f0000001840)={[{@errors_ro_remount}, {@noattrs}, {@balloc_notest4}, {@jdev={'jdev', 0x3d, './file4'}, 0x0}, {@tails_off, 0x3d}, {@balloc_noborder}, {@usrquota}, {@user_xattr}, {@commit={'commit', 0x3d, 0x2}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}[)/*'}}, {@appraise_type}, {@permit_directio}, {@euid_lt}]}, 0x1, 0x110e, &(0x7f0000002440)="$eJzs2TFrFEEUB/D/7J2X61ZWsFwEGwsJCQf2FhGutbaTdKmSShDyZfw4kso+pLKyCNivZJ09QQKiWZXA7wczvHm7szNTzr4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6PPYP2qS7nviwdiXpO8vtldJ+unVhx8XTUpeH2/Pjk43r86SLJLc5JqUpk5Ld/h03W26TXe4l6zq3JOT49MalvS5vB6j5ZwnKXU/t1rPuhQAAADcK8OdtT9/8rcu2ndfHwAAAPiVWX8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyBof0Rd8saNElK0vcX26sk/f/aHAAAADCLkiZv2tvyyYvHu+EqeZ5PbRnzU/takiYH+TDO3/un+wYAAID7ZSq6r2rhfWc3mO7bN4lnWWYYhvPp2ZMss78/husp9+Vlsnh3lIPpTl6L/OfX799e1laGxd8+GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAA7BUAAP//0F/W7A==") sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x10c, 0x10, 0x133, 0x0, 0x0, {{@in=@loopback, @in6=@remote}, {@in, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x16, {0x0, 0x0, 0x0, @in6=@private1}}]}, 0x10c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r12, 0x40047438, &(0x7f0000000180)=""/246) (async) write$binfmt_aout(r12, &(0x7f0000000340)=ANY=[@ANYBLOB="c0210200021e001a"], 0x20) 2.201032553s ago: executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) ftruncate(r1, 0x7) 816.370245ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = memfd_create(&(0x7f0000002280)='\xcaB\x89O\xb4\x80[\xe2`@', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)) 776.606081ms ago: executing program 2: write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_io_uring_setup(0x135, &(0x7f0000000600)={0x0, 0x50}, &(0x7f0000000680), &(0x7f00000006c0)) 673.697727ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x42, 0x0, 0x0, 0x4}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f00000007c0)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d0000009500000000000000745f78de1d83cd00020000baa510f1d18f05c144ec4c2e518e52635439ca8f5c9c20658b60cd506b4d95ac679f5f628b004d3d5c40d0b634fbe74a9c1cf888e6ca0bea4716f566fceccdaef12fed21114c194ab238cd5bee7623e4b9319daec8349caaa1849d070b8742b504000000dc7f153173204e8cbd9f7e30e7983f5c227d1b1639014adfe9ec201a20998dc47fde982da9a36bd120268b819e5b948ea42e0122ba8a7726224a79cd27a96a1261c4f916a98986b1ca3c96d7711699fc343c8f1d95f1fed3aa61a6b3cd8580cc2debff2f8c3679eb944f7f3f0c4fee985f2c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsync(0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000000040)='2\x00', 0x2) vmsplice(r3, &(0x7f00000013c0), 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e22, @empty}}}, 0x88) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x100}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000b00)={'sit0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ac203, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x400}) getsockopt$inet_int(r7, 0x0, 0x6, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000200)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x108000, &(0x7f0000000240)) r9 = dup(r1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x101, 0x100}}) 636.748292ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x15, 0x1, 0xfffffffc) getsockopt$inet6_mreq(r1, 0x10d, 0x8f, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004a40)={'team0\x00', 0x0}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x440, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {0x18}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 609.742807ms ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@delchain={0x324, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x28c, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x170, 0x9, 0x0, 0x1, [@m_tunnel_key={0x13c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0xf4, 0x9, 0x0, 0x1, [@m_gact={0xf0, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xc1, 0x6, "e00962185480b41fd2c76f5f42a00502e0ee2670df21b31be04b95c01713cbdcaef0b4a274177a5d0b3ebc0819c6dbeed3f940cb61bd9e417858a166650bff40ba17d887300a4535de35cc30a61298cded98f2f64c6e9ebb4893b51c65421bc030fa2873caeba196b1185639511c558561db2f9b1c14a005045103b07eeec0dd2840af42b7e887a9a5eab75c1fee4caa5b6a568138201300acd7186883218b8176acdc7ba1a4674428a90042f55e0c46924e41f320d6937382c9fe349a"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x324}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x20, 0x1, 0x0, "fbb8d4337f69a4140bbea9ae67784f880aff792426f7db65072eeadcb9305b3f"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETTXFILTER(r0, 0x800454df, &(0x7f00000000c0)=ANY=[]) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000000c0)={0x7, 'netpci0\x00', {0x7}, 0x5}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0xd10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="2fb68944380ce111f2b28fb527ddcea400000000dabbdb701c0b008009000100e26f6ef379db13dbe4e8399ec4372e75cdaf5ad46a105e582860ab64e6c6e4deac01680b8b9612235ed101874e65e09709229d6500ad9cd579bc3f33988672e2f352578dfe38cda3c06c2cf9dd323c423ed1339569f4bcd5fe336a2c2983c03e1e14fcc2c062532da366"], 0x3c}}, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xca, 0x2000, &(0x7f0000003700)={0x77359400}) 371.545683ms ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@delchain={0xa0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0xa0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7fffe428}, {&(0x7f00000007c0)=""/154, 0x4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 224.199525ms ago: executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5b}], 0x9}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 199.447949ms ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002280)=@delchain={0xa8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_EMATCHES={0x4}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0xa8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7fffe428}, {&(0x7f00000007c0)=""/154, 0x4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 106.200124ms ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045506, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 68.81694ms ago: executing program 2: msgget$private(0x0, 0xf9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0xb) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000500)={[{@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@fat=@tz_utc}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}]}, 0x1, 0x223, &(0x7f0000000280)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xed) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) capget(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000002440)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES64=r6, @ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES64=r6], 0x1, 0x2ac, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000080)) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') getresgid(&(0x7f0000000180), 0x0, &(0x7f0000000300)) mount$nfs4(&(0x7f0000000040)='>.//', 0x0, 0x0, 0x0, 0x0) 10.245239ms ago: executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): ][ T26] audit: type=1326 audit(96.400:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffbc44c0e8 code=0x7ffc0000 [ 96.544737][ T3553] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=1b.b2 [ 96.547116][ T3553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.549018][ T3553] usb 1-1: Product: syz [ 96.550110][ T3553] usb 1-1: Manufacturer: syz [ 96.551247][ T3553] usb 1-1: SerialNumber: syz [ 96.564170][ T26] audit: type=1326 audit(96.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc44c0e8 code=0x7ffc0000 [ 96.575254][ T3553] usb 1-1: config 0 descriptor?? [ 96.575584][ T26] audit: type=1326 audit(96.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc44c0e8 code=0x7ffc0000 [ 96.594039][ T5197] delete_channel: no stack [ 96.626532][ T3553] ati_remote2 1-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 96.694636][ T5203] udc-core: couldn't find an available UDC or it's busy [ 96.700178][ T5203] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.761586][ T5201] EXT4-fs warning (device nvme0n1p2): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 96.793390][ T5201] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 96.829982][ T3553] usb 1-1: USB disconnect, device number 3 [ 97.023566][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.031740][ T5206] udc-core: couldn't find an available UDC or it's busy [ 97.033547][ T5206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.490888][ T5224] udc-core: couldn't find an available UDC or it's busy [ 97.498185][ T5224] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.611787][ T5231] udc-core: couldn't find an available UDC or it's busy [ 97.613538][ T5231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.619854][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.645223][ T3553] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.861462][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.016106][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.035009][ T3553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.038041][ T3553] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.040610][ T3553] usb 1-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 98.054026][ T3553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.066175][ T3553] usb 1-1: config 0 descriptor?? [ 98.117188][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.119441][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.120896][ T5248] loop2: detected capacity change from 0 to 512 [ 98.121496][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.136135][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.140892][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.148684][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.150857][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.153000][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.175925][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.177890][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.555873][ T3553] hid (null): bogus close delimiter [ 98.559022][ T3553] hid-generic 0003:0EEF:C002.0002: bogus close delimiter [ 98.560866][ T3553] hid-generic 0003:0EEF:C002.0002: item 0 4 2 10 parsing failed [ 98.563392][ T3553] hid-generic: probe of 0003:0EEF:C002.0002 failed with error -22 [ 98.609760][ T5262] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.712446][ T5262] xt_NFQUEUE: number of total queues is 0 [ 98.762329][ T25] usb 1-1: USB disconnect, device number 4 [ 98.842353][ T5267] udc-core: couldn't find an available UDC or it's busy [ 98.844326][ T5267] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.327809][ T4050] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 100.330039][ T4050] Bluetooth: hci3: Injecting HCI hardware error event [ 100.332153][ T3999] Bluetooth: hci3: hardware error 0x00 [ 100.385200][ T5273] loop3: detected capacity change from 0 to 4096 [ 100.393765][ T5273] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 100.445874][ T5273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.475703][ T5282] udc-core: couldn't find an available UDC or it's busy [ 100.477572][ T5282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.509701][ T5285] udc-core: couldn't find an available UDC or it's busy [ 100.515146][ T5285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.795088][ T5312] loop4: detected capacity change from 0 to 512 [ 101.971896][ T5312] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 101.979232][ T5312] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 101.983021][ T5312] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 101.986004][ T5312] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 104.009381][ T5332] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.089280][ T5326] loop1: detected capacity change from 0 to 4096 [ 104.124693][ T5326] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 104.207235][ T5326] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.149542][ T5338] udc-core: couldn't find an available UDC or it's busy [ 105.177039][ T5338] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.416626][ T5360] loop2: detected capacity change from 0 to 256 [ 105.473486][ T5360] exFAT-fs (loop2): bogus fat length [ 105.476802][ T5360] exFAT-fs (loop2): failed to read boot sector [ 105.478375][ T5360] exFAT-fs (loop2): failed to recognize exfat type [ 106.663426][ T5378] loop3: detected capacity change from 0 to 4096 [ 106.767514][ T5378] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.774835][ T5378] ntfs3: loop3: Failed to load $MFT. [ 109.015544][ T5399] udc-core: couldn't find an available UDC or it's busy [ 109.017497][ T5399] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.314598][ T5394] loop4: detected capacity change from 0 to 32768 [ 110.573211][ T5394] XFS (loop4): Mounting V5 Filesystem [ 111.602650][ T5394] XFS (loop4): Ending clean mount [ 111.619662][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.676779][ T5438] udc-core: couldn't find an available UDC or it's busy [ 111.678658][ T5438] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.716604][ T5405] loop3: detected capacity change from 0 to 32768 [ 111.733766][ T5442] xt_hashlimit: overflow, try lower: 3/0 [ 111.818498][ T5405] XFS (loop3): Mounting V5 Filesystem [ 111.830389][ T3998] XFS (loop4): Unmounting Filesystem [ 111.840061][ T5452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.843702][ T5452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.990408][ T5405] XFS (loop3): Ending clean mount [ 111.996118][ T5405] XFS (loop3): Quotacheck needed: Please wait. [ 113.000380][ T5405] XFS (loop3): Quotacheck: Done. [ 113.006913][ T5462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.039857][ T4005] XFS (loop3): Unmounting Filesystem [ 113.121226][ T5472] udc-core: couldn't find an available UDC or it's busy [ 113.123028][ T5472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.368905][ T5494] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 115.390921][ T5494] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 115.394212][ T5494] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 116.601678][ T5501] team0: Device ipvlan0 failed to register rx_handler [ 116.717756][ T5509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.784914][ T5512] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 116.790651][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.793042][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.835422][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.837374][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.839510][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.841472][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.657073][ T5512] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.778857][ T5492] loop4: detected capacity change from 0 to 40427 [ 118.883034][ T5492] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.899841][ T5492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.927121][ T5492] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 118.994922][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.016265][ T5543] udc-core: couldn't find an available UDC or it's busy [ 119.018063][ T5543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.041499][ T5543] udc-core: couldn't find an available UDC or it's busy [ 119.049089][ T5543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.195359][ T5549] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.030231][ T5558] loop1: detected capacity change from 0 to 256 [ 120.123097][ T5562] loop2: detected capacity change from 0 to 2048 [ 120.126374][ T5558] FAT-fs (loop1): Directory bread(block 64) failed [ 120.128087][ T5558] FAT-fs (loop1): Directory bread(block 65) failed [ 120.139044][ T5558] FAT-fs (loop1): Directory bread(block 66) failed [ 120.141108][ T5558] FAT-fs (loop1): Directory bread(block 67) failed [ 120.142898][ T5558] FAT-fs (loop1): Directory bread(block 68) failed [ 120.150858][ T5558] FAT-fs (loop1): Directory bread(block 69) failed [ 120.163674][ T5558] FAT-fs (loop1): Directory bread(block 70) failed [ 120.177817][ T5558] FAT-fs (loop1): Directory bread(block 71) failed [ 120.179666][ T5558] FAT-fs (loop1): Directory bread(block 72) failed [ 120.181368][ T5558] FAT-fs (loop1): Directory bread(block 73) failed [ 120.189626][ T5562] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (5c0) [ 120.289952][ T5558] attempt to access beyond end of device [ 120.289952][ T5558] loop1: rw=0, want=1772, limit=256 [ 120.293855][ T5558] process 'syz-executor.1' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 120.300800][ T5558] attempt to access beyond end of device [ 120.300800][ T5558] loop1: rw=0, want=1772, limit=256 [ 120.303921][ T5558] Buffer I/O error on dev loop1, logical block 442, async page read [ 122.131763][ T5588] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.468138][ T5604] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.958525][ T5602] loop4: detected capacity change from 0 to 512 [ 123.151752][ T26] audit: type=1326 audit(123.100:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc44c0e8 code=0x0 [ 123.187030][ T5602] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz-executor.4: bad orphan inode 15 [ 123.190246][ T5602] ext4_test_bit(bit=14, block=5) = 0 [ 123.191647][ T5602] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 123.202713][ T5600] ªªªªªª: renamed from vlan0 [ 123.684524][ T4615] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.727305][ T5619] loop3: detected capacity change from 0 to 256 [ 123.785732][ T5619] exfat: Deprecated parameter 'namecase' [ 123.800996][ T5619] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 123.871867][ T5614] loop1: detected capacity change from 0 to 32768 [ 123.968434][ T5614] XFS (loop1): Mounting V5 Filesystem [ 124.045824][ T4615] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 124.048818][ T4615] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 124.056113][ T4615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.058409][ T4615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.059688][ T5614] XFS (loop1): Ending clean mount [ 124.067386][ T4615] usb 1-1: config 0 descriptor?? [ 124.088450][ T5614] XFS (loop1): Quotacheck needed: Please wait. [ 124.142986][ T5614] XFS (loop1): Quotacheck: Done. [ 124.200068][ T4012] XFS (loop1): Unmounting Filesystem [ 124.464618][ T4615] usb 1-1: string descriptor 0 read error: -71 [ 124.470596][ T4615] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 124.473811][ T4615] usb 1-1: USB disconnect, device number 5 [ 127.374781][ T5678] loop3: detected capacity change from 0 to 256 [ 127.447480][ T5678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 127.538551][ T5665] loop2: detected capacity change from 0 to 32768 [ 127.589449][ T5665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5665) [ 127.640719][ T5665] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 127.643367][ T5665] BTRFS info (device loop2): setting nodatacow, compression disabled [ 127.669924][ T5665] BTRFS info (device loop2): turning on sync discard [ 127.671734][ T5665] BTRFS info (device loop2): enabling disk space caching [ 127.673671][ T5665] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.690032][ T5665] BTRFS info (device loop2): trying to use backup root at mount time [ 127.692112][ T5665] BTRFS error (device loop2): cannot disable free space tree [ 127.703951][ T5665] BTRFS error (device loop2): open_ctree failed [ 127.725602][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.730756][ T4008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4008) [ 127.826809][ T5686] loop3: detected capacity change from 0 to 1024 [ 127.834068][ T5672] loop4: detected capacity change from 0 to 32768 [ 127.866923][ T5686] hfsplus: uid requires an argument [ 127.868608][ T5686] hfsplus: unable to parse mount options [ 127.893675][ T5689] 9pnet: Insufficient options for proto=fd [ 127.952406][ T5674] loop1: detected capacity change from 0 to 32768 [ 128.255896][ T5672] loop4: detected capacity change from 0 to 2048 [ 129.176018][ T5674] XFS (loop1): Mounting V5 Filesystem [ 129.276095][ T5672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.357831][ T5674] XFS (loop1): Ending clean mount [ 129.364915][ T5674] XFS (loop1): Quotacheck needed: Please wait. [ 129.404376][ T5674] XFS (loop1): Quotacheck: Done. [ 129.467703][ T4012] XFS (loop1): Unmounting Filesystem [ 131.077266][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.078936][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.200486][ T5716] loop4: detected capacity change from 0 to 32768 [ 131.299485][ T5716] XFS (loop4): Mounting V5 Filesystem [ 131.478253][ T5716] XFS (loop4): Ending clean mount [ 131.482600][ T5716] XFS (loop4): Quotacheck needed: Please wait. [ 131.507171][ T5716] XFS (loop4): Quotacheck: Done. [ 131.702278][ T3998] XFS (loop4): Unmounting Filesystem [ 133.026498][ T5744] loop1: detected capacity change from 0 to 512 [ 133.132079][ T5744] EXT4-fs (loop1): Ignoring removed orlov option [ 133.200596][ T5744] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.204191][ T5744] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 133.230465][ T5744] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 133.340424][ T5744] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 133.352843][ T5744] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 133.380812][ T5744] EXT4-fs (loop1): Remounting filesystem read-only [ 133.382671][ T5744] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 133.400126][ T5744] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsold,abort,,. Quota mode: writeback. [ 133.603099][ T5751] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 133.651751][ T5749] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.657542][ T5753] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.660082][ T5738] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.020064][ T5763] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.099382][ T5769] udc-core: couldn't find an available UDC or it's busy [ 135.101194][ T5769] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 135.212262][ T5769] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 135.218477][ T5774] loop3: detected capacity change from 0 to 256 [ 135.265135][ T26] audit: type=1326 audit(135.220:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 135.388213][ T5777] loop3: detected capacity change from 0 to 256 [ 135.548284][ T5780] 9pnet: Insufficient options for proto=fd [ 135.563005][ T5759] loop1: detected capacity change from 0 to 32768 [ 135.666576][ T5759] XFS (loop1): Mounting V5 Filesystem [ 135.820797][ T5759] XFS (loop1): Ending clean mount [ 135.823584][ T5759] XFS (loop1): Quotacheck needed: Please wait. [ 135.909491][ T5759] XFS (loop1): Quotacheck: Done. [ 135.980312][ T4012] XFS (loop1): Unmounting Filesystem [ 136.078212][ T5796] team0: Port device wlan1 added [ 136.119901][ T5799] team0: Port device syz_tun added [ 136.255149][ T5808] loop3: detected capacity change from 0 to 256 [ 136.463774][ T5812] loop3: detected capacity change from 0 to 256 [ 136.579873][ T5814] 9pnet: Insufficient options for proto=fd [ 136.750520][ T5820] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 136.758049][ T5815] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.767884][ T5801] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.942645][ T5827] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 137.007542][ T26] audit: type=1326 audit(136.960:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdec80e8 code=0x0 [ 137.478517][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.481146][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.483712][ T5842] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.221745][ T5843] loop2: detected capacity change from 0 to 256 [ 138.316856][ T5847] loop1: detected capacity change from 0 to 512 [ 138.355391][ T5849] 9pnet: Insufficient options for proto=fd [ 138.378134][ T5847] EXT4-fs (loop1): Invalid want_extra_isize 5 [ 138.567972][ T5857] loop2: detected capacity change from 0 to 256 [ 138.614036][ T5859] loop3: detected capacity change from 0 to 256 [ 138.930087][ T26] audit: type=1326 audit(138.880:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdec80e8 code=0x0 [ 138.993676][ T5873] loop3: detected capacity change from 0 to 256 [ 139.039230][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.045039][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.077852][ T5877] 9pnet: Insufficient options for proto=fd [ 139.145195][ T5721] udevd[5721]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.164398][ T5880] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.213805][ T5721] udevd[5721]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.352373][ T5893] loop3: detected capacity change from 0 to 256 [ 139.381573][ T5721] udevd[5721]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.533430][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.732443][ T5721] udevd[5721]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.749011][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 139.752099][ T5910] 9pnet: Insufficient options for proto=fd [ 140.211140][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 140.517346][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.519285][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.522005][ T5904] device bridge_slave_0 entered promiscuous mode [ 140.667712][ T5908] loop3: detected capacity change from 0 to 32768 [ 140.723626][ T5908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5908) [ 140.753356][ T5908] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 140.760352][ T5908] BTRFS info (device loop3): using free space tree [ 140.783810][ T5908] BTRFS info (device loop3): has skinny extents [ 140.839389][ T4061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.874241][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.876718][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.883239][ T5904] device bridge_slave_1 entered promiscuous mode [ 140.957147][ T4061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.040399][ T5908] BTRFS info (device loop3): enabling ssd optimizations [ 141.055506][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.066806][ T4061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.108249][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.122692][ T26] audit: type=1326 audit(141.070:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 141.205230][ T4061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.240729][ T5904] team0: Port device team_slave_0 added [ 141.242627][ T5967] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.246202][ T5924] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.257846][ T5904] team0: Port device team_slave_1 added [ 141.291764][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.293612][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.327768][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.341480][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.343564][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.351280][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.469104][ T5904] device hsr_slave_0 entered promiscuous mode [ 141.498642][ T5904] device hsr_slave_1 entered promiscuous mode [ 141.534673][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.536692][ T5904] Cannot create hsr debugfs directory [ 141.716112][ T4047] Bluetooth: hci5: command 0x0409 tx timeout [ 142.226383][ T5991] loop3: detected capacity change from 0 to 256 [ 142.454088][ T5997] loop3: detected capacity change from 0 to 256 [ 142.576698][ T6005] tipc: Can't bind to reserved service type 0 [ 142.739742][ T5904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.807913][ T26] audit: type=1326 audit(142.760:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc44c0e8 code=0x0 [ 142.814049][ T5904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.858145][ T5904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.954276][ T5904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.969627][ T6026] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.190814][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.220913][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.223539][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.245544][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.323514][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.326538][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.330320][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.333131][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.346100][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.357500][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.365611][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.367514][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.391797][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.395226][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.398238][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.405937][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.420891][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.427694][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.442300][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.445659][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.449338][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.457798][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.468447][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.526228][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.537031][ T5904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.540323][ T5904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.552477][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.560165][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.794651][ T4613] Bluetooth: hci5: command 0x041b tx timeout [ 143.842315][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.844784][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.846926][ T6071] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.863762][ T6071] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 143.871098][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.933534][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.936535][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.951828][ T6041] loop4: detected capacity change from 0 to 32768 [ 144.002991][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.006095][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.008985][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.012999][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.018441][ T5904] device veth0_vlan entered promiscuous mode [ 144.035060][ T6041] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6041) [ 144.090894][ T6041] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 144.094218][ T6041] BTRFS info (device loop4): setting nodatacow, compression disabled [ 144.097335][ T6041] BTRFS info (device loop4): setting datacow [ 144.101293][ T6041] BTRFS info (device loop4): doing ref verification [ 144.104095][ T6041] BTRFS info (device loop4): force clearing of disk cache [ 144.113306][ T6041] BTRFS info (device loop4): turning off barriers [ 144.121095][ T6041] BTRFS info (device loop4): enabling ssd optimizations [ 144.125235][ T6041] BTRFS info (device loop4): using spread ssd allocation scheme [ 144.128340][ T6041] BTRFS info (device loop4): not using ssd optimizations [ 144.146722][ T6041] BTRFS info (device loop4): not using spread ssd allocation scheme [ 144.150595][ T5904] device veth1_vlan entered promiscuous mode [ 144.173015][ T6041] BTRFS info (device loop4): using free space tree [ 144.180607][ T6041] BTRFS info (device loop4): has skinny extents [ 144.265878][ T4061] device hsr_slave_0 left promiscuous mode [ 144.299200][ T6041] BTRFS info (device loop4): clearing free space tree [ 144.301446][ T6041] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.308442][ T6041] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.316392][ T4061] device hsr_slave_1 left promiscuous mode [ 144.389204][ T6041] BTRFS info (device loop4): creating free space tree [ 144.396694][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.398795][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.413761][ T6041] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.420020][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.425076][ T6041] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.432525][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.438519][ T4061] device bridge_slave_1 left promiscuous mode [ 144.441936][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.511993][ T4061] device bridge_slave_0 left promiscuous mode [ 144.513872][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.665069][ T4061] device veth1_macvtap left promiscuous mode [ 144.666985][ T4061] device veth0_macvtap left promiscuous mode [ 144.668653][ T4061] device veth1_vlan left promiscuous mode [ 144.670328][ T4061] device veth0_vlan left promiscuous mode [ 145.002246][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 145.011909][ T4061] team0 (unregistering): Port device team_slave_0 removed [ 145.021400][ T4061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.073902][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.232355][ T4061] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 145.282368][ T4061] bond0 (unregistering): Released all slaves [ 145.392508][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.395326][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.398169][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.400857][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.428464][ T6104] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.434729][ T5904] device veth0_macvtap entered promiscuous mode [ 145.440204][ T5904] device veth1_macvtap entered promiscuous mode [ 145.505260][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.508009][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.510436][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.513215][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.524888][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.527643][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.534818][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.537644][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.571520][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.573814][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.576989][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.580311][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.593761][ T26] audit: type=1326 audit(145.540:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 145.606203][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.608869][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.611405][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.614016][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.626460][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.635280][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.638039][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.640663][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.655979][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.660099][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.663000][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.696895][ T5904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.709643][ T5904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.711881][ T5904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.714105][ T5904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.847681][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.850137][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.884390][ T1952] Bluetooth: hci5: command 0x040f tx timeout [ 145.909617][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.912073][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.919936][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.947447][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.949638][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.954035][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.017267][ T6130] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.182272][ T6142] mmap: syz-executor.4 (6142) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 146.734160][ T6154] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.626060][ T6159] xt_TCPMSS: Only works on TCP SYN packets [ 147.832462][ T6175] loop4: detected capacity change from 0 to 256 [ 147.883401][ T26] audit: type=1326 audit(147.830:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 147.954638][ T1952] Bluetooth: hci5: command 0x0419 tx timeout [ 148.393541][ T6203] sctp: [Deprecated]: syz-executor.1 (pid 6203) Use of int in max_burst socket option deprecated. [ 148.393541][ T6203] Use struct sctp_assoc_value instead [ 148.552163][ T6208] loop4: detected capacity change from 0 to 1024 [ 148.776227][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.356361][ T364] hfsplus: b-tree write err: -5, ino 4 [ 149.630345][ T26] audit: type=1326 audit(149.580:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 151.776682][ T6280] device wlan0 entered promiscuous mode [ 151.778477][ T6280] device macsec1 entered promiscuous mode [ 151.783567][ T6280] device wlan0 left promiscuous mode [ 152.186767][ T26] audit: type=1326 audit(152.140:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 152.458755][ T6288] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 152.526001][ T26] audit: type=1326 audit(152.480:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 152.665546][ T6307] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 153.120837][ T6335] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 153.492501][ T26] audit: type=1326 audit(153.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 153.921877][ T26] audit: type=1326 audit(153.870:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 154.246727][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.308719][ T6434] fuse: Bad value for 'fd' [ 154.474249][ T6448] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 154.704200][ T26] audit: type=1326 audit(154.650:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc44c0e8 code=0x0 [ 154.752720][ T6472] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 154.775746][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.778218][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.893153][ T6486] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 154.908835][ T6486] udc-core: couldn't find an available UDC or it's busy [ 154.920823][ T6486] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.943993][ T6486] fuse: Bad value for 'fd' [ 154.965706][ T6495] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.968540][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.227321][ T26] audit: type=1326 audit(155.180:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 156.514191][ T26] audit: type=1326 audit(156.460:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdec80e8 code=0x0 [ 156.632185][ T6571] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.729315][ T6575] mkiss: ax0: crc mode is auto. [ 157.112989][ T6602] afs: Unexpected value for 'dyn' [ 157.246821][ T6610] device syz_tun entered promiscuous mode [ 157.285135][ T6610] device batadv_slave_0 entered promiscuous mode [ 157.324690][ T6610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.327016][ T6610] Cannot create hsr debugfs directory [ 157.329932][ T6617] syz-executor.2 (pid 6617) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 157.599042][ T6627] 9pnet: Insufficient options for proto=fd [ 157.647512][ T26] audit: type=1326 audit(157.600:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 157.751978][ T6647] team0: Device bridge0 is up. Set it down before adding it as a team port [ 158.211883][ T291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.303704][ T291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.406467][ T291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.506366][ T291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.747273][ T6668] chnl_net:caif_netlink_parms(): no params data found [ 158.794318][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.957790][ T6689] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.960111][ T6689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.962001][ T6689] IPv6: NLM_F_CREATE should be set when creating new route [ 158.963883][ T6689] IPv6: NLM_F_CREATE should be set when creating new route [ 159.225846][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.237517][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.265293][ T6668] device bridge_slave_0 entered promiscuous mode [ 159.279289][ T6713] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 159.281453][ T6713] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 159.295412][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.308331][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.319263][ T6668] device bridge_slave_1 entered promiscuous mode [ 159.378141][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.382657][ T26] audit: type=1326 audit(159.330:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 159.413055][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.542335][ T6668] team0: Port device team_slave_0 added [ 159.551449][ T6668] team0: Port device team_slave_1 added [ 159.552751][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.627375][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.632854][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.650280][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.659950][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.665137][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.679562][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.768825][ T6668] device hsr_slave_0 entered promiscuous mode [ 159.815245][ T6668] device hsr_slave_1 entered promiscuous mode [ 159.860554][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.864061][ T6668] Cannot create hsr debugfs directory [ 160.118284][ T291] IPVS: stopping backup sync thread 4378 ... [ 160.284658][ T1952] Bluetooth: hci1: command 0x0409 tx timeout [ 160.724443][ T4047] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.765562][ T291] device hsr_slave_0 left promiscuous mode [ 160.821546][ T291] device hsr_slave_1 left promiscuous mode [ 160.907096][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.909096][ T291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.923147][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.925650][ T291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.943999][ T291] device bridge_slave_1 left promiscuous mode [ 160.952207][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.964500][ T4047] usb 1-1: Using ep0 maxpacket: 32 [ 161.008799][ T291] device bridge_slave_0 left promiscuous mode [ 161.010536][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.084490][ T4047] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.086975][ T4047] usb 1-1: config 1 has no interface number 1 [ 161.088560][ T4047] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.091953][ T4047] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.134823][ T291] device veth1_macvtap left promiscuous mode [ 161.136618][ T291] device veth0_macvtap left promiscuous mode [ 161.138263][ T291] device veth1_vlan left promiscuous mode [ 161.254669][ T4047] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.257053][ T4047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.259153][ T4047] usb 1-1: Product: syz [ 161.260162][ T4047] usb 1-1: Manufacturer: syz [ 161.261319][ T4047] usb 1-1: SerialNumber: syz [ 161.529049][ T291] team0 (unregistering): Port device team_slave_1 removed [ 161.551511][ T291] team0 (unregistering): Port device team_slave_0 removed [ 161.568939][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.584628][ T4047] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 161.610774][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.705264][ T4047] usb 1-1: USB disconnect, device number 6 [ 161.798138][ T3990] udevd[3990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.913748][ T291] bond0 (unregistering): Released all slaves [ 162.200141][ T6668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.215195][ T26] audit: type=1326 audit(162.170:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 162.248047][ T6668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.306797][ T6668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.339901][ T6668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.354679][ T1952] Bluetooth: hci1: command 0x041b tx timeout [ 162.361799][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.423019][ T26] audit: type=1326 audit(162.370:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x7fc00000 [ 162.603865][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.641939][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.645313][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.654899][ T6668] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.669297][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.672200][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.675310][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.677234][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.697584][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.700369][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.703219][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.716142][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.718143][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.737913][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.770786][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.773946][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.780509][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.787069][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.791069][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.811889][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.817074][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.824648][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.830075][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.837061][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.844175][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.039362][ T6855] Injecting memory failure for pfn 0x12cf68 at process virtual address 0x20000000 [ 163.059503][ T6855] Memory failure: 0x12cf68: recovery action for dirty LRU page: Recovered [ 163.061898][ T6855] Injecting memory failure for pfn 0x128c1c at process virtual address 0x20001000 [ 163.091035][ T6855] Memory failure: 0x128c1c: recovery action for dirty LRU page: Recovered [ 163.093199][ T6855] Injecting memory failure for pfn 0x130924 at process virtual address 0x20002000 [ 163.144626][ T6855] Memory failure: 0x130924: recovery action for dirty LRU page: Recovered [ 163.147076][ T6855] Injecting memory failure for pfn 0x122a72 at process virtual address 0x20003000 [ 163.153484][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.156142][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.159250][ T6855] Memory failure: 0x122a72: recovery action for dirty LRU page: Recovered [ 163.187889][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.244687][ T6876] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.246633][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.249738][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.307315][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.309925][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.321119][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.323556][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.355856][ T6668] device veth0_vlan entered promiscuous mode [ 163.383774][ T6668] device veth1_vlan entered promiscuous mode [ 163.458544][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.461129][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.463708][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.477374][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.509103][ T6668] device veth0_macvtap entered promiscuous mode [ 163.516121][ T6668] device veth1_macvtap entered promiscuous mode [ 163.577121][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.601460][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.603988][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.622023][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.631974][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.642146][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.645935][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.648668][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.663951][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.676209][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.678939][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.687631][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.704888][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.726990][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.729892][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.736981][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.739772][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.742373][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.765692][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.768236][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.770996][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.806415][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.810710][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.813386][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.826055][ T6668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.828499][ T6668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.830849][ T6668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.833063][ T6668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.993199][ T4005] team0: Port device syz_tun removed [ 164.052452][ T26] audit: type=1326 audit(164.000:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 164.099602][ T4061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.101921][ T4061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.124830][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.170778][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.173203][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.181906][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.458141][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 165.407530][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.410219][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.595489][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 165.690002][ T26] audit: type=1326 audit(165.640:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 165.772210][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.774116][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.779330][ T6941] device bridge_slave_0 entered promiscuous mode [ 165.792360][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.810148][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.812976][ T6941] device bridge_slave_1 entered promiscuous mode [ 165.905882][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.929469][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.021719][ T6941] team0: Port device team_slave_0 added [ 166.033256][ T6941] team0: Port device team_slave_1 added [ 166.096409][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.100555][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.112749][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.123298][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.130888][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.151555][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.256772][ T6941] device hsr_slave_0 entered promiscuous mode [ 166.306672][ T6941] device hsr_slave_1 entered promiscuous mode [ 166.355737][ T6941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.357727][ T6941] Cannot create hsr debugfs directory [ 166.383071][ T26] audit: type=1326 audit(166.330:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 166.520936][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 166.628495][ T6941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.733700][ T6941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.792850][ T6941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.867759][ T6941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085158][ T7013] loop0: detected capacity change from 0 to 256 [ 167.152208][ T6941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.216572][ T6941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.230455][ T7015] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 167.232620][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 167.251989][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 167.283376][ T6941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.317270][ T6941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.484435][ T4613] Bluetooth: hci2: command 0x0409 tx timeout [ 167.614786][ T25] usb 11-1: SetAddress Request (2) to port 0 [ 167.616873][ T25] usb 11-1: new SuperSpeed USB device number 2 using vhci_hcd [ 167.754917][ T7040] loop0: detected capacity change from 0 to 2048 [ 167.830898][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.919012][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.921524][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.929114][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.935876][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.938812][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.941440][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.943433][ T4045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.955149][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.957983][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.960644][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.963246][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.965291][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.969688][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.988314][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.991497][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.998182][ T7016] vhci_hcd: connection reset by peer [ 168.000217][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.005333][ T364] vhci_hcd: stop threads [ 168.007242][ T364] vhci_hcd: release socket [ 168.018217][ T364] vhci_hcd: disconnect device [ 168.020102][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.022867][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.026674][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.029495][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.033098][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.041284][ T6941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.047860][ T6941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.050714][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.053455][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.189844][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.191975][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.201879][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.243307][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.246525][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.283153][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.287894][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.300400][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.303305][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.310816][ T6941] device veth0_vlan entered promiscuous mode [ 168.319750][ T6941] device veth1_vlan entered promiscuous mode [ 168.337987][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.340548][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.343111][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.348742][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.353867][ T6941] device veth0_macvtap entered promiscuous mode [ 168.380805][ T6941] device veth1_macvtap entered promiscuous mode [ 168.412710][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.417927][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.420545][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.423288][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.434058][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.440028][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.442692][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.457575][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.460417][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.463231][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.472050][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.475638][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.478271][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.488975][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.492617][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.498622][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.512843][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.519444][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.535463][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.538095][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.540822][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.543433][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.549519][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.552501][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.560718][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.565416][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.616586][ T26] audit: type=1326 audit(168.570:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 168.625495][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.628386][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.633534][ T6941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.636743][ T6941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.640533][ T6941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.640592][ T6941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.769383][ T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.771843][ T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.778694][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.815684][ T364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.818012][ T364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.830892][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.841651][ T7062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.905220][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.259173][ T291] team0: Port device wlan1 removed [ 169.562156][ T4475] Bluetooth: hci2: command 0x041b tx timeout [ 169.602639][ T291] device hsr_slave_0 left promiscuous mode [ 169.646921][ T291] device hsr_slave_1 left promiscuous mode [ 169.706106][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.708315][ T291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.717641][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.719673][ T291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.753242][ T291] device bridge_slave_1 left promiscuous mode [ 169.755698][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.875861][ T291] device veth1_macvtap left promiscuous mode [ 169.877621][ T291] device veth0_macvtap left promiscuous mode [ 169.879235][ T291] device veth1_vlan left promiscuous mode [ 169.880796][ T291] device veth0_vlan left promiscuous mode [ 170.567180][ T291] team0 (unregistering): Port device team_slave_1 removed [ 170.594185][ T291] team0 (unregistering): Port device team_slave_0 removed [ 170.624146][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.673497][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.852382][ T291] bond0 (unregistering): Released all slaves [ 170.985130][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.987654][ T7094] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 171.497109][ T26] audit: type=1326 audit(171.450:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 171.644536][ T4043] Bluetooth: hci2: command 0x040f tx timeout [ 171.671782][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.675459][ T7147] autofs4:pid:7147:autofs_fill_super: called with bogus options [ 171.911884][ T7157] udc-core: couldn't find an available UDC or it's busy [ 171.920187][ T7157] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.017960][ T7134] Injecting memory failure for pfn 0x122a99 at process virtual address 0x20000000 [ 172.031418][ T7134] Memory failure: 0x122a99: recovery action for dirty LRU page: Recovered [ 172.155428][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.305254][ T7172] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.307627][ T7172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.347033][ T7184] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 172.421173][ T7189] x_tables: duplicate underflow at hook 3 [ 172.450576][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.509628][ T7188] overlayfs: unrecognized mount option "/" or missing value [ 172.526985][ T7192] overlayfs: unrecognized mount option "minixdf" or missing value [ 172.536852][ T7188] overlayfs: unrecognized mount option "minixdf" or missing value [ 172.675439][ T25] usb 11-1: device descriptor read/8, error -110 [ 172.978391][ T26] audit: type=1326 audit(172.930:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 173.112091][ T7212] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 173.115163][ T25] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 173.117378][ T7212] netlink: 92148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.117520][ T25] usb usb11-port1: attempt power cycle [ 173.494691][ T25] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 174.382300][ T4043] Bluetooth: hci2: command 0x0419 tx timeout [ 174.615376][ T25] usb usb11-port1: Cannot enable. Maybe the USB cable is bad? [ 174.617767][ T25] usb usb11-port1: unable to enumerate USB device [ 174.724232][ T7239] loop0: detected capacity change from 0 to 512 [ 174.784488][ T7239] EXT4-fs (loop0): Ignoring removed bh option [ 174.786404][ T7239] EXT4-fs (loop0): Ignoring removed nobh option [ 174.865374][ T7239] EXT4-fs (loop0): 1 orphan inode deleted [ 174.868115][ T7239] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000,. Quota mode: writeback. [ 175.264138][ T7225] udc-core: couldn't find an available UDC or it's busy [ 175.274074][ T7255] loop0: detected capacity change from 0 to 8 [ 175.285584][ T7225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.406563][ T26] audit: type=1326 audit(176.360:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91d70e8 code=0x0 [ 176.446816][ T7266] sctp: [Deprecated]: syz-executor.0 (pid 7266) Use of int in max_burst socket option. [ 176.446816][ T7266] Use struct sctp_assoc_value instead [ 176.483617][ T7266] loop0: detected capacity change from 0 to 190 [ 176.531300][ T7266] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 176.531556][ T7279] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.554052][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 176.574903][ T7266] ntfs: (device loop0): ntfs_read_inode_mount(): Incorrect mft offset to the first attribute 65530 in superblock. [ 176.578186][ T7266] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 176.580603][ T7266] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 176.609362][ T7266] sctp: [Deprecated]: syz-executor.0 (pid 7266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.609362][ T7266] Use struct sctp_sack_info instead [ 176.676830][ T7266] loop0: detected capacity change from 0 to 2048 [ 176.693919][ T7266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.696765][ T7266] UDF-fs: Scanning with blocksize 512 failed [ 176.700145][ T7266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.706891][ T7266] UDF-fs: Scanning with blocksize 1024 failed [ 176.712232][ T7266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=513, location=513 [ 176.718603][ T7266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.736764][ T7266] UDF-fs: Scanning with blocksize 2048 failed [ 176.740184][ T7266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=257, location=257 [ 176.757579][ T7266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=513, location=513 [ 176.760026][ T7266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.762054][ T7266] UDF-fs: Scanning with blocksize 4096 failed [ 176.763557][ T7266] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 178.221490][ T7280] input: syz0 as /devices/virtual/input/input2 [ 178.439696][ T7266] loop0: detected capacity change from 0 to 32768 [ 178.475394][ T7266] xfs: Unknown parameter 'udf' [ 178.513747][ T26] audit: type=1326 audit(178.460:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 178.593130][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 178.800884][ T7330] loop0: detected capacity change from 0 to 256 [ 181.655497][ T7365] device wireguard0 entered promiscuous mode [ 181.870260][ T7375] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.058588][ T7383] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.061344][ T7383] netlink: zone id is out of range [ 182.098761][ T26] audit: type=1326 audit(182.050:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 182.871919][ T7389] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 183.328611][ T7454] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 183.334981][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.646761][ T26] audit: type=1326 audit(183.600:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9641a0e8 code=0x0 [ 183.785765][ T7486] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 183.892461][ T7493] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.897412][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.389981][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.657083][ T7540] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.661726][ T7540] device bond_slave_0 entered promiscuous mode [ 184.663767][ T7540] device bond_slave_1 entered promiscuous mode [ 184.830241][ T1952] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.915901][ T26] audit: type=1326 audit(184.870:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4fe50e8 code=0x0 [ 185.084592][ T1952] usb 1-1: Using ep0 maxpacket: 32 [ 185.193095][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.214754][ T1952] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 185.216862][ T1952] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 185.219527][ T1952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.231072][ T1952] usb 1-1: config 0 descriptor?? [ 185.293792][ T1952] as10x_usb: device has been detected [ 185.309598][ T1952] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 185.348285][ T1952] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 185.349449][ T7587] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 185.433461][ T1952] as10x_usb: error during firmware upload part1 [ 185.435556][ T1952] Registered device nBox DVB-T Dongle [ 185.528762][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.975789][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.096405][ T26] audit: type=1326 audit(186.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 186.196066][ T1528] usb 1-1: USB disconnect, device number 7 [ 186.237582][ T1528] Unregistered device nBox DVB-T Dongle [ 186.255547][ T1528] as10x_usb: device has been disconnected [ 186.294463][ T7655] loop0: detected capacity change from 0 to 512 [ 186.313878][ T7655] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 186.316309][ T7655] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.335725][ T7655] EXT4-fs (loop0): group descriptors corrupted! [ 186.542781][ T7667] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.830290][ T7683] udc-core: couldn't find an available UDC or it's busy [ 186.834885][ T7683] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.871703][ T7686] loop0: detected capacity change from 0 to 4096 [ 186.919738][ T7686] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 187.316577][ T7727] cgroup: fork rejected by pids controller in /syz3 [ 187.926896][ T7783] input: syz0 as /devices/virtual/input/input4 [ 188.047901][ T4061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.131988][ T4061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.196626][ T4061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.222202][ T7792] udc-core: couldn't find an available UDC or it's busy [ 188.224252][ T7792] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 188.280809][ T7801] __nla_validate_parse: 1 callbacks suppressed [ 188.280823][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.340513][ T4061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.397878][ T7810] loop0: detected capacity change from 0 to 128 [ 188.415732][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.430057][ T7810] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 188.432460][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 188.434298][ T7810] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 188.436425][ T7810] vxfs: can't find superblock. [ 188.499123][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.502313][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.506198][ T7785] device bridge_slave_0 entered promiscuous mode [ 188.513692][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.515837][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.518576][ T7785] device bridge_slave_1 entered promiscuous mode [ 188.612251][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.658934][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.743809][ T7785] team0: Port device team_slave_0 added [ 188.748692][ T7785] team0: Port device team_slave_1 added [ 188.787999][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.789941][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.804812][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.809114][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.810870][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.834471][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.916832][ T7785] device hsr_slave_0 entered promiscuous mode [ 188.944919][ T7785] device hsr_slave_1 entered promiscuous mode [ 189.227780][ T7847] ipt_rpfilter: unknown options [ 189.251066][ T7825] loop0: detected capacity change from 0 to 32768 [ 189.302873][ T7825] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7825) [ 189.342262][ T7825] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 189.345000][ T7825] BTRFS info (device loop0): using free space tree [ 189.346656][ T7825] BTRFS info (device loop0): has skinny extents [ 189.377406][ T7849] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.462302][ T7864] ipt_rpfilter: unknown options [ 189.506631][ T149] block nbd1: Attempted send on invalid socket [ 189.510122][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.524489][ T7864] hpfs: hpfs_map_sector(): read error [ 189.569246][ T7825] BTRFS info (device loop0): enabling ssd optimizations [ 189.856739][ T7891] udc-core: couldn't find an available UDC or it's busy [ 189.858603][ T7891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 189.940288][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.956828][ T7785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.995010][ T7785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.071629][ T7785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.139741][ T7785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.168403][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 190.407947][ T4061] device hsr_slave_0 left promiscuous mode [ 190.456686][ T4061] device hsr_slave_1 left promiscuous mode [ 190.534863][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.536912][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.552719][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.555384][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.560765][ T4061] device bridge_slave_1 left promiscuous mode [ 190.562537][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.606416][ T4061] device bridge_slave_0 left promiscuous mode [ 190.608233][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.693503][ T7933] ipt_rpfilter: unknown options [ 190.734704][ T4061] device veth1_macvtap left promiscuous mode [ 190.736412][ T4061] device veth0_macvtap left promiscuous mode [ 190.738076][ T4061] device veth1_vlan left promiscuous mode [ 190.739644][ T4061] device veth0_vlan left promiscuous mode [ 191.119714][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 191.133061][ T4061] team0 (unregistering): Port device team_slave_0 removed [ 191.149821][ T4061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.203579][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.384936][ T4061] bond0 (unregistering): Released all slaves [ 191.578341][ T7948] loop0: detected capacity change from 0 to 256 [ 191.612723][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.640462][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.643053][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.652706][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.659766][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.662434][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.665025][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.666916][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.670849][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.685070][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.687891][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.690850][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.692690][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.695197][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.705309][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.708120][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.711602][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.724691][ T7785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.729300][ T7785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.733909][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.736550][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.740146][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.742715][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.747934][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.754259][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.758784][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.769414][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.897959][ T7975] ipt_rpfilter: unknown options [ 191.910525][ T149] block nbd2: Attempted send on invalid socket [ 191.912202][ T149] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.922857][ T7975] hpfs: hpfs_map_sector(): read error [ 192.066100][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.068351][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.085495][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.096731][ T4615] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.119708][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.122711][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.156804][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.159562][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.162924][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.168219][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.176613][ T7785] device veth0_vlan entered promiscuous mode [ 192.196652][ T7785] device veth1_vlan entered promiscuous mode [ 192.202623][ T4616] Bluetooth: hci2: command 0x041b tx timeout [ 192.238050][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.240838][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.243482][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.249329][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.261258][ T7785] device veth0_macvtap entered promiscuous mode [ 192.272855][ T7785] device veth1_macvtap entered promiscuous mode [ 192.327314][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.335642][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.338420][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.341348][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.343860][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.346692][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.349243][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.361495][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.369851][ T7995] autofs4:pid:7995:autofs_fill_super: pipe file descriptor does not contain proper ops [ 192.374139][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.381326][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.384016][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.386884][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.392082][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.425862][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.437331][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.450379][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.453231][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.474382][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.477045][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.490065][ T7785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.494506][ T7785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.498447][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.501445][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.514641][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.520767][ T7785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.522931][ T7785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.530129][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.531757][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.544936][ T7785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.547150][ T7785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.684760][ T4615] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.687132][ T4615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.689125][ T4615] usb 1-1: Product: syz [ 192.690200][ T4615] usb 1-1: Manufacturer: syz [ 192.691452][ T4615] usb 1-1: SerialNumber: syz [ 192.766415][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.768738][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.774594][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.784138][ T4615] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.793234][ T4615] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 192.807392][ T4615] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 192.856872][ T364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.859247][ T364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.870192][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.918958][ T8024] ipt_rpfilter: unknown options [ 192.932702][ T149] block nbd2: Attempted send on invalid socket [ 192.934514][ T149] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.940934][ T8024] hpfs: hpfs_map_sector(): read error [ 193.018496][ T26] audit: type=1326 audit(192.970:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26b90e8 code=0x0 [ 193.113683][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.646820][ T26] audit: type=1326 audit(193.600:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 193.673071][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.683104][ T8049] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.703604][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.706874][ T8050] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.901389][ T26] audit: type=1326 audit(193.850:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26b90e8 code=0x0 [ 194.045656][ T8071] ipt_rpfilter: unknown options [ 194.066204][ T226] block nbd2: Attempted send on invalid socket [ 194.067893][ T226] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.072322][ T8071] hpfs: hpfs_map_sector(): read error [ 194.290250][ T4043] Bluetooth: hci2: command 0x040f tx timeout [ 194.652436][ T26] audit: type=1326 audit(194.600:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91d70e8 code=0x0 [ 194.769466][ T4043] usb 1-1: USB disconnect, device number 8 [ 194.846447][ T8106] ipt_rpfilter: unknown options [ 194.893990][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.896934][ T8109] tipc: Enabling of bearer rejected, failed to enable media [ 196.354900][ T4475] Bluetooth: hci2: command 0x0419 tx timeout [ 196.439430][ T8140] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 196.473555][ T8144] ipt_rpfilter: unknown options [ 196.478881][ T226] block nbd2: Attempted send on invalid socket [ 196.480505][ T226] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.483507][ T8144] hpfs: hpfs_map_sector(): read error [ 196.797052][ T8156] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 196.844880][ T26] audit: type=1326 audit(196.730:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1120e8 code=0x0 [ 197.183017][ T8184] loop0: detected capacity change from 0 to 256 [ 197.200611][ T8185] ipt_rpfilter: unknown options [ 197.691377][ T8207] loop0: detected capacity change from 0 to 8 [ 197.840550][ T8213] Invalid ELF header len 8 [ 197.897372][ T8216] Invalid ELF header len 8 [ 197.945975][ T8220] ipt_rpfilter: unknown options [ 198.322861][ T26] audit: type=1326 audit(198.270:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26b90e8 code=0x0 [ 198.629139][ T8246] loop0: detected capacity change from 0 to 8 [ 198.746217][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.832379][ T8251] ipt_rpfilter: unknown options [ 198.893000][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.980131][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.033002][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.231900][ T8230] chnl_net:caif_netlink_parms(): no params data found [ 199.351025][ T8270] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.528241][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.535429][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.557378][ T8230] device bridge_slave_0 entered promiscuous mode [ 199.585519][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.587315][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.609039][ T8230] device bridge_slave_1 entered promiscuous mode [ 199.760601][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.777048][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.787114][ T8299] ipt_rpfilter: unknown options [ 199.891179][ T8230] team0: Port device team_slave_0 added [ 199.946805][ T8230] team0: Port device team_slave_1 added [ 199.958506][ T26] audit: type=1326 audit(199.910:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 200.121696][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.124151][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.158540][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.160433][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.174235][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.232600][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.234976][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.246205][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.354878][ T1528] Bluetooth: hci0: command 0x0409 tx timeout [ 200.357677][ T8230] device hsr_slave_0 entered promiscuous mode [ 200.394808][ T8230] device hsr_slave_1 entered promiscuous mode [ 200.425107][ T8230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.427160][ T8230] Cannot create hsr debugfs directory [ 200.446978][ T8347] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.568750][ T8352] ipt_rpfilter: unknown options [ 200.570685][ T8353] ipt_rpfilter: unknown options [ 201.093137][ T8393] input: syz0 as /devices/virtual/input/input6 [ 201.101540][ T8393] input: failed to attach handler leds to device input6, error: -6 [ 202.137214][ T8404] ipt_rpfilter: unknown options [ 202.169963][ T8230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.197157][ T8407] ipt_rpfilter: unknown options [ 202.227088][ T8230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.235103][ T26] audit: type=1326 audit(202.180:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91d70e8 code=0x0 [ 202.363922][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.367036][ T8413] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 202.374508][ T8230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.407084][ T8230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.434491][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 202.457933][ T8421] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 202.562553][ T9] device hsr_slave_0 left promiscuous mode [ 202.594677][ T9] device hsr_slave_1 left promiscuous mode [ 202.676431][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.678537][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.684078][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.686449][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.696519][ T9] device bridge_slave_1 left promiscuous mode [ 202.698313][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.745942][ T9] device bridge_slave_0 left promiscuous mode [ 202.747858][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.885211][ T9] device veth1_macvtap left promiscuous mode [ 202.886926][ T9] device veth0_macvtap left promiscuous mode [ 202.888520][ T9] device veth1_vlan left promiscuous mode [ 204.179959][ T9] team0 (unregistering): Port device team_slave_1 removed [ 204.199230][ T9] team0 (unregistering): Port device team_slave_0 removed [ 204.209486][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.256570][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.442460][ T9] bond0 (unregistering): Released all slaves [ 204.514539][ T4616] Bluetooth: hci0: command 0x040f tx timeout [ 204.670631][ T8450] ipt_rpfilter: unknown options [ 204.700136][ T8448] ipt_rpfilter: unknown options [ 205.609808][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.646806][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.649293][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.674716][ T8230] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.689575][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.692333][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.695394][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.697240][ T4045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.699552][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.718276][ T8477] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20004 [ 205.729405][ T26] audit: type=1326 audit(205.680:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91d70e8 code=0x0 [ 205.756812][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.759798][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.762627][ T4118] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.764482][ T4118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.774863][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.787084][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.808540][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.812256][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.826938][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.835633][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.840014][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.845788][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.851473][ T8230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.862424][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.895225][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.897844][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.900481][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.894300][ T4616] Bluetooth: hci0: command 0x0419 tx timeout [ 207.176129][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.178164][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.240292][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.531362][ T26] audit: type=1326 audit(207.480:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91d70e8 code=0x0 [ 207.708941][ T8566] loop0: detected capacity change from 0 to 128 [ 208.611246][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.614303][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.659045][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.661991][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.667080][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.672835][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.702997][ T8230] device veth0_vlan entered promiscuous mode [ 208.746624][ T8230] device veth1_vlan entered promiscuous mode [ 208.831054][ T8230] device veth0_macvtap entered promiscuous mode [ 208.839306][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.841958][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.856075][ T8591] loop0: detected capacity change from 0 to 256 [ 208.857999][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.860572][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.863833][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.876274][ T8230] device veth1_macvtap entered promiscuous mode [ 208.892162][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.895519][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.898044][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.900930][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.903570][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.917399][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.919974][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.923834][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.928765][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.136847][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.139655][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.142448][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.161964][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.171608][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.174221][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.179198][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.182831][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.192397][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.195384][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.198515][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.203654][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.221857][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.225870][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.249556][ T8230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.251952][ T8230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.284618][ T8230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.286891][ T8230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.457063][ T1608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.462162][ T1608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.484080][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.508258][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.510542][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.539561][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.594132][ T26] audit: type=1326 audit(209.540:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26b90e8 code=0x0 [ 211.038557][ T8658] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 211.244771][ T8680] binder: 8674:8680 tried to acquire reference to desc 0, got 1 instead [ 211.266250][ T8680] binder: 8674:8680 Release 1 refcount change on invalid ref 2 ret -22 [ 211.269872][ T8680] binder: 8674:8680 BC_FREE_BUFFER u0000000000000000 no match [ 211.271980][ T8680] binder: 8674:8680 ERROR: BC_REGISTER_LOOPER called without request [ 211.274417][ T8680] binder: 8674:8680 Release 1 refcount change on invalid ref 8 ret -22 [ 212.164746][ T26] audit: type=1326 audit(212.120:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x0 [ 212.328779][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.371687][ T8704] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 212.397094][ T8709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.681010][ T8717] binder: 8712:8717 tried to acquire reference to desc 0, got 1 instead [ 212.730842][ T8717] binder: 8712:8717 Release 1 refcount change on invalid ref 2 ret -22 [ 212.733227][ T8717] binder: 8712:8717 BC_FREE_BUFFER u0000000000000000 no match [ 212.735414][ T8717] binder: 8712:8717 ERROR: BC_REGISTER_LOOPER called without request [ 212.737652][ T8717] binder: 8712:8717 Release 1 refcount change on invalid ref 8 ret -22 [ 213.467639][ T8721] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.835759][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.918974][ T26] audit: type=1326 audit(213.870:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26b90e8 code=0x0 [ 214.381887][ T8765] binder: 8759:8765 tried to acquire reference to desc 0, got 1 instead [ 214.455458][ T8765] binder: 8759:8765 Release 1 refcount change on invalid ref 2 ret -22 [ 214.457751][ T8765] binder: 8759:8765 BC_FREE_BUFFER u0000000000000000 no match [ 214.459740][ T8765] binder: 8759:8765 ERROR: BC_REGISTER_LOOPER called without request [ 214.461942][ T8765] binder: 8759:8765 Release 1 refcount change on invalid ref 8 ret -22 [ 214.557455][ T8765] loop0: detected capacity change from 0 to 256 [ 214.817388][ T8765] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 215.079475][ T8781] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 215.089382][ T8781] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 215.091564][ T8781] netlink: 650 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.105582][ T8777] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 215.107811][ T8777] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 215.115120][ T8777] netlink: 650 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.490551][ T8805] loop0: detected capacity change from 0 to 256 [ 215.773014][ T8812] binder: 8809:8812 tried to acquire reference to desc 0, got 1 instead [ 215.776226][ T8812] binder: 8809:8812 Release 1 refcount change on invalid ref 2 ret -22 [ 215.778617][ T8812] binder: 8809:8812 BC_FREE_BUFFER u0000000000000000 no match [ 215.780562][ T8812] binder: 8809:8812 ERROR: BC_REGISTER_LOOPER called without request [ 215.782721][ T8812] binder: 8809:8812 Release 1 refcount change on invalid ref 8 ret -22 [ 215.788830][ T8812] loop0: detected capacity change from 0 to 256 [ 216.612141][ T8812] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 216.911073][ T8830] loop0: detected capacity change from 0 to 256 [ 216.955081][ T8830] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 217.848665][ T8830] fuse: Unknown parameter '%? þv¦ç¦˜iç{Eru°ÿ [ 217.848665][ T8830] o±X´ˆææ¥J  Ì÷”Py§50x0000000000000006' [ 217.949052][ T8842] loop0: detected capacity change from 0 to 1024 [ 218.829193][ T4010] hfsplus: bad catalog entry type [ 218.830935][ T4010] hfsplus: bad catalog entry type [ 218.860404][ T4263] hfsplus: b-tree write err: -5, ino 4 [ 218.907841][ T4262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.940945][ T26] audit: type=1326 audit(218.890:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 218.947658][ T26] audit: type=1326 audit(218.890:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 218.958649][ T8870] overlayfs: workdir and upperdir must reside under the same mount [ 218.963188][ T26] audit: type=1326 audit(218.890:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 218.989709][ T26] audit: type=1326 audit(218.890:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.009597][ T4262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.014519][ T26] audit: type=1326 audit(218.890:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.031839][ T26] audit: type=1326 audit(218.890:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.042744][ T26] audit: type=1326 audit(218.890:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.051194][ T26] audit: type=1326 audit(218.890:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=6 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.061350][ T4010] device syz_tun left promiscuous mode [ 219.063294][ T26] audit: type=1326 audit(218.900:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.070783][ T26] audit: type=1326 audit(218.900:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbe9470e8 code=0x7ffc0000 [ 219.106418][ T4262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.186828][ T4262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.213220][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 219.340447][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.342192][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.345377][ T8860] device bridge_slave_0 entered promiscuous mode [ 219.349274][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.351157][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.353852][ T8860] device bridge_slave_1 entered promiscuous mode [ 219.381582][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.392748][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.439400][ T8860] team0: Port device team_slave_0 added [ 219.442885][ T8860] team0: Port device team_slave_1 added [ 219.535151][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.537087][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.543707][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.571036][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.572882][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.594631][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.857663][ T8860] device hsr_slave_0 entered promiscuous mode [ 219.884866][ T8860] device hsr_slave_1 entered promiscuous mode [ 219.924639][ T8860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.926912][ T8860] Cannot create hsr debugfs directory [ 220.349283][ T8905] chnl_net:caif_netlink_parms(): no params data found [ 220.445868][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.447888][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.450650][ T8905] device bridge_slave_0 entered promiscuous mode [ 220.514652][ T3554] Bluetooth: hci2: command 0x0409 tx timeout [ 220.527295][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.529196][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.531732][ T8905] device bridge_slave_1 entered promiscuous mode [ 220.592505][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.628315][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.673799][ T8905] team0: Port device team_slave_0 added [ 220.704513][ T8905] team0: Port device team_slave_1 added [ 220.765513][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.767491][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.783759][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.795637][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.797446][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.804190][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.827879][ T8860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.873076][ T8860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.907984][ T8860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.946691][ T8860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.074949][ T8976] tap0: tun_chr_ioctl cmd 2147767519 [ 221.137880][ T8905] device hsr_slave_0 entered promiscuous mode [ 221.174808][ T8905] device hsr_slave_1 entered promiscuous mode [ 221.214521][ T8905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.216601][ T8905] Cannot create hsr debugfs directory [ 221.464237][ T4262] device hsr_slave_0 left promiscuous mode [ 221.534542][ T4262] device hsr_slave_1 left promiscuous mode [ 221.632182][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.634279][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.647691][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.649616][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.664466][ T4262] device bridge_slave_1 left promiscuous mode [ 221.666180][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.707039][ T4262] device bridge_slave_0 left promiscuous mode [ 221.709154][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.804897][ T3553] Bluetooth: hci3: command 0x0409 tx timeout [ 221.844675][ T4262] device veth1_macvtap left promiscuous mode [ 221.846475][ T4262] device veth0_macvtap left promiscuous mode [ 221.848161][ T4262] device veth1_vlan left promiscuous mode [ 221.849766][ T4262] device veth0_vlan left promiscuous mode [ 222.134205][ T4262] team0 (unregistering): Port device team_slave_1 removed [ 222.148458][ T4262] team0 (unregistering): Port device team_slave_0 removed [ 222.163190][ T4262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.214311][ T4262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.401518][ T4262] bond0 (unregistering): Released all slaves [ 222.515742][ T4118] Unable to handle kernel paging request at virtual address dfff800000000024 [ 222.518025][ T4118] Mem abort info: [ 222.518937][ T4118] ESR = 0x0000000096000006 [ 222.520065][ T4118] EC = 0x25: DABT (current EL), IL = 32 bits [ 222.521607][ T4118] SET = 0, FnV = 0 [ 222.522702][ T4118] EA = 0, S1PTW = 0 [ 222.523698][ T4118] FSC = 0x06: level 2 translation fault [ 222.525196][ T4118] Data abort info: [ 222.526088][ T4118] ISV = 0, ISS = 0x00000006 [ 222.527284][ T4118] CM = 0, WnR = 0 [ 222.528253][ T4118] [dfff800000000024] address between user and kernel address ranges [ 222.530263][ T4118] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 222.532074][ T4118] Modules linked in: [ 222.533059][ T4118] CPU: 0 PID: 4118 Comm: kworker/0:9 Not tainted 5.15.161-syzkaller #0 [ 222.535213][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 222.537833][ T4118] Workqueue: events l2cap_info_timeout [ 222.539253][ T4118] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 222.540480][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.541228][ T4118] pc : __lock_acquire+0x104/0x7638 [ 222.544252][ T4118] lr : lock_acquire+0x240/0x77c [ 222.545495][ T4118] sp : ffff80001d477480 [ 222.546620][ T4118] x29: ffff80001d477720 x28: 1ffff0000292a069 x27: 0000000000000001 [ 222.548729][ T4118] x26: ffff800010d45860 x25: ffff700003a8eeb4 x24: 0000000000000000 [ 222.550865][ T4118] x23: 0000000000000000 x22: ffff0000c15651c0 x21: 0000000000000000 [ 222.552941][ T4118] x20: 0000000000000000 x19: 0000000000000120 x18: ffff80001d477300 [ 222.554975][ T4118] x17: 1fffe000368fd38e x16: ffff80001199d294 x15: 0000000000000005 [ 222.556997][ T4118] x14: ffff800016f8e500 x13: ffff80001d4775a0 x12: dfff800000000000 [ 222.557388][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.559065][ T4118] x11: ffff8000082f01e0 x10: ffff80001495034c x9 : 00000000000000f3 [ 222.562864][ T4118] x8 : 0000000000000024 x7 : ffff800010d45860 x6 : 0000000000000000 [ 222.564816][ T4118] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 222.566891][ T4118] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000120 [ 222.569061][ T4118] Call trace: [ 222.569931][ T4118] __lock_acquire+0x104/0x7638 [ 222.571234][ T4118] lock_acquire+0x240/0x77c [ 222.572386][ T4118] lock_sock_nested+0xec/0x1ec [ 222.573572][ T4118] l2cap_sock_ready_cb+0x4c/0x130 [ 222.574826][ T4118] l2cap_conn_start+0x668/0xd28 [ 222.576330][ T4118] l2cap_info_timeout+0x68/0xb8 [ 222.577610][ T4118] process_one_work+0x790/0x11b8 [ 222.578977][ T4118] worker_thread+0x910/0x1034 [ 222.580164][ T4118] kthread+0x37c/0x45c [ 222.581229][ T4118] ret_from_fork+0x10/0x20 [ 222.582379][ T4118] Code: 90063808 b94ec108 34000208 d343fe68 (386c6908) [ 222.584211][ T4118] ---[ end trace 972f838aed9bf1eb ]--- [ 222.639989][ T8860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.651505][ T8860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.151808][ T4118] Kernel panic - not syncing: Oops: Fatal exception [ 223.153560][ T4118] SMP: stopping secondary CPUs [ 223.154768][ T4118] Kernel Offset: disabled [ 223.155904][ T4118] CPU features: 0x0,000081c1,21302e40 [ 223.157305][ T4118] Memory Limit: none [ 223.717930][ T4118] Rebooting in 86400 seconds..