last executing test programs: 15.713725011s ago: executing program 1 (id=897): syz_emit_ethernet(0x2056, &(0x7f00000020c0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x2000000000000328, "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"}, {0xe, 0x200, "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"}, {0x2c, 0x1fffffffffffffea, "a22d4ba30d6b"}]}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0x1d0, 0x234, 0x0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@string={{0xc0}, {0xde, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7fff7fc, 0x4002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 14.125229571s ago: executing program 1 (id=912): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594", 0xf}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000100), 0x20) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)={0x4, 0x0, [{0x40000010, 0x0, 0x81}, {0x85f, 0x0, 0x4}, {0x0, 0x0, 0x80}, {0x800003e0, 0x0, 0x6}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socket(0x1e, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) 13.960363724s ago: executing program 0 (id=903): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000e000400000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006ffffffb702000008001000b7030000008d39c1731d3067140004009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r5, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r5, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="81fa2200d18c7a6f8af763604750d96f5139e8296101e941a000", 0x1a}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12.107074245s ago: executing program 0 (id=907): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x100a]}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f00000001c0)=""/228, 0xe4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r5 = fsopen(&(0x7f0000000140)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000080)='/\x85\xf8\\6h\x01\x00\x01\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000340)=r6) fsmount(r5, 0x0, 0x0) 11.194975979s ago: executing program 0 (id=908): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000004200)=ANY=[], 0x21, 0x14fe, &(0x7f0000001f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x300) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000240)) sendmsg$nl_xfrm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 11.17931316s ago: executing program 3 (id=909): r0 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="a8baf2b442ba5df76908ecdedc8bd98555cf8355dc5b735ad97d6e177b7755084a0a4b60da3a77dba9455969dc231791140d56ec061407617e697422ec356d1b0fd159097f0041eb7a088cdc5a1db9ff4918ab80f376366484d15ebee5f7203d483414072bc8402d8d3f68dcc760e2ab2171ae793cce5d1b9ddf795a631a0cb14c4a7a97a07a30d984a9e570324b5d", 0x8f}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x593, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r4 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r4, 0x34) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f00000000c0), &(0x7f00000004c0)) 11.125396535s ago: executing program 2 (id=910): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500657907da239ac2e9ae98946800000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000400)={@my=0x0}) 8.942328032s ago: executing program 0 (id=911): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0xffffffffffffff04, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$', @ANYRES16], 0x24}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000008f40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)="84", 0xfdef}], 0x1}], 0x1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, "195847a0aa45de6b85eae3efca1b99bbc529f7cf", "39e8599818f836f17fc62ac05f77a36d35695c8b"}) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000100)) 8.932746563s ago: executing program 2 (id=913): r0 = inotify_init1(0x80800) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r3 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r4 = dup(r0) inotify_rm_watch(r4, r3) read$FUSE(r4, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000a80)) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 8.928464344s ago: executing program 1 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 8.150313917s ago: executing program 3 (id=915): socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) epoll_create(0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10}, 0x48) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000ff"], 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8.143296457s ago: executing program 1 (id=916): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) bind$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/192}, 0x4f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000680), 0xfffffd9d) sendfile(0xffffffffffffffff, r6, 0x0, 0x8000002d) listen(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @random="1d6a9e05e90b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @mss={0x2, 0x4, 0x633}, @window={0x3, 0x3}]}}}}}}}, 0x0) 7.998595279s ago: executing program 0 (id=917): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3b7, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x0, {}, 0xff}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.997909949s ago: executing program 2 (id=918): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) socket(0x848000000015, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) write(r4, 0x0, 0x0) 7.870123969s ago: executing program 4 (id=919): pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xa}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000014c0)=[@release], 0x0, 0x0, 0x0}) 5.983743153s ago: executing program 4 (id=920): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x200, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x4da, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5.804043858s ago: executing program 1 (id=921): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x2, 0x0, 0x20000000) r1 = socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000040000000000000009500000000"], 0x0}, 0x90) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup(r4) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x0, @broadcast}}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'ipvlan1\x00', @ifru_ivalue=0x1}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) process_madvise(r8, &(0x7f0000000800)=[{&(0x7f00000003c0)="08105a9bf87a1d8cbe3f645728becf0170210021f17b9b21a279de485ffa76941d24fdfe2c4062bb4948a6462f2203a44204377cb7ce0e7ab2a0edae03ec95c7e5123c62823eddb66506f1e6a4903c46c4a7d011c43f72341cf141", 0x5b}, {&(0x7f0000000580)="fac9cee70936b72a119c85a7309593a15c6eab9e54d9efc94e17c0634f655fdb0ed6495dcb71f5c12ef19c09eec9fb5e8f8136b97fffcdf2c2017c3ba92a3fbd5c375f4bfdb9aa9c0e8ef6ecbda02f96c7f2728bf55986f0929c8478526c549496e8b079e4bee9bba74015eef6655cb529748aaecfc3f54233c7a144e8463520c063daf1354c0aafb164fdf55015f6fc340edda35129ac8572f21dbbb6a55a8894d2a89ce930e2e5c7efe2bd5a736ad61f8e9a18d6adccc1aa74240c36bcbc40ed8760181a4aa0a0c6da1a4b2f20fb7ff54205a9a6f6f6cd6f5daf79315ead774e36ed6ca16c1e22736cd447a0cd39f78aa7b2", 0xf3}, {0x0}, {&(0x7f0000000440)}, {&(0x7f0000000780)="cee3eee54aef2f972aea2fcddcf9553dcd983e1a7594e45c9895e18ddfc07c09545869dd8f2b8242aea54392b98ca77770f49e5937ebbe05e97e32fa8e49a09e0c733e6bcc15f00d8decac8fa24ab1d6673867917c343bdeeafbd6ab18c7da9c57eb6250c276cf291aa86420a0cdcee98c239a51865989b64534", 0x7a}], 0x5, 0x9, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2080, 0x0) 5.803589428s ago: executing program 3 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000280)) 4.309703489s ago: executing program 3 (id=923): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000004200)=ANY=[], 0x21, 0x14fe, &(0x7f0000001f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x300) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000240)) sendmsg$nl_xfrm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 4.309373939s ago: executing program 2 (id=924): vmsplice(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="94", 0x1}, {&(0x7f0000000380)="cb", 0x1}, {&(0x7f00000003c0)="e7", 0x1}, {&(0x7f0000000b00)}], 0x5, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x59c0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf31]}, 0x45c) unshare(0x8040080) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000005740)=[{}, {0x3, 0x8}], 0x1f4, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x8001}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.191094389s ago: executing program 4 (id=925): socket$inet(0x2, 0x4000000000000001, 0x0) setns(0xffffffffffffffff, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000300), 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013700000000009500000000000000dc96919f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) add_key(0x0, &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22340, 0x0) 3.19716791s ago: executing program 4 (id=926): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00fd009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000103ff000000000000001e000000c1000000"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.95330494s ago: executing program 0 (id=927): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x7, &(0x7f0000000000)=[{0xd3}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x2b, 0x200040}]}) r0 = socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1, 0x0, @prog_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x800, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x45d8, 0x16) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r3, 0x0, 0x0, 0x12122, 0x0, 0x0) 2.900208114s ago: executing program 2 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r2, 0x31f}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50000013}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r14, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x29, 0x79}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x20000000) 1.850773529s ago: executing program 3 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000080)) fcntl$setlease(r4, 0x400, 0x0) dup3(r5, r4, 0x0) r6 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) accept4$unix(r6, &(0x7f0000000340), &(0x7f0000000180)=0x6e, 0x0) 1.707738101s ago: executing program 4 (id=930): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) tkill(r1, 0x17) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f00000003c0), 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1.48005708s ago: executing program 1 (id=931): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x4c, r2, 0x400, 0xfffffffc, 0x25dfdbfd, {0x1d}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x20048001) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874cc414e02216198977dc3c41ed0880c64c39e5f4059bae641ed1511000"}}, 0x80}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r8, 0x0, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$binfmt_script(r4, &(0x7f00000004c0), 0xc3d9) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 149.672168ms ago: executing program 4 (id=932): socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x200000100000011, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 106.956072ms ago: executing program 2 (id=933): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000001f40)=ANY=[], 0xd, 0x2a4, &(0x7f0000000480)="$eJzs3U9rK1UYB+B3krnpiIsEcaMIDujCVbl166YVriB2pUTQjTd47wVNwoUWAnZh7Kqfwu/hR3DjpltXglvBnV1URiYz0zRt+ocaU7DPszrMmd85b+aEZJU3T98aD5+9TOLwr98iy5Jobcd2nCTRi1Y0fog0AID/j5OiiD+LuyTT1uqrAQDWofr+r9x3LQDAenz2xZef7OzuPvk0z7N4o3s06ScRMT6a9Kv5nRfxTYzieTyObpxGFGeq8Ucf7z6JNC/14t3xdNIvk+OvfqnX3/kjYpbfim70lue38sq5/HTSf/T0QqndeH15/v0l+eh34r13ztW/Gd04/jpexiieRZmd57/fypP5NmU+aUV/Y3ZfJSsT7TUcBwAAAAAAAAAAAAAAAAAAAAAAD8RmnidV+55Z/57yUt1/p306m9/MG73F/jxV/qxxTtUfqIi6Rc+0iB+b/jqP8zwv6hsnsy46ZT6NN1N/LAAAAAAAAAAAAAAAAAAAAACl/e8OhoPR6PneSgZNN4DmZ/13XWf73JW342A4aF+94Mbt95p3GziOstZrb440jRU9lpsGr0TE6lfemB/u51ENmoNZ6V6vfVgtejAc5PVU85iHg+SmvbLm4H6aT0XaiX9bWDF7S5wWi2eanZW6mOqs6Gl0Xl069XdRFLdb54PfqzOqrySzFhsX35nfvvh1SfxRPVj6AstBdvksfr66nis/Mtor+ugBAAAAAAAAAAAAAAAAAAAumP/od8nk4bXR1n9WFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs2fz//5tBFhGLVy4NpnX4unvqQSf29u/5JQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAA/BMAAP//ICFKyQ==") truncate(&(0x7f0000000080)='./file1\x00', 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000), 0x4) r3 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 3 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x40415, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES8], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") mkdir(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063013700000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)=']+\x00', 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x122e, &(0x7f0000002580)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x300) kernel console output (not intermixed with test programs): nk becomes ready [ 269.597648][ T3888] Bluetooth: hci3: command 0x041b tx timeout [ 269.627684][ T3888] Bluetooth: hci0: command 0x0419 tx timeout [ 270.260520][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.341075][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.690554][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 270.758770][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.805362][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.826996][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.044963][ T6049] device bridge_slave_0 entered promiscuous mode [ 271.462257][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.539910][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.559382][ T6049] device bridge_slave_1 entered promiscuous mode [ 271.652043][ T3888] Bluetooth: hci3: command 0x040f tx timeout [ 273.650610][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.421690][ T3568] Bluetooth: hci3: command 0x0419 tx timeout [ 275.485401][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.529520][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.597401][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.733133][ T6049] team0: Port device team_slave_0 added [ 275.790228][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.845943][ T6049] team0: Port device team_slave_1 added [ 276.062759][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.099061][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.576167][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.799765][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.884420][ T6138] lo speed is unknown, defaulting to 1000 [ 278.895424][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.955178][ T6140] loop3: detected capacity change from 0 to 1024 [ 278.966912][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.071952][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.195507][ T6140] EXT4-fs (loop3): Ignoring removed oldalloc option [ 279.214889][ T6140] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 279.342529][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 279.359639][ T6140] EXT4-fs (loop3): Unrecognized mount option "fsuuid=cf79116S-e0d7-d1c2-3c3-" or missing value [ 279.436027][ T6049] device hsr_slave_0 entered promiscuous mode [ 279.494896][ T6049] device hsr_slave_1 entered promiscuous mode [ 279.536057][ T6049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.560526][ T6049] Cannot create hsr debugfs directory [ 284.744706][ T155] tipc: Left network mode [ 285.259739][ T6160] Unknown options in mask 5 [ 286.065744][ T6163] loop3: detected capacity change from 0 to 4096 [ 286.400911][ T6175] ax25_connect(): syz.2.558 uses autobind, please contact jreuter@yaina.de [ 286.454715][ T6169] lo speed is unknown, defaulting to 1000 [ 287.116338][ T6195] loop2: detected capacity change from 0 to 16 [ 287.427176][ T6195] erofs: (device loop2): mounted with root inode @ nid 36. [ 287.445348][ T6018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.483635][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 287.539763][ T6018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.659357][ T6018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.676070][ T6018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.767662][ T6049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.898920][ T6209] loop3: detected capacity change from 0 to 512 [ 287.942145][ T6049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.981019][ T6209] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 287.988490][ T6209] EXT4-fs (loop3): Unrecognized mount option "euid<00000000000000000000" or missing value [ 288.005122][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.019186][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.030852][ T6169] device bridge_slave_0 entered promiscuous mode [ 288.042941][ T6049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.058430][ T6049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.135558][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.143564][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.144557][ T6212] loop2: detected capacity change from 0 to 512 [ 288.153768][ T6169] device bridge_slave_1 entered promiscuous mode [ 288.167474][ T6209] loop3: detected capacity change from 0 to 256 [ 288.221713][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 288.242190][ T6209] exfat: Bad value for 'uid' [ 288.291532][ T3888] Bluetooth: hci4: command 0x0409 tx timeout [ 288.328186][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.348004][ T6212] EXT4-fs (loop2): 1 orphan inode deleted [ 288.353884][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.433132][ T6212] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 288.456820][ T6169] team0: Port device team_slave_0 added [ 288.471742][ T6212] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 288.544635][ T6169] team0: Port device team_slave_1 added [ 290.221300][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.241799][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.329454][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.364568][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.390352][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.427241][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.552640][ T3888] Bluetooth: hci4: command 0x041b tx timeout [ 290.678225][ T6244] loop2: detected capacity change from 0 to 64 [ 290.690682][ T6169] device hsr_slave_0 entered promiscuous mode [ 290.721869][ T6169] device hsr_slave_1 entered promiscuous mode [ 290.747997][ T6169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.771210][ T6244] hfs: request for non-existent node 293 in B*Tree [ 290.787496][ T6169] Cannot create hsr debugfs directory [ 290.803223][ T6244] hfs: request for non-existent node 293 in B*Tree [ 290.830735][ T6244] hfs: get root inode failed [ 290.905894][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 291.006850][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.174004][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.198326][ T6260] loop3: detected capacity change from 0 to 2048 [ 291.215074][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.227548][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.277056][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.314897][ T6260] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.572: bad orphan inode 8192 [ 291.351794][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.359960][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.407403][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.430618][ T6260] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.458431][ T6169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.543428][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.573084][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.590250][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.597439][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.600876][ T6270] ebt_among: dst integrity fail: 101 [ 291.611249][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.625321][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.634123][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.641210][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.653865][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.668482][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.678128][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.687555][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.707336][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.730550][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.746838][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.754007][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.780661][ T26] audit: type=1326 audit(1723820270.461:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.2.574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x0 [ 291.826351][ T6169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.859708][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.870904][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.888438][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.910121][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.919570][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.928617][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.935767][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.943837][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.953267][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.964287][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.023839][ T6169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.083627][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.092607][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.244342][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.254031][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.262788][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.295605][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.313273][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.325546][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.586141][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.718211][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 293.118778][ T6169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.210000][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.219208][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.228779][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.241488][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.250019][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.264293][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.319446][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.588015][ T6169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.633192][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.645783][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.670591][ T6169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.699528][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.724441][ T6169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.762940][ T6169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.830587][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.844811][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.855829][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.866986][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.911164][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.927625][ T6018] device veth0_vlan entered promiscuous mode [ 293.941570][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.942560][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.971324][ T6018] device veth1_vlan entered promiscuous mode [ 294.002957][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.015636][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.032172][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.099017][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.114568][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.147326][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.194344][ T6018] device veth0_macvtap entered promiscuous mode [ 294.228889][ T6314] loop2: detected capacity change from 0 to 512 [ 294.235430][ T155] device hsr_slave_0 left promiscuous mode [ 294.244778][ T155] device hsr_slave_1 left promiscuous mode [ 294.252263][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.260072][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.268032][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.291223][ T155] device bridge_slave_1 left promiscuous mode [ 294.301446][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.310430][ T155] device bridge_slave_0 left promiscuous mode [ 294.318409][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.333791][ T155] device hsr_slave_0 left promiscuous mode [ 294.340991][ T155] device hsr_slave_1 left promiscuous mode [ 294.342311][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 294.359944][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.361028][ T6314] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 294.371708][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.410209][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.545313][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.554495][ T155] device bridge_slave_1 left promiscuous mode [ 294.560847][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.569895][ T155] device bridge_slave_0 left promiscuous mode [ 294.576383][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.590613][ T155] device hsr_slave_0 left promiscuous mode [ 294.597462][ T155] device hsr_slave_1 left promiscuous mode [ 294.617108][ T155] batman_adv: batadv0: Removing interface: team0 [ 294.624886][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.646671][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.689895][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.701730][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.738029][ T155] device bridge_slave_1 left promiscuous mode [ 294.748939][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.771768][ T3611] Bluetooth: hci4: command 0x0419 tx timeout [ 294.778465][ T155] device bridge_slave_0 left promiscuous mode [ 294.791544][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.832746][ T155] rdma_rxe: ignoring netdev event = 10 for lo [ 294.855228][ T6319] input: syz1 as /devices/virtual/input/input6 [ 294.874748][ T155] device veth1_macvtap left promiscuous mode [ 294.880817][ T155] device veth0_macvtap left promiscuous mode [ 294.911625][ T155] device veth1_vlan left promiscuous mode [ 294.917476][ T155] device veth0_vlan left promiscuous mode [ 294.964305][ T155] device veth1_macvtap left promiscuous mode [ 294.985954][ T155] device veth0_macvtap left promiscuous mode [ 294.997370][ T155] device veth1_vlan left promiscuous mode [ 295.004474][ T6325] 9pnet: Insufficient options for proto=fd [ 295.010513][ T155] device veth0_vlan left promiscuous mode [ 295.019820][ T6325] loop3: detected capacity change from 0 to 8 [ 295.033287][ T155] device veth1_macvtap left promiscuous mode [ 295.039358][ T155] device veth0_macvtap left promiscuous mode [ 295.054847][ T155] device veth1_vlan left promiscuous mode [ 295.060687][ T155] device veth0_vlan left promiscuous mode [ 295.104560][ T6325] attempt to access beyond end of device [ 295.104560][ T6325] loop3: rw=2048, want=36028797018963976, limit=8 [ 295.141987][ T6325] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 295.151948][ T6325] unable to read xattr id index table [ 295.293528][ C1] sd 0:0:1:0: tag#5173 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 295.303554][ C1] sd 0:0:1:0: tag#5173 CDB: Write(6) 0a 0b 00 08 00 00 [ 295.510354][ T6327] loop3: detected capacity change from 0 to 2048 [ 295.590838][ T6327] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 295.627750][ T6327] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 295.766937][ T6327] 9pnet: Insufficient options for proto=fd [ 296.017809][ T155] infiniband syz1: set down [ 296.737739][ T6333] loop2: detected capacity change from 0 to 512 [ 296.840523][ T155] team0 (unregistering): Port device team_slave_1 removed [ 296.857474][ T6333] EXT4-fs (loop2): filesystem is read-only [ 296.910644][ T155] team0 (unregistering): Port device team_slave_0 removed [ 296.948549][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.977328][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.159881][ T155] bond0 (unregistering): Released all slaves [ 297.329641][ T155] team0 (unregistering): Port device team_slave_1 removed [ 297.347061][ T155] team0 (unregistering): Port device team_slave_0 removed [ 297.363304][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.379735][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.469312][ T155] bond0 (unregistering): Released all slaves [ 297.645905][ T155] team0 (unregistering): Port device team_slave_1 removed [ 297.670105][ T155] team0 (unregistering): Port device team_slave_0 removed [ 297.686450][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.702090][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.789015][ T155] bond0 (unregistering): Released all slaves [ 297.860327][ T3664] smc: removing ib device syz1 [ 297.872945][ T6018] device veth1_macvtap entered promiscuous mode [ 297.923941][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.943208][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.962137][ T3612] lo speed is unknown, defaulting to 1000 [ 298.034285][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.055185][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.073103][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.091639][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.113713][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.131595][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.177385][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.203298][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.221661][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.259878][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.276773][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.312622][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.334268][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.351506][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.374964][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.398328][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.433116][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.453022][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.475738][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.530185][ T6018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.548871][ T6018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.561308][ T6018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.570410][ T6018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.652678][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.683246][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.695944][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.722216][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.735310][ T6049] device veth0_vlan entered promiscuous mode [ 298.749431][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.793855][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.812245][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.916106][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.933891][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.963192][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.991264][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.011876][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.019148][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.042446][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.055728][ T6343] loop2: detected capacity change from 0 to 32768 [ 299.112649][ T6049] device veth1_vlan entered promiscuous mode [ 299.143403][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.154092][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.163624][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.170706][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.208538][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.218037][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.392022][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.400542][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.409603][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.433872][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.443827][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.453235][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.469006][ T6169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.483738][ T6169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.506140][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.516270][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.524465][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.533085][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.541610][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.549959][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.558890][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.594034][ T6049] device veth0_macvtap entered promiscuous mode [ 299.624335][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.633758][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.643603][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.660184][ T6049] device veth1_macvtap entered promiscuous mode [ 299.679166][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.693664][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.723241][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.740324][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.752241][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.788367][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.808459][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.829924][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.850310][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.869832][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.880011][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.893235][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.954253][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.972322][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.985366][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.000848][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.021069][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.118757][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.151305][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.185018][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.195813][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888062214800: rx timeout, send abort [ 300.199142][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888021b89c00: rx timeout, send abort [ 300.199363][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888062214800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.200905][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888021b89c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.278634][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.292304][ T6049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.303501][ T6049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.580891][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.968538][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.073826][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.109160][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.122292][ T6355] loop1: detected capacity change from 0 to 1024 [ 301.146995][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.193792][ T6355] autofs4:pid:6355:autofs_fill_super: pipe file descriptor does not contain proper ops [ 301.206052][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.237799][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.256461][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.294756][ T6049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.324208][ T6049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.381685][ T6049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.451562][ T6049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.658231][ T6359] hfsplus: bad catalog entry type [ 302.268784][ T3664] hfsplus: b-tree write err: -5, ino 4 [ 302.727053][ T6169] device veth0_vlan entered promiscuous mode [ 302.811956][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.820426][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.883337][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.901103][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.934080][ T6169] device veth1_vlan entered promiscuous mode [ 303.096892][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.122191][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.142795][ T6169] device veth0_macvtap entered promiscuous mode [ 303.174050][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.198149][ T6169] device veth1_macvtap entered promiscuous mode [ 303.226737][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.292695][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.315441][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.332812][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.349676][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.363493][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.384812][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.402213][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.428371][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.441259][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.459769][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.477336][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.490345][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.502847][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.512997][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.524346][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.539967][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.560140][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.573808][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 303.586404][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.609253][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.631423][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.661581][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.673145][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.683260][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.693864][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.703793][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.714452][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.728320][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.749208][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.757865][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.782062][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.801207][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.816578][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.840523][ T6169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.871380][ T6169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.900837][ T6169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.931593][ T6169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.197053][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.230414][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.249070][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.270313][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.300835][ T6389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.594'. [ 304.310478][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.346992][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.458870][ T26] audit: type=1326 audit(1723820283.141:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.0.554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x0 [ 304.486660][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.675675][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 304.805738][ T6399] loop4: detected capacity change from 0 to 256 [ 305.061234][ T6403] loop3: detected capacity change from 0 to 1024 [ 305.545733][ T6411] device veth0_to_hsr entered promiscuous mode [ 305.583450][ T6411] device veth0_to_hsr left promiscuous mode [ 306.498935][ T3780] hfsplus: b-tree write err: -5, ino 4 [ 307.368646][ T6421] loop2: detected capacity change from 0 to 2048 [ 307.547768][ T6423] loop3: detected capacity change from 0 to 256 [ 307.584073][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.597517][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 307.627675][ T6421] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 310.361133][ T6451] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 310.385493][ T6456] SET target dimension over the limit! [ 310.569736][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.613'. [ 310.579258][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 310.587115][ T5800] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.394492][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 311.611939][ T5810] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 311.631710][ T5810] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 311.635962][ T6471] Process accounting resumed [ 311.650938][ T5810] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 311.685605][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.811637][ T5800] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 311.902755][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.938602][ T5800] usb 1-1: Product: syz [ 311.946519][ T5800] usb 1-1: Manufacturer: syz [ 311.961389][ T5800] usb 1-1: SerialNumber: syz [ 311.983363][ T5800] usb 1-1: config 0 descriptor?? [ 312.031410][ T3885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 312.761631][ T5810] usb 3-1: string descriptor 0 read error: -22 [ 312.787925][ T6482] loop1: detected capacity change from 0 to 1024 [ 312.801428][ T3885] usb 4-1: Using ep0 maxpacket: 32 [ 312.881665][ T6487] loop4: detected capacity change from 0 to 512 [ 314.701654][ T6489] loop2: detected capacity change from 0 to 1024 [ 314.733429][ T5800] usb 1-1: USB disconnect, device number 12 [ 314.745013][ T5810] usb 3-1: USB disconnect, device number 3 [ 314.751523][ T3885] usb 4-1: unable to read config index 0 descriptor/all [ 314.761713][ T3885] usb 4-1: can't read configurations, error -71 [ 314.799128][ T6487] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.622: corrupted in-inode xattr [ 314.812094][ T6487] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.622: couldn't read orphan inode 15 (err -117) [ 314.829132][ T6487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 314.911954][ T3836] hfsplus: b-tree write err: -5, ino 3 [ 315.034981][ T6486] ODEBUG: Out of memory. ODEBUG disabled [ 315.301513][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.623'. [ 315.340072][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 315.407667][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.311465][ T26] audit: type=1326 audit(1723820295.991:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.0.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x0 [ 317.390511][ T6507] loop4: detected capacity change from 0 to 4096 [ 317.408680][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 317.587152][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.593630][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.651264][ T6514] kvm: pic: non byte read [ 317.662258][ T6514] kvm: pic: level sensitive irq not supported [ 317.662397][ T6514] kvm: pic: non byte read [ 317.688679][ T6514] kvm: pic: single mode not supported [ 317.688700][ T6514] kvm: pic: level sensitive irq not supported [ 317.699583][ T6514] kvm: pic: non byte read [ 317.723100][ T6514] kvm: pic: level sensitive irq not supported [ 317.723170][ T6514] kvm: pic: non byte read [ 317.740240][ T6514] kvm: pic: non byte read [ 317.748815][ T6507] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.769558][ T6514] kvm: pic: non byte read [ 317.774682][ T6514] kvm: pic: non byte read [ 317.817511][ T6514] kvm: pic: level sensitive irq not supported [ 317.817584][ T6514] kvm: pic: non byte read [ 318.616081][ T6514] kvm: pic: non byte read [ 318.631670][ T6514] kvm: pic: non byte read [ 318.646524][ T6514] kvm: pic: level sensitive irq not supported [ 318.647067][ T6514] kvm: pic: level sensitive irq not supported [ 318.667310][ T6514] kvm: pic: level sensitive irq not supported [ 318.748162][ T6514] kvm: pic: level sensitive irq not supported [ 318.765981][ T6514] kvm: pic: level sensitive irq not supported [ 318.787246][ T6514] kvm: pic: level sensitive irq not supported [ 320.083241][ T6549] virt_wifi0: mtu less than device minimum [ 321.251975][ T6565] loop1: detected capacity change from 0 to 512 [ 321.838098][ T6565] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 321.838830][ T6565] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 323.063527][ T6586] input: syz1 as /devices/virtual/input/input7 [ 325.538962][ T6626] ALSA: seq fatal error: cannot create timer (-22) [ 325.752364][ T6626] loop2: detected capacity change from 0 to 4096 [ 325.754303][ T3641] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 326.276175][ T3641] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 326.276217][ T3641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.276241][ T3641] usb 5-1: Product: syz [ 326.276258][ T3641] usb 5-1: Manufacturer: syz [ 326.276275][ T3641] usb 5-1: SerialNumber: syz [ 326.285674][ T6626] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 3. [ 326.285699][ T6626] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 326.296158][ T3641] usb 5-1: config 0 descriptor?? [ 326.311035][ T6626] ntfs: (device loop2): map_mft_record_page(): Mft record 0x3 is corrupt. Run chkdsk. [ 326.311061][ T6626] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 326.311077][ T6626] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 326.311124][ T6626] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 326.311622][ T6626] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 326.664357][ T155] device hsr_slave_0 left promiscuous mode [ 326.664844][ T155] device hsr_slave_1 left promiscuous mode [ 326.666773][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.666820][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.667272][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.667293][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.667669][ T155] device bridge_slave_1 left promiscuous mode [ 326.667763][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.669492][ T155] device bridge_slave_0 left promiscuous mode [ 326.669574][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.691603][ T3641] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 326.826133][ T155] device veth1_macvtap left promiscuous mode [ 326.826169][ T155] device veth0_macvtap left promiscuous mode [ 326.826221][ T155] device veth1_vlan left promiscuous mode [ 326.826274][ T155] device veth0_vlan left promiscuous mode [ 327.215415][ T6636] netlink: 72 bytes leftover after parsing attributes in process `syz.3.657'. [ 327.232580][ T3641] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 327.266627][ T3641] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 327.283100][ T3641] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 327.481542][ T3667] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 327.593997][ T155] team0 (unregistering): Port device team_slave_1 removed [ 327.627364][ T155] team0 (unregistering): Port device team_slave_0 removed [ 327.671456][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.708349][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.757959][ T3667] usb 3-1: Using ep0 maxpacket: 32 [ 327.858315][ T155] bond0 (unregistering): Released all slaves [ 327.889266][ T6641] loop1: detected capacity change from 0 to 32768 [ 327.901860][ T3667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.908582][ T6641] XFS: attr2 mount option is deprecated. [ 327.923047][ T3667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.934325][ T6641] XFS: ikeep mount option is deprecated. [ 327.937723][ T3667] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.940516][ T6641] XFS: noikeep mount option is deprecated. [ 327.953799][ T3667] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 327.966056][ T3667] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 327.975839][ T3667] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 328.000224][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 328.015344][ T6638] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.016012][ T6641] XFS (loop1): Mounting V5 Filesystem [ 328.030964][ T6638] IPv6: Can't replace route, no match found [ 328.051475][ T3612] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 328.102923][ T6654] netlink: 'syz.4.660': attribute type 30 has an invalid length. [ 328.137687][ T3641] peak_usb: probe of 5-1:0.0 failed with error -22 [ 328.181895][ T3667] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.232948][ T3641] usb 5-1: USB disconnect, device number 12 [ 328.262398][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.309038][ T3667] usb 3-1: Product: syz [ 328.317852][ T3667] usb 3-1: Manufacturer: syz [ 328.324254][ T3667] usb 3-1: SerialNumber: syz [ 328.349282][ T6641] XFS (loop1): Ending clean mount [ 328.364569][ T6641] XFS (loop1): Quotacheck needed: Please wait. [ 328.427805][ T3612] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.438114][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.492452][ T6641] XFS (loop1): Quotacheck: Done. [ 328.522235][ T3612] usb 1-1: config 0 descriptor?? [ 328.677651][ T3612] cp210x 1-1:0.0: cp210x converter detected [ 328.823623][ T3667] cdc_ncm 3-1:1.0: bind() failure [ 329.165038][ T3667] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 329.343778][ T6659] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 329.354165][ T3667] cdc_ncm 3-1:1.1: bind() failure [ 329.395237][ T3667] usb 3-1: USB disconnect, device number 4 [ 329.433568][ T6018] XFS (loop1): Unmounting Filesystem [ 329.492585][ T6659] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 329.987572][ T6665] tipc: Started in network mode [ 330.009854][ T6665] tipc: Node identity ffffffff, cluster identity 4711 [ 330.053364][ T6665] tipc: Node number set to 4294967295 [ 330.373564][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 330.417291][ T6667] loop2: detected capacity change from 0 to 2048 [ 331.111724][ T3612] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 331.180357][ T3612] cp210x 1-1:0.0: querying part number failed [ 331.297667][ T3612] usb 1-1: cp210x converter now attached to ttyUSB0 [ 331.310779][ T6679] Cannot find set identified by id 0 to match [ 331.361578][ T3612] usb 1-1: USB disconnect, device number 13 [ 331.416782][ T3612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.455261][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 331.464348][ T3612] cp210x 1-1:0.0: device disconnected [ 331.748653][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.667'. [ 332.704024][ T6707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.674'. [ 333.747406][ T6708] loop1: detected capacity change from 0 to 4096 [ 333.854172][ T6708] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 335.170589][ T6708] netlink: 3 bytes leftover after parsing attributes in process `syz.1.675'. [ 335.239118][ T6708] batman_adv: batadv0: Adding interface: macsec1 [ 335.261143][ T6708] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.379164][ T6708] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 335.723697][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 336.281923][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.403788][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.419841][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.823738][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.002492][ T6727] batman_adv: batadv0: Removing interface: macsec1 [ 337.185214][ T6018] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 337.201481][ T6018] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 337.252654][ T6744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.692'. [ 337.264799][ T6018] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 337.314957][ T6742] loop3: detected capacity change from 0 to 2048 [ 337.702457][ T6754] vxcan1: tx drop: invalid sa for name 0x0000040000000000 [ 338.047150][ T26] audit: type=1326 audit(1723820316.631:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 339.015828][ T6752] SET target dimension over the limit! [ 339.086446][ T26] audit: type=1326 audit(1723820316.631:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 339.089634][ T6742] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.202779][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 339.249402][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 339.302281][ T26] audit: type=1326 audit(1723820316.641:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 339.399135][ T26] audit: type=1326 audit(1723820316.651:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 339.611195][ T26] audit: type=1326 audit(1723820316.651:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 339.633793][ T26] audit: type=1326 audit(1723820316.661:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 341.326694][ T6774] loop4: detected capacity change from 0 to 256 [ 341.994084][ T26] audit: type=1326 audit(1723820316.661:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 342.123686][ T26] audit: type=1326 audit(1723820316.661:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 342.508895][ T26] audit: type=1326 audit(1723820316.671:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 342.681075][ T6774] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 342.684439][ T6778] loop3: detected capacity change from 0 to 512 [ 342.739186][ T26] audit: type=1326 audit(1723820316.681:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 342.796271][ T6778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 344.201692][ T6778] EXT4-fs (loop3): 1 truncate cleaned up [ 344.209674][ T6778] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 344.420235][ T26] audit: type=1326 audit(1723820316.681:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7ffc0000 [ 344.728398][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.934158][ T6797] device batadv_slave_0 entered promiscuous mode [ 346.146980][ T6809] device bond0 entered promiscuous mode [ 346.162044][ T6809] device bond_slave_0 entered promiscuous mode [ 346.211274][ T6809] device bond_slave_1 entered promiscuous mode [ 346.291927][ T6816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.700'. [ 346.309498][ T6804] device bond0 left promiscuous mode [ 346.330312][ T6804] device bond_slave_0 left promiscuous mode [ 346.338196][ T6804] device bond_slave_1 left promiscuous mode [ 347.957527][ T6842] netlink: 96 bytes leftover after parsing attributes in process `syz.3.707'. [ 348.286004][ T6840] loop2: detected capacity change from 0 to 256 [ 348.699156][ T6840] MINIX-fs: mounting file system with errors, running fsck is recommended [ 351.083504][ T6875] loop1: detected capacity change from 0 to 512 [ 351.206312][ T6881] loop3: detected capacity change from 0 to 512 [ 351.313375][ T6881] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 351.553622][ T6890] netlink: 224 bytes leftover after parsing attributes in process `syz.0.720'. [ 351.927007][ T6881] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 351.938481][ T6875] EXT4-fs (loop1): 1 truncate cleaned up [ 351.944359][ T6875] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.995404][ T6901] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.723'. [ 352.036179][ T6898] loop2: detected capacity change from 0 to 2048 [ 352.186332][ T6898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.070049][ T6907] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed ident=258 [ 353.156006][ T6912] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed ident=258 [ 353.195839][ T6907] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed ident=258 [ 353.315972][ T6911] netlink: 'syz.1.725': attribute type 10 has an invalid length. [ 354.120928][ T6915] loop3: detected capacity change from 0 to 256 [ 354.199056][ T6915] MINIX-fs: mounting file system with errors, running fsck is recommended [ 354.275872][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 354.366989][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 354.492967][ T5800] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 355.294321][ T6928] device syzkaller0 entered promiscuous mode [ 355.484847][ T6919] loop1: detected capacity change from 0 to 32768 [ 356.940559][ T6919] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.728 (6919) [ 357.015105][ T5800] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 357.207021][ T5800] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 357.223724][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.244407][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.355695][ T5800] usb 1-1: config 0 has no interface number 0 [ 357.460514][ T5800] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 357.626731][ T5800] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 357.784887][ T5800] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.919292][ T5800] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.005583][ T6957] loop3: detected capacity change from 0 to 256 [ 358.013221][ T5800] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 358.041390][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.085598][ T5800] usb 1-1: config 0 descriptor?? [ 358.120240][ T6919] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 358.151462][ T6919] BTRFS info (device loop1): using free space tree [ 358.160628][ T6919] BTRFS info (device loop1): has skinny extents [ 358.161554][ T5800] usb 1-1: can't set config #0, error -71 [ 358.173261][ T6957] FAT-fs (loop3): Unrecognized mount option "code“age=775" or missing value [ 358.249943][ T5800] usb 1-1: USB disconnect, device number 14 [ 358.359495][ T6957] Mount JFS Failure: -22 [ 358.542787][ T6919] BTRFS error (device loop1): open_ctree failed [ 358.542819][ T6957] jfs_mount failed w/return code = -22 [ 358.619020][ T6981] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 358.643297][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.738'. [ 358.726453][ T26] audit: type=1326 audit(1723820337.411:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x0 [ 358.880770][ T6987] loop4: detected capacity change from 0 to 2048 [ 360.144517][ T6987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.214140][ T3609] Bluetooth: hci1: command 0x0406 tx timeout [ 360.330378][ T6989] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 360.762906][ T7007] loop2: detected capacity change from 0 to 256 [ 360.961755][ T26] audit: type=1800 audit(1723820339.531:139): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.741" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 361.102439][ T7007] exFAT-fs (loop2): bogus fat length [ 361.107897][ T7007] exFAT-fs (loop2): failed to read boot sector [ 361.165916][ T7007] exFAT-fs (loop2): failed to recognize exfat type [ 361.196125][ T7003] loop1: detected capacity change from 0 to 4096 [ 362.346022][ T7020] loop1: detected capacity change from 0 to 2048 [ 362.355837][ T7016] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 362.640236][ T7020] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.668148][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 362.690478][ T7030] loop2: detected capacity change from 0 to 128 [ 362.773737][ T26] audit: type=1800 audit(1723820341.461:140): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.751" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 362.801903][ T7030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.879590][ T7030] FAT-fs (loop2): bogus number of FAT sectors [ 362.887930][ T7030] FAT-fs (loop2): Can't find a valid FAT filesystem [ 362.918921][ T7020] EXT4-fs (loop1): shut down requested (0) [ 363.001655][ T7034] EXT4-fs (loop1): shut down requested (0) [ 364.461397][ T26] audit: type=1326 audit(1723820343.141:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75980759b9 code=0x7fc00000 [ 365.198554][ T7053] loop2: detected capacity change from 0 to 1024 [ 365.613594][ T7053] hfsplus: xattr searching failed [ 365.622186][ T26] audit: type=1800 audit(1723820344.311:142): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.758" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 365.624659][ T7053] hfsplus: xattr searching failed [ 365.714615][ T7056] loop4: detected capacity change from 0 to 2048 [ 365.784316][ T7060] loop1: detected capacity change from 0 to 128 [ 365.837680][ T7056] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,grpid,,errors=continue. Quota mode: none. [ 365.907696][ T7056] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 366.342165][ T6978] Bluetooth: hci2: command 0x1003 tx timeout [ 366.360544][ T3569] Bluetooth: hci2: sending frame failed (-49) [ 366.832706][ T7072] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz.4.760: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 368.256706][ T7087] loop2: detected capacity change from 0 to 512 [ 368.407576][ T3610] Bluetooth: hci2: command 0x1001 tx timeout [ 368.416424][ T3569] Bluetooth: hci2: sending frame failed (-49) [ 368.453486][ T7087] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 368.996041][ T7087] EXT4-fs (loop2): Ignoring removed nobh option [ 368.996795][ T7087] EXT4-fs (loop2): journaled quota format not specified [ 369.458766][ T7088] loop4: detected capacity change from 0 to 256 [ 369.539728][ T7088] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 370.461579][ T3610] Bluetooth: hci2: command 0x1009 tx timeout [ 370.506671][ T7104] loop2: detected capacity change from 0 to 2048 [ 370.507921][ T7102] Invalid ELF header type: 0 != 1 [ 370.534607][ T7102] 9pnet: Insufficient options for proto=fd [ 370.547659][ T7104] loop2: p1 < > p4 [ 370.571014][ T7104] loop2: p4 size 8388608 extends beyond EOD, truncated [ 370.709227][ T6156] udevd[6156]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 370.717877][ T7104] loop2: detected capacity change from 0 to 512 [ 370.727936][ T6153] udevd[6153]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 370.749620][ T26] audit: type=1326 audit(1723820349.431:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 370.797448][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 370.835724][ T6156] udevd[6156]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 370.837584][ T26] audit: type=1326 audit(1723820349.431:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 370.848941][ T6153] udevd[6153]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 370.878742][ T26] audit: type=1326 audit(1723820349.431:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 370.906202][ T3610] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.930875][ T7115] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 370.943410][ T26] audit: type=1326 audit(1723820349.431:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 370.956310][ T7118] raw_sendmsg: syz.2.776 forgot to set AF_INET. Fix it! [ 370.986442][ T26] audit: type=1326 audit(1723820349.431:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.074840][ T26] audit: type=1326 audit(1723820349.431:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.101388][ T7120] cgroup: noprefix used incorrectly [ 371.263858][ T26] audit: type=1326 audit(1723820349.431:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.291206][ T26] audit: type=1326 audit(1723820349.431:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.315040][ T3610] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.369629][ T7127] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'. [ 371.421004][ T3610] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.536552][ T3610] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 371.596458][ T26] audit: type=1326 audit(1723820349.431:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.671656][ T3610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.862428][ T26] audit: type=1326 audit(1723820349.431:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23282479b9 code=0x7ffc0000 [ 371.898418][ T3610] usb 2-1: config 0 descriptor?? [ 372.078853][ T3610] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 372.258630][ T7136] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 372.278291][ T7135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.281755][ T7141] loop2: detected capacity change from 0 to 512 [ 373.319303][ T7141] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 373.319303][ T7141] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 373.319303][ T7141] [ 373.451966][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 373.479509][ T7141] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 373.479509][ T7141] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 373.479509][ T7141] [ 373.521501][ T7141] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 373.531947][ T7141] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 373.772900][ T3568] usb 2-1: USB disconnect, device number 7 [ 374.147507][ T7141] EXT4-fs error (device loop2): ext4_quota_enable:6383: comm syz.2.782: Bad quota inum: 2, type: 2 [ 374.321906][ T7141] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 374.416569][ T7141] EXT4-fs (loop2): mount failed [ 374.724006][ T7141] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.760146][ T3836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.829346][ T3836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.869815][ T7166] netlink: 'syz.1.788': attribute type 2 has an invalid length. [ 374.963078][ T7166] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.788'. [ 375.010489][ T7157] xt_SECMARK: invalid mode: 0 [ 375.243210][ T3836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.315824][ T7153] chnl_net:caif_netlink_parms(): no params data found [ 375.369062][ T3836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.555010][ T7177] loop1: detected capacity change from 0 to 512 [ 376.089768][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.170863][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.267900][ T7153] device bridge_slave_0 entered promiscuous mode [ 376.301576][ T3610] Bluetooth: hci5: command 0x0409 tx timeout [ 376.390941][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.398318][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.513385][ T7153] device bridge_slave_1 entered promiscuous mode [ 377.149169][ T7177] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 377.171392][ T7177] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 377.191970][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.204078][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.303385][ T7177] loop1: detected capacity change from 0 to 512 [ 377.444983][ T7177] EXT4-fs (loop1): Ignoring removed nobh option [ 377.457029][ T7191] loop4: detected capacity change from 0 to 256 [ 377.529433][ T7153] team0: Port device team_slave_0 added [ 377.539905][ T7177] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 377.719090][ T7191] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.868979][ T7191] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 377.984865][ T7177] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.791: attempt to clear invalid blocks 2 len 1 [ 378.188249][ T7153] team0: Port device team_slave_1 added [ 378.271200][ T7177] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 378.290891][ T7197] xt_TCPMSS: Only works on TCP SYN packets [ 378.300665][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.308090][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.312522][ T7177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.791: invalid indirect mapped block 1819239214 (level 0) [ 378.316735][ T7191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 378.340151][ T7177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.791: invalid indirect mapped block 1819239214 (level 1) [ 378.384784][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.412804][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.438733][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.451168][ T6977] Bluetooth: hci5: command 0x041b tx timeout [ 378.470636][ T7201] binder: BINDER_SET_CONTEXT_MGR already set [ 378.493534][ T7201] binder: 7198:7201 ioctl 4018620d 200001c0 returned -16 [ 378.511214][ T7177] EXT4-fs (loop1): 1 truncate cleaned up [ 378.521234][ T7177] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,user_xattr,jqfmt=vfsv1,grpid,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 378.540625][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.562554][ T3836] tipc: Disabling bearer [ 378.581638][ T3836] tipc: Left network mode [ 378.587129][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.606324][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.060239][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.610507][ T7153] device hsr_slave_0 entered promiscuous mode [ 379.652589][ T7153] device hsr_slave_1 entered promiscuous mode [ 380.047949][ T7229] loop2: detected capacity change from 0 to 512 [ 380.065038][ T7153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.145438][ T7153] Cannot create hsr debugfs directory [ 380.325610][ T7229] EXT4-fs (loop2): Test dummy encryption mode enabled [ 380.363149][ T7229] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none. [ 380.541530][ T3610] Bluetooth: hci5: command 0x040f tx timeout [ 380.678376][ T7229] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 380.691776][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 380.691790][ T26] audit: type=1800 audit(1723820359.381:161): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.802" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 380.892297][ T7258] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 381.129641][ T7153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.185602][ T7236] loop1: detected capacity change from 0 to 32768 [ 381.339522][ T7153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.356204][ T7153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.374843][ T7236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.803 (7236) [ 382.111750][ T147] Bluetooth: Wrong link type (-71) [ 382.391537][ T7153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.397538][ T7236] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 382.410715][ T7275] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 382.430580][ T7236] BTRFS info (device loop1): using free space tree [ 382.441731][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.449351][ T7236] BTRFS info (device loop1): has skinny extents [ 382.450966][ T7275] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 382.781800][ T7282] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 382.789636][ T7282] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.809'. [ 382.888752][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.917877][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.959378][ T6978] Bluetooth: hci5: command 0x0419 tx timeout [ 382.971027][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.982965][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.992434][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.004821][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.015489][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.022590][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.031900][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.040635][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.050054][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.057153][ T5800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.064576][ T3568] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 383.072737][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.081567][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.125207][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.142530][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.152372][ T7236] BTRFS info (device loop1): enabling ssd optimizations [ 383.167785][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.182275][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.229884][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.256403][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.279928][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.389276][ T5801] Bluetooth: hci2: command 0x0409 tx timeout [ 383.443494][ T3568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.454885][ T3568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.465659][ T3568] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 383.475008][ T3568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.492761][ T3568] usb 3-1: config 0 descriptor?? [ 383.566650][ T3836] device hsr_slave_0 left promiscuous mode [ 383.590028][ T3836] device hsr_slave_1 left promiscuous mode [ 383.616942][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.711432][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.723012][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.781422][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.823275][ T3836] device bridge_slave_1 left promiscuous mode [ 383.829512][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.547643][ T7324] udc-core: couldn't find an available UDC or it's busy [ 384.561583][ T7324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.570189][ T3569] Bluetooth: hci1: ACL packet for unknown connection handle 256 [ 384.602711][ T3568] hid-generic 0003:0C70:F011.0003: unknown main item tag 0x0 [ 384.610298][ T3568] hid-generic 0003:0C70:F011.0003: unknown main item tag 0x0 [ 384.618983][ T3568] hid-generic 0003:0C70:F011.0003: unknown main item tag 0x0 [ 384.626459][ T3568] hid-generic 0003:0C70:F011.0003: unknown main item tag 0x0 [ 384.627691][ T3836] device bridge_slave_0 left promiscuous mode [ 384.633976][ T3568] hid-generic 0003:0C70:F011.0003: unknown main item tag 0x0 [ 384.636600][ T3568] hid-generic 0003:0C70:F011.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0 [ 384.665424][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.719409][ T3836] device veth1_macvtap left promiscuous mode [ 384.725627][ T3836] device veth0_macvtap left promiscuous mode [ 384.732586][ T3836] device veth1_vlan left promiscuous mode [ 384.738491][ T3836] device veth0_vlan left promiscuous mode [ 384.811198][ T3610] usb 3-1: USB disconnect, device number 5 [ 384.961411][ T7311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 385.058374][ T3836] team0 (unregistering): Port device team_slave_1 removed [ 385.076563][ T3836] team0 (unregistering): Port device team_slave_0 removed [ 385.089917][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.104206][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.183732][ T3836] bond0 (unregistering): Released all slaves [ 385.201529][ T7311] usb 2-1: Using ep0 maxpacket: 8 [ 385.243271][ T7153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.257277][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.265275][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.273695][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.282856][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.296220][ T6976] team0 speed is unknown, defaulting to 1000 [ 385.302813][ T7262] chnl_net:caif_netlink_parms(): no params data found [ 385.371855][ T7311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 385.411635][ T7312] Bluetooth: hci2: command 0x041b tx timeout [ 385.527921][ T7333] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 385.540534][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.565000][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.604100][ T7262] device bridge_slave_0 entered promiscuous mode [ 385.621662][ T7311] usb 2-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=5a.be [ 385.639101][ T7311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.674092][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.681164][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.701559][ T7311] usb 2-1: Product: syz [ 385.705757][ T7311] usb 2-1: Manufacturer: syz [ 385.710365][ T7311] usb 2-1: SerialNumber: syz [ 385.728190][ T7262] device bridge_slave_1 entered promiscuous mode [ 385.747631][ T7311] usb 2-1: config 0 descriptor?? [ 385.802255][ T7311] usb 2-1: selecting invalid altsetting 1 [ 385.808713][ T7311] catc 2-1:0.0: Can't set altsetting 1. [ 385.825438][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.834357][ T7311] catc: probe of 2-1:0.0 failed with error -5 [ 385.853432][ T7262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.874915][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.891761][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.917819][ T7262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.936152][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.944937][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.959524][ T7153] device veth0_vlan entered promiscuous mode [ 385.975209][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.983687][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.997932][ T7153] device veth1_vlan entered promiscuous mode [ 386.044502][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.059024][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.072160][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.097414][ T7262] team0: Port device team_slave_0 added [ 386.117808][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.141783][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.150335][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.160606][ T7262] team0: Port device team_slave_1 added [ 386.169800][ T7153] device veth0_macvtap entered promiscuous mode [ 386.215449][ T7153] device veth1_macvtap entered promiscuous mode [ 386.246620][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.254076][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.280521][ T7262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.304997][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.323727][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.343461][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.359592][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.380375][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.390750][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.406073][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.417498][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.430096][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.446601][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.459480][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.496863][ T7262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.518979][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.538547][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.550251][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.569295][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.579446][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.601325][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.622322][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.629770][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.647264][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.678842][ T7153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.720220][ T3609] usb 2-1: USB disconnect, device number 8 [ 386.792092][ T7153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.832679][ T7371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 386.862183][ T7153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.885326][ T7153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.709760][ T6976] Bluetooth: hci2: command 0x040f tx timeout [ 387.857245][ T7262] device hsr_slave_0 entered promiscuous mode [ 387.882895][ T7262] device hsr_slave_1 entered promiscuous mode [ 387.901593][ T7262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.909171][ T7262] Cannot create hsr debugfs directory [ 387.919141][ T3569] Bluetooth: Wrong link type (-71) [ 387.964821][ T7380] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 388.012667][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.014197][ T7382] loop2: detected capacity change from 0 to 1024 [ 388.033277][ T7380] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 388.230866][ T7382] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue. Quota mode: none. [ 388.239675][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.407855][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.607495][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.884476][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.951975][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.004255][ T7262] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.084368][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.214677][ T7262] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.175218][ T3610] Bluetooth: hci2: command 0x0419 tx timeout [ 390.788299][ T7262] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.463541][ T7262] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.449224][ T7262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.535595][ T7262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.544140][ T26] audit: type=1326 audit(1723820371.241:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9e81a9b9 code=0x0 [ 392.663031][ T26] audit: type=1326 audit(1723820371.341:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 392.688704][ T7453] loop3: detected capacity change from 0 to 8 [ 392.710916][ T26] audit: type=1326 audit(1723820371.341:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 392.739993][ T26] audit: type=1326 audit(1723820371.341:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 392.762269][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.789301][ T7262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.820586][ T26] audit: type=1326 audit(1723820371.341:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 392.843353][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.007188][ T26] audit: type=1326 audit(1723820371.351:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 393.062655][ T7262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.105240][ T26] audit: type=1326 audit(1723820371.351:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 393.127350][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.143638][ T26] audit: type=1326 audit(1723820371.351:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 393.204882][ T26] audit: type=1326 audit(1723820371.351:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 393.227176][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.256529][ T7458] binder: 7457:7458 ioctl c0306201 20000380 returned -14 [ 393.382177][ T26] audit: type=1326 audit(1723820371.351:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbde14419b9 code=0x7ffc0000 [ 393.452548][ T7463] loop3: detected capacity change from 0 to 1024 [ 393.506033][ T7262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.532868][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.545883][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.558263][ T7262] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.577927][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.587777][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.733967][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.741148][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.763628][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.794578][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.803378][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.812633][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.819749][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.830168][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.844052][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.863852][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.875967][ T7468] mmap: syz.3.839 (7468) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 393.960608][ T3609] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 394.151619][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.370505][ T7262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.381200][ T3609] usb 1-1: Using ep0 maxpacket: 32 [ 394.481545][ T7262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.501566][ T3609] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 394.520902][ T3609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.566739][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.609402][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.622086][ T3609] usb 1-1: config 0 descriptor?? [ 394.637088][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.648809][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.663640][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.675859][ T3609] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 394.686691][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.704045][ T3609] gspca_mr97310a: reg write [21] error -22 [ 394.710009][ T3609] mr97310a: probe of 1-1:0.0 failed with error -22 [ 394.741557][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.874889][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.909694][ T3612] usb 1-1: USB disconnect, device number 15 [ 394.946398][ T3836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.091794][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.179533][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.295914][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 395.471962][ T6977] Bluetooth: hci1: command 0x0409 tx timeout [ 395.489781][ T7262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.593540][ T3836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.599207][ T7491] loop1: detected capacity change from 0 to 2048 [ 395.646014][ T7491] loop1: p1 < > p4 [ 395.666623][ T7491] loop1: p4 size 8388608 extends beyond EOD, truncated [ 395.681107][ T3836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.834142][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 395.858987][ T7498] IPVS: stopping backup sync thread 7136 ... [ 395.894460][ T6153] udevd[6153]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 395.925579][ T3836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.930167][ T6156] udevd[6156]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 395.985085][ T7503] binder: 7501:7503 ioctl c018620c 0 returned -14 [ 396.057723][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.068379][ T7506] loop1: detected capacity change from 0 to 128 [ 396.091486][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.102817][ T7459] device bridge_slave_0 entered promiscuous mode [ 396.168659][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.186053][ T7506] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 396.221739][ T7506] sysv_free_block: trying to free block not in datazone [ 396.231149][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.239761][ T7459] device bridge_slave_1 entered promiscuous mode [ 396.266389][ T7506] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 396.306485][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.323420][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.412758][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.466814][ T7262] device veth0_vlan entered promiscuous mode [ 396.606773][ T7262] device veth1_vlan entered promiscuous mode [ 396.634122][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.778648][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.832191][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.890155][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.917073][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.940882][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.252243][ T3836] tipc: Left network mode [ 397.270392][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.293439][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.385768][ T7262] device veth0_macvtap entered promiscuous mode [ 397.424910][ T7459] team0: Port device team_slave_0 added [ 397.452564][ T7459] team0: Port device team_slave_1 added [ 397.468144][ T7262] device veth1_macvtap entered promiscuous mode [ 397.492053][ T6977] Bluetooth: hci1: command 0x041b tx timeout [ 397.523316][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.550650][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.648846][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.698925][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.741499][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.768632][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.831428][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.841255][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.871368][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.890111][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.704201][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.910263][ T3885] Bluetooth: hci1: command 0x040f tx timeout [ 400.046476][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.069616][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.088813][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.102634][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.110504][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.118289][ T7551] loop3: detected capacity change from 0 to 4096 [ 400.154531][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.165015][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 400.182379][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.205098][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.261009][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.278201][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.289564][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.307427][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.318999][ T7262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.337300][ T7262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.355943][ T7262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.378628][ T7262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.389960][ T7262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.409451][ T7262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.419952][ T7262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.465518][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.492307][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.545393][ T7553] netlink: 9 bytes leftover after parsing attributes in process `syz.1.862'. [ 400.604038][ T7459] device hsr_slave_0 entered promiscuous mode [ 400.642999][ T7459] device hsr_slave_1 entered promiscuous mode [ 400.651163][ T7459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.660310][ T7459] Cannot create hsr debugfs directory [ 400.791549][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.821448][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.872453][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.903845][ T7310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 400.913339][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.935123][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.961491][ T6977] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 400.973682][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.241398][ T6977] usb 1-1: Using ep0 maxpacket: 8 [ 401.271568][ T7310] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 401.280708][ T7310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.311036][ T7310] usb 2-1: config 0 descriptor?? [ 401.393027][ T6977] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.411783][ T6977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.431021][ T7459] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.441833][ T6976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 401.453138][ T7593] loop3: detected capacity change from 0 to 47 [ 401.459400][ T6977] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.496103][ T6977] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.527827][ T6977] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.554006][ T6977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.629646][ T7459] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.638948][ T7565] device batadv_slave_1 entered promiscuous mode [ 401.649996][ T7459] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.722010][ T7565] device batadv_slave_1 left promiscuous mode [ 401.731616][ T6976] usb 5-1: Using ep0 maxpacket: 16 [ 401.751925][ T7459] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.861674][ T7310] pegasus: probe of 2-1:0.0 failed with error -71 [ 401.861686][ T6977] usb 1-1: GET_CAPABILITIES returned 0 [ 401.861716][ T6977] usbtmc 1-1:16.0: can't read capabilities [ 401.879584][ T6976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 401.889114][ T7310] usb 2-1: USB disconnect, device number 9 [ 402.059061][ T6976] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 402.070525][ T6976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.081376][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 402.100218][ T6976] usb 5-1: config 0 descriptor?? [ 402.152695][ T3836] device hsr_slave_0 left promiscuous mode [ 402.177442][ T3836] device hsr_slave_1 left promiscuous mode [ 402.366820][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.516831][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.619216][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.713387][ T7584] udc-core: couldn't find an available UDC or it's busy [ 402.730388][ T7584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 402.752969][ T3836] device bridge_slave_1 left promiscuous mode [ 402.788923][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.833383][ T3836] device bridge_slave_0 left promiscuous mode [ 402.841053][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.864754][ T3836] device hsr_slave_0 left promiscuous mode [ 402.871243][ T3836] device hsr_slave_1 left promiscuous mode [ 402.885216][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.895171][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.912277][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.919715][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.936642][ T3836] device bridge_slave_1 left promiscuous mode [ 402.944022][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.952845][ T3836] device bridge_slave_0 left promiscuous mode [ 402.959021][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.980026][ T3836] device veth1_macvtap left promiscuous mode [ 402.987210][ T3836] device veth0_macvtap left promiscuous mode [ 403.001976][ T3836] device veth1_vlan left promiscuous mode [ 403.007784][ T3836] device veth0_vlan left promiscuous mode [ 403.022645][ T3836] device veth1_macvtap left promiscuous mode [ 403.028646][ T3836] device veth0_macvtap left promiscuous mode [ 403.034828][ T3836] device veth1_vlan left promiscuous mode [ 403.040614][ T3836] device veth0_vlan left promiscuous mode [ 403.279554][ T3836] team0 (unregistering): Port device team_slave_1 removed [ 403.295628][ T3836] team0 (unregistering): Port device team_slave_0 removed [ 403.308097][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.323799][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.360626][ T3836] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 403.399554][ T3836] bond0 (unregistering): Released all slaves [ 403.516037][ T3836] team0 (unregistering): Port device team_slave_1 removed [ 403.528181][ T3836] team0 (unregistering): Port device team_slave_0 removed [ 403.544400][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.601065][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.637181][ T7630] loop1: detected capacity change from 0 to 2048 [ 403.740419][ T7630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.771744][ T6976] usbhid 5-1:0.0: can't add hid device: -71 [ 403.778026][ T6976] usbhid: probe of 5-1:0.0 failed with error -71 [ 405.895071][ T3836] bond0 (unregistering): Released all slaves [ 406.294391][ T7641] loop3: detected capacity change from 0 to 32768 [ 406.488019][ T6976] usb 5-1: USB disconnect, device number 13 [ 406.545321][ T7641] loop3: [ICS] p1 [ 406.549248][ T7641] loop3: p1 start 1970170188 is beyond EOD, truncated [ 406.629235][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.653168][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.679090][ T7648] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 406.703826][ T7642] xt_SECMARK: invalid mode: 0 [ 406.717992][ T3027] loop3: [ICS] p1 [ 406.725502][ T3027] loop3: p1 start 1970170188 is beyond EOD, truncated [ 406.808114][ T7650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.305719][ T7648] team0: Device veth1_vlan failed to register rx_handler [ 407.532089][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.539893][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.574154][ T7648] syz.1.866 (7648) used greatest stack depth: 18648 bytes left [ 407.649540][ T6977] usb 1-1: USB disconnect, device number 16 [ 407.676952][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.704044][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.733287][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.740422][ T7310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.852224][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.902577][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.804993][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.974688][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.981855][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.239268][ T7672] loop3: detected capacity change from 0 to 128 [ 409.268324][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.347818][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.389722][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.417848][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.462781][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 409.462796][ T26] audit: type=1800 audit(1723820388.151:174): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.873" name="file1" dev="loop3" ino=1048673 res=0 errno=0 [ 409.526175][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.549756][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.560575][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.575123][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.596573][ T7459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.638470][ T7676] program syz.0.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.678743][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.768369][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.776536][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.785003][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.062565][ T3612] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 413.164275][ T3610] Bluetooth: hci4: command 0x0406 tx timeout [ 413.224515][ T26] audit: type=1326 audit(1723820391.911:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbde14419b9 code=0x0 [ 413.281723][ T3612] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 413.289312][ T3612] usb 1-1: can't read configurations, error -71 [ 413.392190][ T7698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.879'. [ 413.424224][ T7706] loop1: detected capacity change from 0 to 8 [ 413.560099][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.568324][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.598616][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.611453][ T7314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 413.620474][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.629878][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.674450][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 413.704918][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.717198][ T7459] device veth0_vlan entered promiscuous mode [ 414.011460][ T7314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 414.041178][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.082645][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.096182][ T7459] device veth1_vlan entered promiscuous mode [ 414.201641][ T7314] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 414.224182][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.235985][ T7314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.274336][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.278641][ T7314] usb 4-1: Product: syz [ 414.309602][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.311633][ T7314] usb 4-1: Manufacturer: syz [ 414.344453][ T7459] device veth0_macvtap entered promiscuous mode [ 414.356234][ T7314] usb 4-1: SerialNumber: syz [ 414.378097][ T7314] usb 4-1: config 0 descriptor?? [ 414.380411][ T7459] device veth1_macvtap entered promiscuous mode [ 414.463083][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.484304][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.501420][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.521095][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.540215][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.560049][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.609333][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.631528][ T3609] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 414.633613][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.652927][ T7702] loop3: detected capacity change from 0 to 512 [ 414.657711][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.689413][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.699194][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.716875][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.737751][ T7702] EXT4-fs (loop3): 1 orphan inode deleted [ 414.761427][ T7702] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.800584][ T7702] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 414.812038][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.850669][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.061628][ T3609] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 415.697272][ T3609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.717814][ T3609] usb 2-1: config 0 descriptor?? [ 415.723997][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.897867][ T3609] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 415.910421][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.953636][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.092320][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.444246][ T3609] gspca_sonixj: reg_w1 err -110 [ 416.558741][ T3609] sonixj: probe of 2-1:0.0 failed with error -110 [ 416.568846][ T7715] input: syz1 as /devices/virtual/input/input8 [ 416.825083][ T7459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.857662][ T7459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.925971][ T7314] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 416.930388][ T7459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.935910][ T7314] usb 4-1: USB disconnect, device number 8 [ 417.640523][ T7459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.716538][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.743781][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.804330][ T7310] usb 2-1: USB disconnect, device number 10 [ 417.816395][ T7733] loop4: detected capacity change from 0 to 512 [ 417.827032][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.927727][ T7733] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 417.930854][ T7735] x_tables: unsorted underflow at hook 3 [ 418.018453][ T3687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.042250][ T3687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.116176][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.189526][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.210018][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.276706][ T7743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 418.436806][ T7311] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 418.996320][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.121491][ T7311] usb 1-1: Using ep0 maxpacket: 8 [ 419.291617][ T7311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.379435][ T7754] loop1: detected capacity change from 0 to 512 [ 419.453404][ T7755] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 419.594558][ T7754] EXT4-fs (loop1): filesystem is read-only [ 419.686730][ T7752] loop2: detected capacity change from 0 to 512 [ 420.115017][ T7752] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000079f) [ 420.177956][ T7752] FAT-fs (loop2): Filesystem has been set read-only [ 420.191519][ T7311] usb 1-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=5a.be [ 420.211449][ T7311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.219454][ T7311] usb 1-1: Product: syz [ 420.264677][ T7311] usb 1-1: Manufacturer: syz [ 420.269305][ T7311] usb 1-1: SerialNumber: syz [ 420.316111][ T7311] usb 1-1: config 0 descriptor?? [ 420.352166][ T7311] usb 1-1: selecting invalid altsetting 1 [ 420.376590][ T7311] catc 1-1:0.0: Can't set altsetting 1. [ 420.383397][ T7311] catc: probe of 1-1:0.0 failed with error -5 [ 420.711444][ T3612] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 420.873089][ T7766] loop1: detected capacity change from 0 to 8192 [ 420.981564][ T3612] usb 3-1: Using ep0 maxpacket: 16 [ 421.089943][ T7310] usb 1-1: USB disconnect, device number 19 [ 421.191625][ T3612] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.233074][ T3612] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 421.441535][ T3612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.467153][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.485371][ T3612] usb 3-1: Product: syz [ 421.501443][ T3612] usb 3-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ [ 421.518026][ T3612] usb 3-1: SerialNumber: syz [ 421.631403][ T3885] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 421.911473][ T3885] usb 4-1: Using ep0 maxpacket: 8 [ 422.031518][ T3612] cdc_ncm 3-1:1.0: bind() failure [ 422.049892][ T3612] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 422.062212][ T3885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.065677][ T3612] cdc_ncm 3-1:1.1: bind() failure [ 422.091538][ T3885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.106691][ T3885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.115652][ T3612] usb 3-1: USB disconnect, device number 6 [ 422.141745][ T3885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.206405][ T3885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.241393][ T3885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.522880][ T7310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 423.844148][ T3885] usb 4-1: GET_CAPABILITIES returned 0 [ 423.844185][ T3885] usbtmc 4-1:16.0: can't read capabilities [ 424.056228][ T3610] usb 4-1: USB disconnect, device number 9 [ 424.360910][ T7805] fuse: Bad value for 'fd' [ 424.421984][ T3609] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 424.431664][ T7310] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 424.474645][ T7310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.641207][ T7310] usb 2-1: config 0 descriptor?? [ 424.691478][ T3609] usb 5-1: Using ep0 maxpacket: 32 [ 424.811866][ T3609] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 424.858138][ T3609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.018640][ T3609] usb 5-1: config 0 descriptor?? [ 425.101527][ T7310] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 425.114401][ T3609] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 425.131444][ T7310] asix: probe of 2-1:0.0 failed with error -71 [ 425.137918][ T3609] gspca_mr97310a: reg write [21] error -22 [ 425.153219][ T3609] mr97310a: probe of 5-1:0.0 failed with error -22 [ 425.191588][ T7310] usb 2-1: USB disconnect, device number 11 [ 427.257198][ T3885] usb 5-1: USB disconnect, device number 14 [ 428.683881][ T6977] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 430.284741][ T7852] loop4: detected capacity change from 0 to 256 [ 431.881471][ T6977] usb 1-1: Using ep0 maxpacket: 32 [ 431.974598][ T7310] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 432.145238][ T6977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.155638][ T6977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.167287][ T6977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.186545][ T6977] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 432.189198][ T7869] loop3: detected capacity change from 0 to 256 [ 432.333179][ T7871] loop4: detected capacity change from 0 to 1024 [ 433.006052][ T7869] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 433.019626][ T7310] usb 2-1: Using ep0 maxpacket: 8 [ 433.207985][ T7310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.879246][ T6977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.078516][ T6977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.477118][ T7310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.487389][ T7310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.497393][ T7310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.510732][ T7310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.555402][ T7310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.578003][ T6977] usb 1-1: can't set config #1, error -71 [ 434.686125][ T6977] usb 1-1: USB disconnect, device number 20 [ 434.981469][ T7310] usb 2-1: can't set config #16, error -71 [ 434.992464][ T7310] usb 2-1: USB disconnect, device number 12 [ 541.201254][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 541.208252][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1254/1:b..l [ 541.217052][ C0] (detected by 0, t=10502 jiffies, g=34969, q=280) [ 541.223655][ C0] task:kworker/u4:4 state:R running task stack:18808 pid: 1254 ppid: 2 flags:0x00004000 [ 541.236024][ C0] Workqueue: bat_events batadv_nc_worker [ 541.241697][ C0] Call Trace: [ 541.244975][ C0] [ 541.247912][ C0] __schedule+0x12c4/0x45b0 [ 541.252428][ C0] ? validate_chain+0x112/0x5930 [ 541.257379][ C0] ? mark_lock+0x98/0x340 [ 541.261717][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 541.267707][ C0] ? release_firmware_map_entry+0x190/0x190 [ 541.273666][ C0] ? reacquire_held_locks+0x660/0x660 [ 541.279058][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 541.284351][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 541.289470][ C0] ? __cond_resched+0x20/0x20 [ 541.294162][ C0] irqentry_exit+0x53/0x80 [ 541.298698][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 541.304696][ C0] RIP: 0010:lock_acquire+0xf5/0x4f0 [ 541.309897][ C0] Code: 00 89 d8 48 0f a3 05 12 9f 86 0c 73 0d e8 13 6b 08 00 84 c0 0f 84 b9 02 00 00 48 c7 c0 c4 7f e9 8d 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 dd 02 00 00 83 3d 80 d2 86 0c 00 0f 84 3f 01 00 00 65 [ 541.329540][ C0] RSP: 0018:ffffc9000512fa80 EFLAGS: 00000a03 [ 541.335635][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8162ad0c [ 541.343606][ C0] RDX: 0000000000000000 RSI: ffffffff8ad8f7e0 RDI: ffffffff8ad8f7a0 [ 541.351596][ C0] RBP: ffffc9000512fbd8 R08: dffffc0000000000 R09: fffffbfff1bd2986 [ 541.359745][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a25f58 [ 541.367727][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888063d99840 [ 541.375715][ C0] ? lock_acquire+0xcc/0x4f0 [ 541.380321][ C0] ? read_lock_is_recursive+0x10/0x10 [ 541.385699][ C0] ? rcu_lock_release+0x5/0x20 [ 541.390465][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 541.395493][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 541.401502][ C0] rcu_lock_acquire+0x2a/0x30 [ 541.406204][ C0] ? rcu_lock_acquire+0x5/0x30 [ 541.410972][ C0] batadv_nc_worker+0xc1/0x5b0 [ 541.415750][ C0] process_one_work+0x8a1/0x10c0 [ 541.420712][ C0] ? worker_detach_from_pool+0x260/0x260 [ 541.426353][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 541.431914][ C0] ? kthread_data+0x4e/0xc0 [ 541.436435][ C0] ? wq_worker_running+0x97/0x170 [ 541.441467][ C0] worker_thread+0xaca/0x1280 [ 541.446196][ C0] kthread+0x3f6/0x4f0 [ 541.450269][ C0] ? rcu_lock_release+0x20/0x20 [ 541.455126][ C0] ? kthread_blkcg+0xd0/0xd0 [ 541.459719][ C0] ret_from_fork+0x1f/0x30 [ 541.464159][ C0] [ 541.467286][ C0] rcu: rcu_preempt kthread starved for 10520 jiffies! g34969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 541.478491][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 541.488450][ C0] rcu: RCU grace-period kthread stack dump: [ 541.494327][ C0] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 541.505107][ C0] Call Trace: [ 541.508390][ C0] [ 541.511409][ C0] __schedule+0x12c4/0x45b0 [ 541.515932][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 541.521834][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 541.527752][ C0] ? __mod_timer+0xa8e/0xeb0 [ 541.532372][ C0] ? release_firmware_map_entry+0x190/0x190 [ 541.538279][ C0] ? mod_timer_pending+0x20/0x20 [ 541.543217][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 541.548599][ C0] schedule+0x11b/0x1f0 [ 541.552760][ C0] schedule_timeout+0x1b9/0x300 [ 541.557619][ C0] ? console_conditional_schedule+0x40/0x40 [ 541.563527][ C0] ? update_process_times+0x200/0x200 [ 541.568906][ C0] ? prepare_to_swait_event+0x321/0x340 [ 541.574461][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 541.579324][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 541.584527][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 541.590688][ C0] ? rcu_gp_init+0xdae/0x1140 [ 541.595371][ C0] ? rcu_gp_init+0x1140/0x1140 [ 541.600144][ C0] rcu_gp_kthread+0xa4/0x360 [ 541.604737][ C0] ? _raw_spin_unlock+0x40/0x40 [ 541.609600][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 541.614710][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 541.620606][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 541.625635][ C0] kthread+0x3f6/0x4f0 [ 541.629708][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 541.634821][ C0] ? kthread_blkcg+0xd0/0xd0 [ 541.639416][ C0] ret_from_fork+0x1f/0x30 [ 541.643848][ C0] [ 541.646866][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 541.653177][ C0] Sending NMI from CPU 0 to CPUs 1: [ 541.658381][ C1] NMI backtrace for cpu 1 [ 541.658391][ C1] CPU: 1 PID: 7902 Comm: syz.3.934 Not tainted 5.15.164-syzkaller #0 [ 541.658406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 541.658415][ C1] RIP: 0010:check_preemption_disabled+0x2/0x110 [ 541.658436][ C1] Code: 48 c7 c7 a0 fc 92 8a e8 2c 01 00 00 65 ff 0d 01 33 d0 75 5b c3 cc cc cc 48 c7 c7 a0 f7 d8 8a 48 c7 c6 e0 f7 d8 8a eb 00 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 541.658448][ C1] RSP: 0018:ffffc900011ef710 EFLAGS: 00000046 [ 541.658462][ C1] RAX: 1ffff11003c5b8cc RBX: 0000000000000046 RCX: ffffc900011ef703 [ 541.658473][ C1] RDX: 0000000000000002 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f800 [ 541.658483][ C1] RBP: ffffc900011ef850 R08: dffffc0000000000 R09: fffffbfff1bd2986 [ 541.658495][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200023def0 [ 541.658505][ C1] R13: 0000000000000046 R14: ffffc900011ef7b0 R15: dffffc0000000000 [ 541.658516][ C1] FS: 00007f1d9cc976c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 541.658534][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.658544][ C1] CR2: 00007f07c6cf1000 CR3: 0000000065a3a000 CR4: 00000000003506e0 [ 541.658568][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.658576][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.658584][ C1] Call Trace: [ 541.658589][ C1] [ 541.658595][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 541.658611][ C1] ? read_lock_is_recursive+0x10/0x10 [ 541.658627][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 541.658649][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 541.658663][ C1] ? nmi_handle+0xf7/0x370 [ 541.658678][ C1] ? check_preemption_disabled+0x2/0x110 [ 541.658694][ C1] ? default_do_nmi+0x62/0x150 [ 541.658708][ C1] ? exc_nmi+0xa8/0x100 [ 541.658721][ C1] ? end_repeat_nmi+0x16/0x31 [ 541.658740][ C1] ? check_preemption_disabled+0x2/0x110 [ 541.658756][ C1] ? check_preemption_disabled+0x2/0x110 [ 541.658772][ C1] ? check_preemption_disabled+0x2/0x110 [ 541.658788][ C1] [ 541.658792][ C1] [ 541.658796][ C1] lock_release+0x5c1/0x9a0 [ 541.658810][ C1] ? read_lock_is_recursive+0x10/0x10 [ 541.658824][ C1] ? ktime_get+0x31/0x270 [ 541.658837][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 541.658853][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 541.658867][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 541.658880][ C1] ? ktime_get+0x31/0x270 [ 541.658892][ C1] seqcount_lockdep_reader_access+0x10b/0x220 [ 541.658908][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 541.658926][ C1] ktime_get+0x31/0x270 [ 541.658940][ C1] clockevents_program_event+0xe1/0x310 [ 541.658957][ C1] hrtimer_start_range_ns+0xab8/0xc50 [ 541.658975][ C1] posixtimer_rearm+0x1ad/0x3f0 [ 541.658993][ C1] ? alarmtimer_resume+0x50/0x50 [ 541.659008][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 541.659025][ C1] dequeue_signal+0x1ed/0x520 [ 541.659042][ C1] ? _raw_spin_lock_irq+0xdb/0x110 [ 541.659056][ C1] ? unhandled_signal+0x150/0x150 [ 541.659074][ C1] ? uprobe_deny_signal+0x74/0x230 [ 541.659088][ C1] ? get_signal+0xb3/0x14e0 [ 541.659102][ C1] get_signal+0x52e/0x14e0 [ 541.659120][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 541.659137][ C1] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 541.659156][ C1] ? __might_fault+0xb4/0x110 [ 541.659173][ C1] ? _copy_from_user+0x10f/0x170 [ 541.659187][ C1] ? restore_altstack+0x274/0x400 [ 541.659203][ C1] ? get_sigframe_size+0x10/0x10 [ 541.659218][ C1] ? __ia32_sys_sigaltstack+0x60/0x60 [ 541.659237][ C1] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 541.659254][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 541.659269][ C1] exit_to_user_mode_loop+0x97/0x130 [ 541.659283][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 541.659298][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 541.659314][ C1] do_syscall_64+0x47/0xb0 [ 541.659327][ C1] ? clear_bhb_loop+0x15/0x70 [ 541.659342][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.659358][ C1] RIP: 0033:0x7f1d9e81a9b7 [ 541.659371][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 541.659382][ C1] RSP: 002b:00007f1d9cc97038 EFLAGS: 00000246 [ 541.659392][ C1] RAX: 0000000000000113 RBX: 00007f1d9e9b6f80 RCX: 00007f1d9e81a9b9 [ 541.659402][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 541.659410][ C1] RBP: 00007f1d9e8888d8 R08: 0000000008000f28 R09: 0000000000000000 [ 541.659419][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.659427][ C1] R13: 0000000000000000 R14: 00007f1d9e9b6f80 R15: 00007ffc007b0508 [ 541.659442][ C1]