last executing test programs: 13.707633439s ago: executing program 4 (id=733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000020}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000680)={{0x0, 0x0, 0x80}, "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", "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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000240)={0x0, 0x0, '\x00', 0x0, 0x0}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) 12.986091591s ago: executing program 1 (id=734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000008000080001b0000850000007500000046000000fcffffff9500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00x'], 0x28}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x80000, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x12}]}, 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@empty}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={0x0, 0xd}) accept$inet6(r5, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000001c0)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0x8) setreuid(0x0, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@updsa={0x138, 0x1a, 0x4, 0x0, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r11, 0x69e74000) 12.614393783s ago: executing program 0 (id=737): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0) socket$isdn(0x22, 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12.588646375s ago: executing program 1 (id=738): mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00') syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ff0f00"], 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000008100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100003001c154a3c4c3fdffffffe2357f87d6ff16da31d0a64087d20a4b5e7f27a2f4c79dcc8049fba97c27751b4bc4d4c0e9951bcb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x28b0, 0x28, &(0x7f0000000040)=""/40, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe327, r1, 0x2, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x2, 0x5, 0x10, 0x6}, {0x3, 0x5, 0xb}], 0x10, 0x80000000}, 0x90) 10.07015362s ago: executing program 3 (id=740): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) socket(0x1, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) 10.013775845s ago: executing program 4 (id=741): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r9 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) r10 = openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x800, 0x12) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_int(r13, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 9.893563015s ago: executing program 1 (id=742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x18}]}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f065584d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) close(0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_query, @initr0, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}]}, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r4, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000840)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x10}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f00000000c0)={0x24, @long}, 0x8) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8001}, 0x240060c0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000180)={0x8214, 0x3, 0x2, 0x4, 0x45}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40), 0x4000000000000aa, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.760338266s ago: executing program 2 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x6612, 0x0) mkdir(0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5e}, 0x20) r11 = openat$cgroup_procs(r10, 0x0, 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000040), 0xfdef) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000480)='ip6gre0\x00') 9.744399648s ago: executing program 1 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) capset(&(0x7f0000000080), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x22000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)="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") socket$nl_generic(0x10, 0x3, 0x10) 9.71482491s ago: executing program 0 (id=745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580), 0x70}}, 0x0) shutdown(r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.829758671s ago: executing program 1 (id=746): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='bridge0\x00') syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x2001}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) ioctl$TIOCL_SCROLLCONSOLE(r8, 0x4b3a, 0x0) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x5b1, 0x0, 0x0) close(r7) shutdown(r6, 0x0) close(r5) 7.827273101s ago: executing program 2 (id=747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5) ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000002c0)={&(0x7f0000000340)=""/162, 0xa2}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x40) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x4, &(0x7f0000000080)={0x0, "6a4da751434fd7f4a4331cbdbfe693a5b8bcdf3aa54bce5d926e9408d52773fa7f"}}) memfd_create(0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000340)='d', 0x1}, {&(0x7f00000005c0)="c2", 0x1}], 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008480)=""/95, 0x5f}, {}], 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000001780)={0x0, 0x1, 0x20, 0x16, 0x200, &(0x7f0000000880)="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"}) 7.819008292s ago: executing program 4 (id=748): process_vm_writev(0x0, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x4a000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x5, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, r2}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) process_vm_readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.685249954s ago: executing program 3 (id=749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) socket(0x1, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r8, &(0x7f0000000080), 0x4) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) 5.182128508s ago: executing program 2 (id=750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffefffaaaaaaaaaaaa88a80000810000008100600020000000000000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020"]) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) getdents64(r0, 0x0, 0x0) 5.111264363s ago: executing program 0 (id=751): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"5800010000080200", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) shutdown(r4, 0x0) 3.907188936s ago: executing program 0 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1, 0x6, 0x2c, 0x41, 0x0, 0x0, 0x4000402}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffff", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.822943734s ago: executing program 2 (id=753): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x41014, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580), 0x70}}, 0x0) shutdown(r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.766846399s ago: executing program 3 (id=754): timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000080)="d3967696f869cc53bf48accfe191562cdbae50c2d03234dc7921788794df9996bdc7f99142aeedb0c79c0ea7141aaa270d7fca7479"}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r10, r8, r9}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='security'], &(0x7f0000000100)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in6=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0) 3.708541553s ago: executing program 4 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000000103000000000000000000020000010c000d8008000200e000000134001880080003400001300008000340000000070800034000000006080002400000000508000240000000000800014000000fff08001a4000000005980002802c0001801400030000000000000000000000ffffac1414aa14000c00fc0100000000000000000000000000001400018008000100ac14142708000200ac1e2a01060003"], 0x150}}, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') lseek(r3, 0x7, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001200f3"], 0x14c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @broadcast, @device_b}, 0x0, 0x45, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000040), 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000000)=ANY=[@ANYRES32], 0xb, 0x0) msgrcv(r10, 0x0, 0x0, 0x3, 0x4800) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x9]}) listen(r7, 0x0) 2.597073108s ago: executing program 2 (id=756): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x2b, 0x16}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x10000) sendfile(r2, r1, 0x0, 0xffefffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x0, 0x0, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private=0xa010100, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0x2}, {0x0, 0x8, "3a74568474d6"}, {0x6, 0x10, "9ffd40296bf62cb3f6b5fcee3809"}, {0x5, 0x6, "ed0a7d9e"}]}, @timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x0, [{@local, 0x7ff}, {@loopback, 0x2}]}, @timestamp={0x44, 0x28, 0x34, 0x0, 0x9, [0x1, 0xff, 0xfff, 0x7ff5, 0x2, 0x40, 0x5, 0x3, 0x14000]}, @timestamp_addr={0x44, 0x14, 0xec, 0x1, 0x0, [{@multicast1, 0x8}, {@local, 0xea}]}, @cipso={0x86, 0x60, 0x70685e1ab3239fae, [{0x5, 0x4, "bff8"}, {0x7, 0xe, "a44e681292654ad8191644be"}, {0x6, 0x11, "633535dd48834902a8c0535d28e4b0"}, {0x0, 0xe, "4f653c5eb2456d81f6ca88ce"}, {0x0, 0x6, "46e7c6f2"}, {0x7, 0x4, "d978"}, {0x5, 0xe, "27aafaa05129ad6bae41ed7a"}, {0x5, 0x9, "52d1267e74d14d"}, {0x5, 0x8, "2ea9e4524374"}]}, @generic={0x4a, 0x4, "8423"}]}}}}}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbff}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000aed0000"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) 2.595249678s ago: executing program 3 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) capset(&(0x7f0000000080), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x22000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)="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") socket$nl_generic(0x10, 0x3, 0x10) 1.793019357s ago: executing program 0 (id=758): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r9 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000004ff8d978fa7ef9850000000000e5ffffffffffffff000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000799e3b3c00000001000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000010000000000000000000000000000006c6f00000000200000000000f8fffffffeffffffffff000000000000ffffffffffff000000000000000070000000a8000000d8000000646e6174000000000000200000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000100000000000000726564697265637400000000f6f678c1bcc95568ee000000000000000000000008000000000000000008000000000000"]}, 0x210) openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_int(r12, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 1.702186635s ago: executing program 4 (id=759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) socket(0x1, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0), 0x1) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r8, &(0x7f0000000080), 0x4) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) 1.665372758s ago: executing program 3 (id=760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ffff000}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x20000010) 611.788987ms ago: executing program 3 (id=761): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='percpu_free_percpu\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x270, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@ecn={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 206.112552ms ago: executing program 0 (id=762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x101) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r1, 0x402) ftruncate(r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00003b1000/0xe000)=nil, 0xe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000c41000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00004c3000/0x3000)=nil) socket$kcm(0x29, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5ca, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) setresuid(0xee01, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x801c581f, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0x2f) 102.048571ms ago: executing program 2 (id=763): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0) socket$isdn(0x22, 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 26.537637ms ago: executing program 4 (id=764): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/user\x00') r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x21, 0x0, 0x7, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x10, 0xf48, 0x7, 0x9}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '+:^.}@^],'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '9-}{%,!+}'}, {0x20, 'macvlan0\x00'}], 0xa, "29e16ef85f2f0ccd954523db90471dbbccb9c5f1dce31855b7d8b9ee78904bf0b47845d996655f7ba68d3f48"}, 0x69) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000f000000b70300000000000085000000830000ec0c61be000000800055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xf9, &(0x7f00000003c0)=""/249}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x14, 0x7, 0x9, 0x7fff, 0x1258, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r7, 0xfffffffd, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000800000500000000130e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018670000030000000000000008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xa9a, 0x8a, &(0x7f0000000440)=""/138, 0x41100, 0x20, '\x00', r1, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x5, 0x80000000, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x3}, {0x5, 0x5, 0x5, 0x8}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x90) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x40, 0x0, r6, 0x101, '\x00', r10, r6, 0x1, 0x5, 0x3}, 0x48) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) socket(0x1, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r8, &(0x7f0000000080), 0x4) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): 0_macvtap: link becomes ready [ 262.775530][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.845525][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'. [ 262.972486][ T3623] Bluetooth: hci1: command 0x1009 tx timeout [ 263.204479][ T6323] device veth1_macvtap entered promiscuous mode [ 263.362215][ T6436] loop2: detected capacity change from 0 to 1024 [ 263.444513][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.506951][ T6436] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 263.551502][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.571636][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.588493][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.606890][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.617298][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.629943][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.640483][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.655322][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.665476][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.676088][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.686303][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.696772][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.708526][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.712617][ T3781] hfsplus: b-tree write err: -5, ino 4 [ 263.746059][ T3781] hfsplus: bad catalog file entry [ 263.904907][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.919632][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.929557][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.941610][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.951877][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.084663][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.218105][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.327561][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.431018][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.543152][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.646595][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.674252][ T6454] loop0: detected capacity change from 0 to 128 [ 264.687873][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.699707][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.708109][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.717997][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.728146][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.750425][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.963695][ T6323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.975698][ T6323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.070787][ T6323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.124796][ T6323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.543791][ T6465] loop0: detected capacity change from 0 to 1024 [ 266.616599][ T604] device hsr_slave_0 left promiscuous mode [ 266.691110][ T604] device hsr_slave_1 left promiscuous mode [ 266.699662][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.708923][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.717424][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.755947][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.815629][ T604] device bridge_slave_1 left promiscuous mode [ 266.827954][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.873428][ T604] device bridge_slave_0 left promiscuous mode [ 266.906949][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.934863][ T604] device veth1_macvtap left promiscuous mode [ 266.955313][ T604] device veth0_macvtap left promiscuous mode [ 266.972146][ T604] device veth1_vlan left promiscuous mode [ 266.980380][ T604] device veth0_vlan left promiscuous mode [ 267.550121][ T3976] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 267.598262][ T604] team0 (unregistering): Port device team_slave_1 removed [ 267.615837][ T604] team0 (unregistering): Port device team_slave_0 removed [ 267.627485][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.795284][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.389119][ T604] bond0 (unregistering): Released all slaves [ 268.421430][ T6482] tipc: Failed to remove unknown binding: 66,1,1/0:3648776261/3648776263 [ 268.440800][ T6482] tipc: Failed to remove unknown binding: 66,1,1/0:3648776261/3648776263 [ 268.561123][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.576245][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.636326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.703229][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.766850][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.820384][ T3976] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 268.829441][ T3976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.840471][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.877435][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 269.044175][ T3674] Bluetooth: hci1: command 0x0409 tx timeout [ 269.062497][ T3976] usb 3-1: Product: syz [ 269.069870][ T3976] usb 3-1: Manufacturer: syz [ 269.076429][ T3976] usb 3-1: SerialNumber: syz [ 269.097483][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.114781][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.124512][ T6472] device bridge_slave_0 entered promiscuous mode [ 269.126463][ T3976] usb 3-1: config 0 descriptor?? [ 269.134162][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.143574][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.152179][ T6472] device bridge_slave_1 entered promiscuous mode [ 269.251924][ T3976] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 269.283067][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.357190][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.446541][ T6472] team0: Port device team_slave_0 added [ 269.520889][ T6509] futex_wake_op: syz.0.487 tries to shift op by 36; fix this program [ 269.868118][ T6472] team0: Port device team_slave_1 added [ 269.894899][ T4806] usb 3-1: USB disconnect, device number 15 [ 269.997397][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.068478][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.098107][ T6512] loop0: detected capacity change from 0 to 256 [ 270.149576][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.183785][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.193981][ T6514] loop4: detected capacity change from 0 to 512 [ 270.200075][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.263584][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.287157][ T6514] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 270.491187][ T6514] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback. [ 270.510490][ T6514] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 270.726512][ T6514] EXT4-fs error (device loop4): __ext4_new_inode:1282: comm syz.4.489: failed to insert inode 16: doubly allocated? [ 271.051304][ T6472] device hsr_slave_0 entered promiscuous mode [ 271.060674][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 271.087619][ T6472] device hsr_slave_1 entered promiscuous mode [ 271.096195][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.155796][ T6472] Cannot create hsr debugfs directory [ 271.708807][ T6535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.274945][ T6472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.395088][ T6472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.517074][ T6543] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 272.538683][ T6472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.650324][ T6543] netlink: 92 bytes leftover after parsing attributes in process `syz.4.496'. [ 272.700334][ T3578] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.992800][ T6472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.140338][ T1293] Bluetooth: hci1: command 0x040f tx timeout [ 274.182203][ T6472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.242900][ T6472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.261965][ T3578] usb 3-1: Using ep0 maxpacket: 8 [ 274.272175][ T6472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.285066][ T6472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.439791][ T4806] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 274.455437][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 274.480340][ T3578] usb 3-1: device descriptor read/all, error -71 [ 275.220156][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 275.400412][ T4806] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 275.420393][ T4806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.428770][ T4806] usb 1-1: Product: syz [ 276.085180][ T4806] usb 1-1: Manufacturer: syz [ 276.104581][ T4806] usb 1-1: SerialNumber: syz [ 276.114452][ T4806] usb 1-1: config 0 descriptor?? [ 276.140211][ T4806] usb 1-1: can't set config #0, error -71 [ 276.179500][ T4806] usb 1-1: USB disconnect, device number 15 [ 276.210511][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.252464][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.272875][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.950810][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.978636][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.013294][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.054738][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.061880][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.102511][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.132679][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.152600][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.159718][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.178545][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.227522][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.260666][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.270894][ T3578] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.292746][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.336375][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.356807][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.377236][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.397921][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.499134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.535951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.543054][ T6578] loop0: detected capacity change from 0 to 32768 [ 277.549194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.559492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.573078][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.889762][ T6594] loop4: detected capacity change from 0 to 1024 [ 277.898323][ T25] audit: type=1326 audit(1724961390.772:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.216291][ T25] audit: type=1326 audit(1724961390.772:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.276247][ T25] audit: type=1326 audit(1724961390.782:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.311493][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.360319][ T3578] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 278.373739][ T3578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.393579][ T3578] usb 4-1: config 0 descriptor?? [ 278.418804][ T25] audit: type=1326 audit(1724961390.782:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.442768][ T25] audit: type=1326 audit(1724961390.782:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.497160][ T3578] ldusb 4-1:0.0: Interrupt in endpoint not found [ 278.517130][ T25] audit: type=1326 audit(1724961390.792:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.561000][ T25] audit: type=1326 audit(1724961390.792:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.602769][ T25] audit: type=1326 audit(1724961390.792:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.679102][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.698629][ T25] audit: type=1326 audit(1724961390.792:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.721413][ T25] audit: type=1326 audit(1724961390.792:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca907eef9 code=0x7ffc0000 [ 278.752191][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.754359][ T21] usb 4-1: USB disconnect, device number 20 [ 278.790686][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.563395][ T6611] loop4: detected capacity change from 0 to 512 [ 279.591440][ T6611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 279.626795][ T6611] EXT4-fs (loop4): 1 truncate cleaned up [ 279.648286][ T6611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.799884][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.808891][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.827616][ T6472] device veth0_vlan entered promiscuous mode [ 279.853505][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.047914][ T1293] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 281.064532][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.151885][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.159935][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.273959][ T6472] device veth1_vlan entered promiscuous mode [ 281.307141][ T6472] device veth0_macvtap entered promiscuous mode [ 281.325022][ T6472] device veth1_macvtap entered promiscuous mode [ 281.910578][ T3674] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 281.918842][ T1293] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.943436][ T1293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.008465][ T1293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.100593][ T1293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.264863][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.280157][ T1293] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.286600][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.291065][ T1293] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.298849][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.320933][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.330547][ T1293] usb 3-1: Product: syz [ 282.334728][ T1293] usb 3-1: Manufacturer: syz [ 282.389244][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.423844][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.443951][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.460475][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.478189][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.496699][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.515300][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.530510][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.551008][ T6646] cgroup: Bad value for 'name' [ 282.558139][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.568688][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.579721][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.591802][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.592323][ T1293] cdc_wdm 3-1:1.0: skipping garbage [ 282.616260][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.619442][ T1293] cdc_wdm 3-1:1.0: skipping garbage [ 282.630895][ T3674] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 282.640146][ T3674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.648228][ T3674] usb 1-1: Product: syz [ 282.658607][ T3674] usb 1-1: Manufacturer: syz [ 282.919704][ T6648] loop3: detected capacity change from 0 to 1024 [ 282.930277][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 282.930362][ T25] audit: type=1326 audit(1724961395.812:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 282.958960][ T3674] usb 1-1: SerialNumber: syz [ 282.996170][ T25] audit: type=1326 audit(1724961395.812:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.018863][ T25] audit: type=1326 audit(1724961395.822:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.080641][ T1293] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 283.100932][ T3674] usb 1-1: config 0 descriptor?? [ 283.113204][ T25] audit: type=1326 audit(1724961395.822:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.137115][ T1293] cdc_wdm 3-1:1.0: Unknown control protocol [ 283.143522][ T25] audit: type=1326 audit(1724961395.822:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.168568][ T1293] usb 3-1: USB disconnect, device number 18 [ 283.175104][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.176075][ T3674] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 283.191372][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.197052][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.213056][ T25] audit: type=1326 audit(1724961395.822:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.239040][ T25] audit: type=1326 audit(1724961395.822:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.290236][ T25] audit: type=1326 audit(1724961395.822:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.325670][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.327984][ T25] audit: type=1326 audit(1724961395.832:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.409715][ T6625] overlayfs: failed to resolve './file0': -2 [ 283.427392][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.479897][ T25] audit: type=1326 audit(1724961395.832:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x7ffc0000 [ 283.496048][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.515870][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.526204][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.537249][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.547594][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.559844][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.570356][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.581237][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.591627][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.602601][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.620857][ T1293] usb 1-1: USB disconnect, device number 16 [ 283.646304][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.684676][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.712809][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.757856][ T6472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.767043][ T6472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.776554][ T6472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.786321][ T6472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.912166][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.927081][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.971416][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.971911][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.010208][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.038163][ T6665] loop3: detected capacity change from 0 to 512 [ 284.063258][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.342673][ T6665] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 284.647562][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback. [ 284.737098][ T6665] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 284.952336][ T6677] loop0: detected capacity change from 0 to 512 [ 284.964834][ T6665] EXT4-fs error (device loop3): __ext4_new_inode:1282: comm syz.3.528: failed to insert inode 16: doubly allocated? [ 285.716644][ T6682] loop2: detected capacity change from 0 to 512 [ 285.723980][ T6677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 285.774454][ T6682] EXT4-fs (loop2): Test dummy encryption mode enabled [ 285.788295][ T604] device hsr_slave_0 left promiscuous mode [ 285.794742][ T6682] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 285.850822][ T6677] EXT4-fs (loop0): 1 truncate cleaned up [ 285.856611][ T6677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.909252][ T604] device hsr_slave_1 left promiscuous mode [ 285.927950][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.936231][ T6682] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.531: iget: bogus i_mode (0) [ 285.988618][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.060602][ T6682] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.531: couldn't read orphan inode 17 (err -117) [ 286.085387][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.114889][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.122587][ T6682] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 286.140623][ T604] device bridge_slave_1 left promiscuous mode [ 286.146861][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.797041][ T604] device bridge_slave_0 left promiscuous mode [ 286.857635][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.996709][ T604] device veth1_macvtap left promiscuous mode [ 287.023427][ T6705] loop0: detected capacity change from 0 to 512 [ 287.031959][ T604] device veth0_macvtap left promiscuous mode [ 287.038100][ T604] device veth1_vlan left promiscuous mode [ 287.046428][ T604] device veth0_vlan left promiscuous mode [ 287.077689][ T6705] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.534: iget: bad extended attribute block 128 [ 287.080169][ T3563] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 287.116991][ T6705] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.534: couldn't read orphan inode 16 (err -117) [ 287.314400][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.570652][ T3563] usb 2-1: Using ep0 maxpacket: 16 [ 287.636988][ T6705] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 287.691961][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 287.722861][ T3563] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 287.740510][ T6701] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 287.748957][ T6705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.534: bg 0: block 352: padding at end of block bitmap is not set [ 287.772931][ T6701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.531: bg 0: block 7: invalid block bitmap [ 287.810369][ T3563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.821234][ T3563] usb 2-1: config 0 descriptor?? [ 287.828960][ T6705] EXT4-fs error (device loop0): ext4_xattr_block_set:2197: inode #12: comm syz.0.534: bad block 0 [ 288.133860][ T6720] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 288.227895][ T6690] udc-core: couldn't find an available UDC or it's busy [ 288.306917][ T6690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.696851][ T604] team0 (unregistering): Port device team_slave_1 removed [ 288.713579][ T604] team0 (unregistering): Port device team_slave_0 removed [ 288.728663][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.743886][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.812108][ T604] bond0 (unregistering): Released all slaves [ 288.906798][ T6685] udc-core: couldn't find an available UDC or it's busy [ 288.920962][ T6685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.963047][ T3563] hid (null): invalid report_count 983040256 [ 288.969133][ T3563] hid (null): unknown global tag 0xc [ 288.983822][ T3563] hid (null): invalid report_count 7155259 [ 288.994454][ T3563] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 289.002818][ T3563] hid-generic 0003:0158:0100.0006: invalid report_count 983040256 [ 289.011994][ T3563] hid-generic 0003:0158:0100.0006: item 0 4 1 9 parsing failed [ 289.020716][ T3563] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 289.365618][ T4808] usb 2-1: USB disconnect, device number 17 [ 289.458830][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 289.492130][ T6232] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 289.615863][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 289.759408][ T6730] loop0: detected capacity change from 0 to 1024 [ 290.196859][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 290.197192][ T25] audit: type=1326 audit(1724961402.762:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.301119][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.317972][ T25] audit: type=1326 audit(1724961402.762:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.322507][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.344310][ T3780] Bluetooth: hci2: command 0x1003 tx timeout [ 290.393426][ T25] audit: type=1326 audit(1724961402.762:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.433359][ T3589] Bluetooth: hci2: sending frame failed (-49) [ 290.441380][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.446948][ T25] audit: type=1326 audit(1724961402.762:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.485796][ T6730] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.491122][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.513384][ T25] audit: type=1326 audit(1724961402.762:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.543878][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.599449][ T25] audit: type=1326 audit(1724961402.762:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.630870][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.656994][ T25] audit: type=1326 audit(1724961402.762:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.691349][ T6232] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /23/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 290.718774][ T25] audit: type=1326 audit(1724961402.762:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.822229][ T25] audit: type=1326 audit(1724961402.762:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 290.957735][ T25] audit: type=1326 audit(1724961402.762:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7ffc0000 [ 291.000433][ T6742] loop1: detected capacity change from 0 to 512 [ 291.041219][ T6740] loop3: detected capacity change from 0 to 2048 [ 291.052323][ T6742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 291.091816][ T6742] EXT4-fs (loop1): 1 truncate cleaned up [ 291.097488][ T6742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.138069][ T6740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.247429][ T6744] wireguard: wireguard0: Could not create IPv6 socket [ 291.261048][ T6744] device wireguard0 entered promiscuous mode [ 292.468669][ T6757] 9pnet_virtio: no channels available for device syz [ 292.512891][ T13] Bluetooth: hci2: command 0x1001 tx timeout [ 292.520412][ T3589] Bluetooth: hci2: sending frame failed (-49) [ 293.773968][ C1] eth0: bad gso: type: 1, size: 1408 [ 294.053590][ T6777] loop1: detected capacity change from 0 to 256 [ 294.078920][ T604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.099804][ T6773] loop0: detected capacity change from 0 to 2048 [ 294.208302][ T604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.381571][ T6773] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.569332][ T604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.581902][ T4808] Bluetooth: hci2: command 0x1009 tx timeout [ 295.198629][ T6773] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 295.281295][ T604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.284510][ T6790] loop1: detected capacity change from 0 to 256 [ 295.427286][ T6790] FAT-fs (loop1): Directory bread(block 64) failed [ 295.459739][ T6790] FAT-fs (loop1): Directory bread(block 65) failed [ 295.508103][ T6790] FAT-fs (loop1): Directory bread(block 66) failed [ 295.562003][ T6790] FAT-fs (loop1): Directory bread(block 67) failed [ 295.568660][ T6790] FAT-fs (loop1): Directory bread(block 68) failed [ 295.575560][ T6790] FAT-fs (loop1): Directory bread(block 69) failed [ 295.582485][ T6790] FAT-fs (loop1): Directory bread(block 70) failed [ 295.594813][ T6790] FAT-fs (loop1): Directory bread(block 71) failed [ 295.616472][ T6790] FAT-fs (loop1): Directory bread(block 72) failed [ 295.680291][ T6790] FAT-fs (loop1): Directory bread(block 73) failed [ 295.695081][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 296.759500][ T3780] Bluetooth: hci4: command 0x0409 tx timeout [ 296.780513][ T4808] Bluetooth: hci0: command 0x0409 tx timeout [ 296.833462][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.901227][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.909255][ T6778] device bridge_slave_0 entered promiscuous mode [ 296.919032][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.926563][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.946970][ T6778] device bridge_slave_1 entered promiscuous mode [ 297.084603][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.108867][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.193962][ T6778] team0: Port device team_slave_0 added [ 297.219207][ T6778] team0: Port device team_slave_1 added [ 297.295881][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.334097][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.410393][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.436729][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.446029][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.612344][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.880802][ T6778] device hsr_slave_0 entered promiscuous mode [ 297.945734][ T6778] device hsr_slave_1 entered promiscuous mode [ 297.958688][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.984116][ T6778] Cannot create hsr debugfs directory [ 299.094751][ T604] device hsr_slave_0 left promiscuous mode [ 299.155404][ T604] device hsr_slave_1 left promiscuous mode [ 299.192435][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.241576][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.257212][ T3780] Bluetooth: hci0: command 0x041b tx timeout [ 299.259914][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.273631][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.290734][ T604] device bridge_slave_1 left promiscuous mode [ 299.296964][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.316923][ T604] device bridge_slave_0 left promiscuous mode [ 299.330343][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.351182][ T604] device veth1_macvtap left promiscuous mode [ 299.357228][ T604] device veth0_macvtap left promiscuous mode [ 299.383300][ T604] device veth1_vlan left promiscuous mode [ 299.389114][ T604] device veth0_vlan left promiscuous mode [ 299.824156][ T604] team0 (unregistering): Port device team_slave_1 removed [ 299.849867][ T604] team0 (unregistering): Port device team_slave_0 removed [ 299.876348][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.907308][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.024656][ T604] bond0 (unregistering): Released all slaves [ 300.385259][ T6895] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 300.527367][ T6903] loop3: detected capacity change from 0 to 1024 [ 300.625726][ T6903] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 300.650314][ T6903] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.662045][ T3780] Bluetooth: hci2: command 0x0409 tx timeout [ 300.668310][ T6903] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 300.692357][ T6903] journal_init_common: Cannot get buffer for journal superblock [ 300.701096][ T6903] EXT4-fs (loop3): Could not load journal inode [ 300.816486][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 300.872535][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.906240][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.967289][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.020190][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.042428][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.072689][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.116006][ T6860] device bridge_slave_0 entered promiscuous mode [ 301.162491][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.190170][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.237023][ T6860] device bridge_slave_1 entered promiscuous mode [ 301.310279][ T3780] Bluetooth: hci0: command 0x040f tx timeout [ 301.409703][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.482057][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.539632][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.601537][ T6860] team0: Port device team_slave_0 added [ 301.646590][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.683576][ T6860] team0: Port device team_slave_1 added [ 301.696016][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.734583][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.781295][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.810945][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.849992][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.857295][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.951767][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.973403][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.008482][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.027459][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.034621][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.073459][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.101880][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.114167][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.248202][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.380617][ T6778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.442094][ T6778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.641857][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.672803][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.024893][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.072271][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.128795][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.137261][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 303.166677][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.207738][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.234425][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.259416][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.286425][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.316434][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.330403][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.346113][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.372082][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.381328][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 303.432815][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.459435][ T6972] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 304.307683][ T6860] device hsr_slave_0 entered promiscuous mode [ 304.366226][ T6860] device hsr_slave_1 entered promiscuous mode [ 304.377083][ T6997] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 304.418338][ T6998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.586'. [ 304.428297][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.440280][ T6860] Cannot create hsr debugfs directory [ 304.534346][ T6996] loop1: detected capacity change from 0 to 4096 [ 304.554428][ T7003] loop3: detected capacity change from 0 to 1024 [ 304.600647][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.608203][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.701056][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.956273][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.059103][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.179359][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.216438][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.291820][ T6778] device veth0_vlan entered promiscuous mode [ 305.305323][ T3780] Bluetooth: hci2: command 0x040f tx timeout [ 305.345481][ T6860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.477443][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.494870][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.517786][ T6472] ntfs3: loop1: failed to convert "0000" to iso8859-6 [ 305.538283][ T6778] device veth1_vlan entered promiscuous mode [ 305.594028][ T6472] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 305.608281][ T6860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.618079][ T6472] ntfs3: loop1: failed to convert name for inode 1e. [ 305.674578][ T6472] ntfs3: loop1: failed to convert "0032" to iso8859-6 [ 305.701416][ T6472] ntfs3: loop1: failed to convert "0033" to iso8859-6 [ 305.720206][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.729759][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.827131][ T6860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.867810][ T6778] device veth0_macvtap entered promiscuous mode [ 305.925571][ T6778] device veth1_macvtap entered promiscuous mode [ 305.969679][ T6860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.013341][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.050350][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.079927][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.091127][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 306.091147][ T25] audit: type=1326 audit(1724961419.112:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x0 [ 306.122502][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.150118][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.171241][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.196388][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.207933][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.218380][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.229944][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.242981][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.262992][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.274608][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.310999][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.330607][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.353077][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.370355][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.393100][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.415489][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.438421][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.449811][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.468119][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.479203][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.496585][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.509652][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.530768][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.542594][ T6778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.571340][ T6778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.588988][ T6778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.599523][ T6778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.617386][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.629511][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.785645][ T604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.868462][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.908839][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.938956][ T604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.946259][ T3767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.991683][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.999311][ T3767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.011870][ T7054] loop0: detected capacity change from 0 to 128 [ 307.032772][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.067778][ T604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.109122][ T7055] loop3: detected capacity change from 0 to 512 [ 307.189761][ T604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.320992][ T7060] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.482588][ T3780] Bluetooth: hci2: command 0x0419 tx timeout [ 307.930990][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.552'. [ 308.090755][ T7065] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 308.141314][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.597'. [ 308.157820][ T6860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.284899][ T6860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.323468][ T6860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.351264][ T6860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.495139][ T7075] x_tables: unsorted entry at hook 3 [ 308.502227][ T7075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'. [ 308.548056][ T7056] chnl_net:caif_netlink_parms(): no params data found [ 308.588224][ T7077] netlink: 'syz.2.600': attribute type 2 has an invalid length. [ 308.626562][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.600'. [ 308.873075][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.891199][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.933996][ T7056] device bridge_slave_0 entered promiscuous mode [ 308.975681][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.038198][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.050891][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.074748][ T7094] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 309.094201][ T7056] device bridge_slave_1 entered promiscuous mode [ 309.173318][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.220316][ T3578] Bluetooth: hci1: command 0x0409 tx timeout [ 309.248788][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.257675][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.309948][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.354951][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.374183][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.384320][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.391449][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.420795][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.571947][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.514938][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.548617][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.569670][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.576824][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.586082][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.626472][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.826958][ T4807] Bluetooth: hci1: command 0x041b tx timeout [ 312.327319][ T7120] loop2: detected capacity change from 0 to 128 [ 312.336081][ T7056] team0: Port device team_slave_0 added [ 312.379189][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.477097][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.498388][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.519132][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.564358][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.573586][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.587107][ T7056] team0: Port device team_slave_1 added [ 312.601918][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.658224][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.665584][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.762219][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.113699][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.221058][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.283655][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.310177][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.380066][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.420607][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.432369][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.553755][ T7056] device hsr_slave_0 entered promiscuous mode [ 313.566022][ T7056] device hsr_slave_1 entered promiscuous mode [ 313.580701][ T7056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.588288][ T7056] Cannot create hsr debugfs directory [ 313.677517][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.706337][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.720707][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.927009][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.935883][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.980764][ T6860] device veth0_vlan entered promiscuous mode [ 313.987447][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.998205][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.008117][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.016457][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.024149][ T3780] Bluetooth: hci1: command 0x040f tx timeout [ 314.059293][ T6860] device veth1_vlan entered promiscuous mode [ 314.156620][ T6860] device veth0_macvtap entered promiscuous mode [ 314.173623][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.188872][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.197564][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.206994][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.267291][ T6860] device veth1_macvtap entered promiscuous mode [ 314.275994][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.286818][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.311686][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.327067][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.337095][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.352363][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.362528][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.373262][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.383391][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.393912][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.403897][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.414361][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.425598][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.437759][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.451074][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.463366][ T604] device hsr_slave_0 left promiscuous mode [ 314.469756][ T604] device hsr_slave_1 left promiscuous mode [ 314.477916][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.486599][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.494647][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.502940][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.510696][ T604] device bridge_slave_1 left promiscuous mode [ 314.517207][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.525951][ T604] device bridge_slave_0 left promiscuous mode [ 314.532491][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.547257][ T604] device hsr_slave_0 left promiscuous mode [ 314.553698][ T604] device hsr_slave_1 left promiscuous mode [ 314.559919][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.567667][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.575739][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.583836][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.591672][ T604] device bridge_slave_1 left promiscuous mode [ 314.597811][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.606855][ T604] device bridge_slave_0 left promiscuous mode [ 314.614287][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.630918][ T604] device veth1_macvtap left promiscuous mode [ 314.637047][ T604] device veth0_macvtap left promiscuous mode [ 314.643191][ T604] device veth1_vlan left promiscuous mode [ 314.648950][ T604] device veth0_vlan left promiscuous mode [ 314.656705][ T604] device veth1_macvtap left promiscuous mode [ 314.662868][ T604] device veth0_macvtap left promiscuous mode [ 314.668902][ T604] device veth1_vlan left promiscuous mode [ 314.674823][ T604] device veth0_vlan left promiscuous mode [ 314.916545][ T604] team0 (unregistering): Port device team_slave_1 removed [ 314.928326][ T604] team0 (unregistering): Port device team_slave_0 removed [ 314.943560][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.959809][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.019582][ T604] bond0 (unregistering): Released all slaves [ 315.144280][ T604] team0 (unregistering): Port device team_slave_1 removed [ 315.158499][ T604] team0 (unregistering): Port device team_slave_0 removed [ 315.172072][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.187052][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.253791][ T604] bond0 (unregistering): Released all slaves [ 315.316174][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.324756][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.340785][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.351662][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.369111][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.389949][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.400253][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.410712][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.420549][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.431010][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.441943][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.459715][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.472510][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.488480][ T6860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.501162][ T6860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.509879][ T6860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.518984][ T6860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.626748][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.640841][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.674622][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.682247][ T7056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.690343][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.708218][ T7056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.719572][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.727784][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.737788][ T7056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.756541][ T7056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.848901][ T7171] loop2: detected capacity change from 0 to 256 [ 315.906410][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 316.043127][ T7171] FAT-fs (loop2): Directory bread(block 64) failed [ 316.080457][ T7171] FAT-fs (loop2): Directory bread(block 65) failed [ 316.108543][ T3976] Bluetooth: hci1: command 0x0419 tx timeout [ 316.123549][ T7171] FAT-fs (loop2): Directory bread(block 66) failed [ 316.155121][ T7171] FAT-fs (loop2): Directory bread(block 67) failed [ 316.317235][ T7171] FAT-fs (loop2): Directory bread(block 68) failed [ 316.324050][ T7171] FAT-fs (loop2): Directory bread(block 69) failed [ 316.331435][ T7171] FAT-fs (loop2): Directory bread(block 70) failed [ 316.338100][ T7171] FAT-fs (loop2): Directory bread(block 71) failed [ 316.347116][ T7171] FAT-fs (loop2): Directory bread(block 72) failed [ 316.354092][ T7171] FAT-fs (loop2): Directory bread(block 73) failed [ 317.130594][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.136917][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.196942][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 318.460204][ T25] audit: type=1804 audit(1724961431.262:190): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.617" name="/newroot/6/bus/file0" dev="loop2" ino=1048700 res=1 errno=0 [ 318.556648][ T7203] loop3: detected capacity change from 0 to 2048 [ 318.564543][ T7208] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 318.590259][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.628332][ T7209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.610'. [ 318.648697][ T7203] UDF-fs: bad mount option "uid=" or missing value [ 318.709326][ T6778] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 318.760403][ T6778] FAT-fs (loop2): Filesystem has been set read-only [ 318.760676][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.800093][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.810574][ T7056] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.871442][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.900516][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.930273][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.937389][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.985914][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.007348][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.026234][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.033381][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.597328][ T3563] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 319.752670][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.765380][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.814221][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.831628][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.918057][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.948878][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.979482][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.005763][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.073226][ T3563] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.084557][ T3563] usb 4-1: config 1 has no interface number 0 [ 320.090840][ T3563] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.095034][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.102720][ T3563] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 320.119734][ T3563] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.133766][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.583039][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.631252][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.686451][ T7056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.720225][ T3563] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.738947][ T3563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.773868][ T3563] usb 4-1: Product: syz [ 320.795767][ T3563] usb 4-1: Manufacturer: syz [ 320.826968][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 320.836328][ T3563] usb 4-1: can't set config #1, error -71 [ 320.924751][ T3563] usb 4-1: USB disconnect, device number 21 [ 321.148881][ T7264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 321.200669][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.209348][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.225300][ T7269] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 321.244173][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.276251][ T7271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.626'. [ 321.450915][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.471110][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.595258][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.613035][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.636926][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.657249][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.689857][ T7056] device veth0_vlan entered promiscuous mode [ 321.770636][ T7056] device veth1_vlan entered promiscuous mode [ 321.906093][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 321.924380][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.961939][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.019253][ T7254] loop4: detected capacity change from 0 to 32768 [ 322.034673][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.064854][ T7254] Dev loop4 Sun disklabel: Csum bad, label corrupted [ 322.092616][ T7254] loop4: unable to read partition table [ 322.113297][ T7254] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 322.155636][ T7056] device veth0_macvtap entered promiscuous mode [ 322.182031][ T7056] device veth1_macvtap entered promiscuous mode [ 322.283655][ T3027] Dev loop4 Sun disklabel: Csum bad, label corrupted [ 322.316654][ T3027] loop4: unable to read partition table [ 322.333189][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.351793][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.385077][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.398617][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.409760][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.427985][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.439113][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.450598][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.465215][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.476190][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.495568][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.511740][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.543942][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.596810][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.619985][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.667452][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.691473][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.713539][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.728936][ T7303] loop0: detected capacity change from 0 to 1024 [ 322.735460][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.746576][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.758958][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.769604][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.779771][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.790863][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.802523][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.833723][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 322.872055][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.991312][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.077514][ T7056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.123774][ T7056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.388242][ T7056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.423345][ T7056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.470644][ T4806] Bluetooth: hci0: command 0x0409 tx timeout [ 323.739609][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.764300][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.785094][ T7273] device bridge_slave_0 entered promiscuous mode [ 323.916102][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.935526][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.947624][ T7273] device bridge_slave_1 entered promiscuous mode [ 324.748994][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.867748][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.024727][ T7273] team0: Port device team_slave_0 added [ 325.054542][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.075653][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.089614][ T7273] team0: Port device team_slave_1 added [ 325.101702][ T7338] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 325.151554][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.4.636'. [ 325.172624][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.226729][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.229275][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.257222][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.258360][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.317113][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.343078][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.350381][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.388668][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.407482][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.447239][ T604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.540598][ T4806] Bluetooth: hci0: command 0x041b tx timeout [ 325.542232][ T604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.644474][ T7273] device hsr_slave_0 entered promiscuous mode [ 325.683818][ T7273] device hsr_slave_1 entered promiscuous mode [ 325.699123][ T7357] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 325.709505][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.840219][ T7273] Cannot create hsr debugfs directory [ 325.963552][ T7356] loop0: detected capacity change from 0 to 2048 [ 325.984251][ T604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.077459][ T7356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.139696][ T7356] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 326.140270][ T25] audit: type=1800 audit(1724961439.152:191): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 326.185095][ T7368] netlink: 'syz.3.641': attribute type 16 has an invalid length. [ 326.194421][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 326.222282][ T604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.277523][ T7378] loop3: detected capacity change from 0 to 128 [ 326.278114][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.639'. [ 326.335074][ T3578] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 327.400072][ T3578] usb 5-1: Using ep0 maxpacket: 32 [ 327.597264][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 327.636478][ T1293] Bluetooth: hci0: command 0x040f tx timeout [ 327.654769][ T3578] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 327.687146][ T3578] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 327.780560][ T7399] netlink: 108 bytes leftover after parsing attributes in process `syz.1.646'. [ 328.282319][ T3578] usb 5-1: Product: syz [ 328.288397][ T3578] usb 5-1: config 0 descriptor?? [ 328.362024][ T3578] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 328.368374][ T3578] gspca_stv06xx: st6422 sensor detected [ 329.690254][ T3578] STV06xx: probe of 5-1:0.0 failed with error -71 [ 329.700356][ T3623] Bluetooth: hci0: command 0x0419 tx timeout [ 329.718036][ T3578] usb 5-1: USB disconnect, device number 8 [ 329.769609][ T7427] loop1: detected capacity change from 0 to 16 [ 329.849361][ T7428] loop3: detected capacity change from 0 to 2048 [ 329.899816][ T7427] erofs: (device loop1): mounted with root inode @ nid 36. [ 329.922227][ T7428] UDF-fs: bad mount option "u" or missing value [ 329.963101][ T7273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.992657][ T7273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.085017][ T7273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.206873][ T7442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.247008][ T3623] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 330.670250][ T7273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.760851][ T3623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.775992][ T3623] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.792197][ T3623] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.802178][ T3623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.834571][ T3623] usb 1-1: config 0 descriptor?? [ 331.280300][ T1293] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 331.428457][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.453189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.462268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.476978][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.501122][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.510523][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.519827][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.530836][ T3767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.553099][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.564066][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.573499][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.574219][ T3623] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.582422][ T3767] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.596275][ T3767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.596564][ T3623] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 331.615190][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.618349][ T3623] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 331.634945][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.651104][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.664438][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.690249][ T4807] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 331.708299][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.720569][ T3623] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 331.750763][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.759583][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.768662][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.787518][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.847373][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.860827][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.872160][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.901767][ T1293] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 331.912664][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.922222][ T1293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.941344][ T1293] usb 5-1: Product: syz [ 331.960202][ T1293] usb 5-1: Manufacturer: syz [ 331.976393][ T1293] usb 5-1: SerialNumber: syz [ 331.987537][ T1293] usb 5-1: config 0 descriptor?? [ 332.012940][ T3623] usb 1-1: USB disconnect, device number 17 [ 332.042023][ T1293] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 332.111401][ T4807] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.122117][ T4807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.154788][ T4807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.165550][ T4807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.208211][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.216881][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.229480][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.247859][ T7447] overlayfs: failed to resolve './file0': -2 [ 332.293939][ T1293] usb 5-1: USB disconnect, device number 9 [ 332.300429][ T4807] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.322912][ T4807] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.332458][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.351410][ T4807] usb 2-1: Product: syz [ 332.351878][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.371907][ T4807] usb 2-1: Manufacturer: syz [ 332.407022][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.418568][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.434220][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.447853][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.462511][ T4807] cdc_wdm 2-1:1.0: skipping garbage [ 332.486298][ T7273] device veth0_vlan entered promiscuous mode [ 332.492943][ T4807] cdc_wdm 2-1:1.0: skipping garbage [ 332.515904][ T4807] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 332.539444][ T7273] device veth1_vlan entered promiscuous mode [ 332.542454][ T4807] cdc_wdm 2-1:1.0: Unknown control protocol [ 332.664019][ T604] device hsr_slave_0 left promiscuous mode [ 332.688686][ T604] device hsr_slave_1 left promiscuous mode [ 332.695944][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.712016][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.726135][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.758810][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.909124][ T604] device bridge_slave_1 left promiscuous mode [ 332.915610][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.924591][ T604] device bridge_slave_0 left promiscuous mode [ 332.941143][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.326878][ T604] device hsr_slave_0 left promiscuous mode [ 333.350539][ T604] device hsr_slave_1 left promiscuous mode [ 333.407724][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.439085][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.560537][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.579069][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.630744][ T604] device bridge_slave_0 left promiscuous mode [ 333.636984][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.693972][ T604] device veth1_macvtap left promiscuous mode [ 333.716760][ T604] device veth0_macvtap left promiscuous mode [ 333.733416][ T604] device veth1_vlan left promiscuous mode [ 333.748160][ T604] device veth0_vlan left promiscuous mode [ 333.778898][ T604] device veth1_macvtap left promiscuous mode [ 333.790444][ T604] device veth0_macvtap left promiscuous mode [ 333.796709][ T604] device veth1_vlan left promiscuous mode [ 333.816234][ T604] device veth0_vlan left promiscuous mode [ 335.099779][ T7506] netlink: 92 bytes leftover after parsing attributes in process `syz.4.667'. [ 335.761194][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.667'. [ 336.016146][ T604] team0 (unregistering): Port device team_slave_1 removed [ 336.029726][ T604] team0 (unregistering): Port device team_slave_0 removed [ 336.044505][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.057829][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.126813][ T604] bond0 (unregistering): Released all slaves [ 336.240338][ T1293] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 336.266594][ T604] team0 (unregistering): Port device team_slave_1 removed [ 336.282409][ T604] team0 (unregistering): Port device team_slave_0 removed [ 336.295447][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.309928][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.374958][ T604] bond0 (unregistering): Released all slaves [ 336.547990][ T7273] device veth0_macvtap entered promiscuous mode [ 336.556489][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.566145][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.601036][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.619070][ T7521] tmpfs: Bad value for 'mpol' [ 336.631139][ T7273] device veth1_macvtap entered promiscuous mode [ 336.637640][ T1293] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 336.652275][ T1293] usb 1-1: config 0 has no interface number 0 [ 336.658682][ T1293] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.673637][ T1293] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.682570][ T7521] overlayfs: missing 'lowerdir' [ 336.727701][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.738916][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.749167][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.761118][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.771424][ T1293] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 336.772411][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.780538][ T1293] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 336.780558][ T1293] usb 1-1: Manufacturer: syz [ 336.789519][ T1293] usb 1-1: config 0 descriptor?? [ 336.798653][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.818804][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.830448][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.862654][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.879638][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.909049][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.936306][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.949808][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.965442][ T3623] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 337.014365][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.029063][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.042350][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.055908][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.068786][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.080519][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.093565][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.108957][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.119291][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.140526][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.187722][ T7273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.199037][ T7273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.218097][ T7273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.234718][ T7273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.431168][ T7528] udc-core: couldn't find an available UDC or it's busy [ 337.469124][ T7528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.512862][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.535738][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.571122][ T3623] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 337.604452][ T3623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.637427][ T3623] usb 5-1: Product: syz [ 337.644877][ T3623] usb 5-1: Manufacturer: syz [ 337.662208][ T3623] usb 5-1: SerialNumber: syz [ 337.694382][ T3623] usb 5-1: config 0 descriptor?? [ 337.725301][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.759141][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.778958][ T3623] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 337.788792][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.898620][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.956053][ T7519] overlayfs: failed to resolve './file0': -2 [ 338.057873][ T3621] usb 5-1: USB disconnect, device number 10 [ 338.087616][ T7532] loop2: detected capacity change from 0 to 1024 [ 338.130663][ T7532] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 338.173540][ T7532] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 338.215015][ T7532] EXT4-fs (loop2): journal inode is deleted [ 338.755440][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 338.853915][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 339.121337][ T1293] usbhid 1-1:0.18: can't add hid device: -71 [ 339.131631][ T1293] usbhid: probe of 1-1:0.18 failed with error -71 [ 339.186066][ T1293] usb 1-1: USB disconnect, device number 18 [ 339.244817][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 339.288727][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 339.771251][ T7553] loop3: detected capacity change from 0 to 512 [ 340.101429][ T7553] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value [ 340.178030][ T7556] loop0: detected capacity change from 0 to 512 [ 340.806316][ T7556] EXT4-fs (loop0): Unrecognized mount option "nobh"" or missing value [ 341.364154][ T7569] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 341.378920][ T25] audit: type=1326 audit(1724961454.392:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.076072][ T25] audit: type=1326 audit(1724961454.392:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.155767][ T25] audit: type=1326 audit(1724961454.952:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.265039][ T25] audit: type=1326 audit(1724961454.952:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.847172][ T25] audit: type=1326 audit(1724961454.952:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.945674][ T25] audit: type=1326 audit(1724961454.952:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 343.996693][ T25] audit: type=1326 audit(1724961454.952:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 344.057013][ T7592] loop4: detected capacity change from 0 to 128 [ 344.105461][ T25] audit: type=1326 audit(1724961454.952:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 344.129926][ T25] audit: type=1326 audit(1724961454.952:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 344.155292][ T25] audit: type=1326 audit(1724961454.952:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b9f0def9 code=0x7fc00000 [ 344.266316][ T7592] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ01777777777777777777777" or missing value [ 344.310293][ T3563] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 344.814581][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 345.010125][ T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 345.110247][ T3563] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 345.119311][ T3563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.127477][ T3563] usb 4-1: Product: syz [ 345.128733][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.138856][ T3563] usb 4-1: Manufacturer: syz [ 345.144441][ T3563] usb 4-1: SerialNumber: syz [ 345.168404][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.187003][ T7581] device bridge_slave_0 entered promiscuous mode [ 345.187669][ T3563] usb 4-1: config 0 descriptor?? [ 345.201244][ T7608] input: syz0 as /devices/virtual/input/input13 [ 345.219001][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.228548][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.235893][ T4808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 345.261671][ T7581] device bridge_slave_1 entered promiscuous mode [ 345.263962][ T3563] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 345.305735][ T4807] Bluetooth: hci3: command 0x0409 tx timeout [ 345.369510][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.390337][ T13] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 345.420413][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.440292][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.471192][ T13] usb 1-1: config 0 descriptor?? [ 345.488819][ T3623] usb 4-1: USB disconnect, device number 22 [ 345.579518][ T7581] team0: Port device team_slave_0 added [ 345.592504][ T7581] team0: Port device team_slave_1 added [ 345.610308][ T4808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.623826][ T4808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.634278][ T4808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.643651][ T4808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.687458][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.695483][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.742632][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.772326][ T7598] netlink: 'syz.0.689': attribute type 3 has an invalid length. [ 345.782884][ T4808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.799807][ T4808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.818722][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.829340][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.856483][ T4808] usb 5-1: Product: syz [ 345.866359][ T4808] usb 5-1: Manufacturer: syz [ 345.871521][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.917202][ T3623] usb 2-1: USB disconnect, device number 18 [ 345.947445][ T4808] cdc_wdm 5-1:1.0: skipping garbage [ 345.955521][ T4808] cdc_wdm 5-1:1.0: skipping garbage [ 345.972109][ T4808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 345.981160][ T4808] cdc_wdm 5-1:1.0: Unknown control protocol [ 346.015933][ T7581] device hsr_slave_0 entered promiscuous mode [ 346.023143][ T7581] device hsr_slave_1 entered promiscuous mode [ 346.034053][ T7581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.047700][ T7581] Cannot create hsr debugfs directory [ 346.071123][ T13] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 346.387997][ T7624] loop2: detected capacity change from 0 to 512 [ 346.426584][ T7581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.617609][ T7624] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 346.636712][ T7624] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.694: invalid indirect mapped block 1 (level 1) [ 346.667997][ T7624] EXT4-fs (loop2): 1 truncate cleaned up [ 346.673791][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.854573][ T13] gs_usb 1-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 346.863564][ T13] gs_usb: probe of 1-1:0.0 failed with error -71 [ 346.872924][ T13] usb 1-1: USB disconnect, device number 19 [ 346.897819][ T7624] netlink: 96 bytes leftover after parsing attributes in process `syz.2.694'. [ 347.014497][ T4807] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 347.091849][ T7581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.119339][ T7632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.130505][ T3780] usb 5-1: USB disconnect, device number 11 [ 347.138676][ T7632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 347.186280][ T7581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.249347][ T7581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.360124][ T4807] usb 4-1: Using ep0 maxpacket: 16 [ 347.380121][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 347.452594][ T7637] binder: 7633:7637 ioctl c0306201 20000680 returned -14 [ 347.481770][ T7581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.653101][ T7581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.033222][ T7638] loop0: detected capacity change from 0 to 1024 [ 348.070295][ T7581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.081600][ T7581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.140184][ T4807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.150245][ T7638] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 348.160139][ T4807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.172798][ T7638] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 348.205731][ T4807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.214956][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.223942][ T7638] EXT4-fs (loop0): journal inode is deleted [ 348.232906][ T4807] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 348.243628][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.243639][ T4807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.346867][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.366986][ T4807] usb 4-1: config 0 descriptor?? [ 348.368076][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.649756][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.659106][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.668643][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.675775][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.684162][ T3578] Bluetooth: hci3: command 0x040f tx timeout [ 351.705385][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.715277][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.724073][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.731235][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.798944][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.920133][ T4807] usbhid 4-1:0.0: can't add hid device: -71 [ 351.926182][ T4807] usbhid: probe of 4-1:0.0 failed with error -71 [ 351.939759][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.947435][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.966752][ T4807] usb 4-1: USB disconnect, device number 23 [ 352.029267][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.056213][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.745197][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.849106][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.858570][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.873330][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.889625][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.921082][ T7676] i2c i2c-0: Invalid block write size 47 [ 352.937785][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.949852][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.962964][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.972942][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.995308][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.017546][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 353.106448][ T7684] loop0: detected capacity change from 0 to 16 [ 353.156514][ T3976] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 353.175928][ T7684] erofs: (device loop0): mounted with root inode @ nid 36. [ 353.248278][ T7684] UHID_CREATE from different security context by process 291 (syz.0.708), this is not allowed. [ 353.286231][ T604] device hsr_slave_0 left promiscuous mode [ 353.308413][ T604] device hsr_slave_1 left promiscuous mode [ 353.328037][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.356908][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.370942][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.380284][ T3563] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 353.412830][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.434021][ T604] device bridge_slave_1 left promiscuous mode [ 353.453224][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.473069][ T604] device bridge_slave_0 left promiscuous mode [ 353.482732][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.512273][ T604] device veth1_macvtap left promiscuous mode [ 353.521497][ T604] device veth0_macvtap left promiscuous mode [ 353.527695][ T604] device veth1_vlan left promiscuous mode [ 353.534436][ T604] device veth0_vlan left promiscuous mode [ 353.722153][ T3976] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 353.750718][ T3976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.759333][ T3976] usb 4-1: Product: syz [ 353.768626][ T3976] usb 4-1: Manufacturer: syz [ 353.770425][ T3563] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.780063][ T3976] usb 4-1: SerialNumber: syz [ 353.801829][ T3976] usb 4-1: config 0 descriptor?? [ 353.812738][ T3578] Bluetooth: hci3: command 0x0419 tx timeout [ 353.822173][ T3563] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 353.841053][ T3976] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 353.841566][ T3563] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 353.867562][ T3563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.888409][ T3563] usb 5-1: config 0 descriptor?? [ 353.931285][ T3563] gspca_main: spca561-2.14.0 probing abcd:cdee [ 354.026186][ T7695] loop2: detected capacity change from 0 to 512 [ 354.065504][ T13] usb 4-1: USB disconnect, device number 24 [ 354.144596][ T7695] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.710: iget: special inode unallocated [ 354.176342][ T7695] EXT4-fs (loop2): get root inode failed [ 354.184296][ T7695] EXT4-fs (loop2): mount failed [ 354.534773][ T7695] loop2: detected capacity change from 0 to 128 [ 354.541404][ T3563] spca561: probe of 5-1:0.0 failed with error -22 [ 354.560942][ T3563] usb 5-1: MIDIStreaming interface descriptor not found [ 354.803235][ T7695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.816564][ T7695] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 354.843024][ T604] team0 (unregistering): Port device team_slave_1 removed [ 354.910198][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 354.917963][ T13] Bluetooth: hci7: command 0x0406 tx timeout [ 355.001980][ T604] team0 (unregistering): Port device team_slave_0 removed [ 355.049972][ T604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.118271][ T604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.416027][ T3563] usb 5-1: USB disconnect, device number 12 [ 355.588064][ T604] bond0 (unregistering): Released all slaves [ 357.377801][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.680631][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.838278][ T7739] loop0: detected capacity change from 0 to 512 [ 357.905368][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.468681][ T3563] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 358.488998][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.499216][ T7739] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 358.514038][ T7739] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.714: invalid indirect mapped block 1 (level 1) [ 358.516140][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.536342][ T7739] EXT4-fs (loop0): 1 truncate cleaned up [ 358.542079][ T7739] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.559546][ T3563] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 358.580302][ T7738] netlink: 96 bytes leftover after parsing attributes in process `syz.0.714'. [ 358.629860][ T7729] QAT: Device 0 not found [ 358.662528][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.899463][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.959369][ T7581] device veth0_vlan entered promiscuous mode [ 359.216901][ T7581] device veth1_vlan entered promiscuous mode [ 359.229223][ T7752] loop3: detected capacity change from 0 to 512 [ 359.342750][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.371708][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.400223][ T7752] EXT4-fs (loop3): invalid first ino: 0 [ 359.412655][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.492318][ T7755] loop0: detected capacity change from 0 to 512 [ 359.562992][ T7581] device veth0_macvtap entered promiscuous mode [ 359.614221][ T7581] device veth1_macvtap entered promiscuous mode [ 359.647114][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.773337][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.790874][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.809802][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.826081][ T7755] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.723: iget: special inode unallocated [ 359.869101][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.892905][ T7755] EXT4-fs (loop0): get root inode failed [ 359.918802][ T7755] EXT4-fs (loop0): mount failed [ 359.933555][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.010077][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.054506][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.083298][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.094307][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.116606][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.130044][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.148955][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.164151][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.184319][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.243756][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.248677][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 360.274719][ T7755] loop0: detected capacity change from 0 to 128 [ 360.303118][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.314093][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.325010][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.351848][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.371567][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.393987][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.418425][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.533128][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.666778][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.602810][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.611796][ T7755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.643045][ T7755] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038 (0x7fffffff) [ 361.661562][ T7581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.685654][ T7581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.758203][ T7581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.819218][ T7581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.851326][ T7776] loop3: detected capacity change from 0 to 512 [ 362.003556][ T7776] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.728: casefold flag without casefold feature [ 362.017788][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.054206][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.077722][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.087191][ T7776] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.728: corrupted inode contents [ 362.109910][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.112300][ T7776] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.728: mark_inode_dirty error [ 362.148310][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.158682][ T7776] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.728: bg 0: block 64: padding at end of block bitmap is not set [ 362.173175][ T592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.200664][ T7776] __quota_error: 57 callbacks suppressed [ 362.200682][ T7776] Quota error (device loop3): write_blk: dquota write failed [ 362.249482][ T7776] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 362.308679][ T7776] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.728: Failed to acquire dquot type 0 [ 362.334057][ T7776] EXT4-fs (loop3): 1 truncate cleaned up [ 362.345355][ T7776] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 362.391925][ T7776] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 363.022922][ T25] audit: type=1326 audit(1724961476.032:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723a80fef9 code=0x0 [ 363.091801][ T7776] syz.3.728 (7776) used greatest stack depth: 18776 bytes left [ 363.102408][ T7794] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 363.221662][ T7794] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 366.895386][ T7844] mmap: syz.1.744 (7844) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 366.934839][ T7844] program syz.1.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.382173][ T3660] wlan1: Trigger new scan to find an IBSS to join [ 370.601924][ T7860] ptrace attach of "./syz-executor exec"[6860] was attempted by "./syz-executor exec"[7860] [ 370.712496][ T7862] loop2: detected capacity change from 0 to 512 [ 370.809427][ T7862] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 372.016747][ T7870] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.750: Unimplemented hash flags: 0x0001 [ 372.029372][ T7870] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.750: Corrupt directory, running e2fsck is recommended [ 373.548615][ T3661] wlan1: Creating new IBSS network, BSSID f2:90:0d:b0:d2:0b [ 373.765965][ T7896] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.276003][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.284410][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.800676][ T7917] loop3: detected capacity change from 0 to 4096 [ 375.937952][ T7921] loop0: detected capacity change from 0 to 1024 [ 375.973450][ T7926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.114657][ T7923] ------------[ cut here ]------------ [ 376.120761][ T7923] WARNING: CPU: 0 PID: 7923 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0 [ 376.130333][ T7923] Modules linked in: [ 376.134239][ T7923] CPU: 0 PID: 7923 Comm: syz.2.763 Not tainted 5.15.165-syzkaller #0 [ 376.142389][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 376.152443][ T7923] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 376.158435][ T7923] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 86 e9 8d 80 e1 07 80 c1 03 38 c1 [ 376.178077][ T7923] RSP: 0018:ffffc90002e07140 EFLAGS: 00010046 [ 376.184222][ T7923] RAX: 0000000000000000 RBX: 1ffff920005c0e2c RCX: 0000000000040000 [ 376.192187][ T7923] RDX: ffffc900053f2000 RSI: 0000000000000200 RDI: ffffffff884b2405 [ 376.200146][ T7923] RBP: ffffc90002e071f0 R08: dffffc0000000000 R09: fffffbfff1bd2a56 [ 376.208098][ T7923] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 376.216050][ T7923] R13: 1ffff1100efa1398 R14: ffffc90002e07180 R15: 0000000000000200 [ 376.224006][ T7923] FS: 00007ff4c75e66c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 376.232915][ T7923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.239563][ T7923] CR2: 0000000020001140 CR3: 000000001dbe4000 CR4: 00000000003506f0 [ 376.247518][ T7923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.255747][ T7923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.263704][ T7923] Call Trace: [ 376.266964][ T7923] [ 376.269970][ T7923] ? __warn+0x15b/0x300 [ 376.274118][ T7923] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 376.279482][ T7923] ? report_bug+0x1b7/0x2e0 [ 376.283997][ T7923] ? handle_bug+0x3d/0x70 [ 376.288338][ T7923] ? exc_invalid_op+0x16/0x40 [ 376.293001][ T7923] ? asm_exc_invalid_op+0x16/0x20 [ 376.298035][ T7923] ? local_bh_enable+0x5/0x20 [ 376.302710][ T7923] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 376.308080][ T7923] ? local_bh_enable+0x5/0x20 [ 376.312749][ T7923] ? _local_bh_enable+0xa0/0xa0 [ 376.317618][ T7923] __dev_queue_xmit+0x1c56/0x3230 [ 376.322657][ T7923] ? dev_queue_xmit+0x20/0x20 [ 376.327314][ T7923] ? __copy_skb_header+0x47b/0x600 [ 376.332407][ T7923] ? __skb_clone+0x454/0x6c0 [ 376.336982][ T7923] ? skb_clone+0x1ee/0x350 [ 376.341380][ T7923] __netlink_deliver_tap+0x4d2/0x760 [ 376.346686][ T7923] netlink_deliver_tap+0x16c/0x180 [ 376.351776][ T7923] netlink_broadcast_filtered+0xc2d/0x11a0 [ 376.357575][ T7923] netlink_broadcast+0x35/0x50 [ 376.362320][ T7923] genlmsg_multicast_netns+0x8e/0xc0 [ 376.367589][ T7923] nl80211_frame_tx_status+0x659/0xa40 [ 376.373028][ T7923] ? cfg80211_control_port_tx_status+0x50/0x50 [ 376.379160][ T7923] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.384345][ T7923] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 376.390221][ T7923] ? _raw_spin_unlock+0x40/0x40 [ 376.395058][ T7923] cfg80211_mgmt_tx_status+0x3a/0x50 [ 376.400322][ T7923] ieee80211_report_used_skb+0x12f6/0x1810 [ 376.406116][ T7923] ? _raw_spin_lock_irqsave+0xac/0x120 [ 376.411569][ T7923] ? ieee80211_handle_filtered_frame+0x750/0x750 [ 376.417883][ T7923] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 376.423323][ T7923] ? _raw_spin_lock+0x40/0x40 [ 376.428088][ T7923] ? skb_queue_purge+0x2b9/0x2e0 [ 376.433017][ T7923] ieee80211_free_txskb+0x1e/0x30 [ 376.438025][ T7923] ieee80211_do_stop+0x10b8/0x1ce0 [ 376.443130][ T7923] ? ieee80211_stop_queues_by_reason+0x1ce/0x250 [ 376.449439][ T7923] ? ieee80211_sdata_stop+0x70/0x70 [ 376.454647][ T7923] ? ieee80211_get_vif_queues+0x228/0x390 [ 376.460367][ T7923] ieee80211_if_change_type+0x447/0x9f0 [ 376.466014][ T7923] ieee80211_change_iface+0x57/0x430 [ 376.471472][ T7923] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 376.477962][ T7923] cfg80211_change_iface+0x789/0xf20 [ 376.483235][ T7923] __cfg80211_wext_siwmode+0x1b7/0x280 [ 376.488680][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 376.494300][ T7923] ? apparmor_capable+0x12e/0x190 [ 376.499332][ T7923] ? full_name_hash+0x8f/0xe0 [ 376.504026][ T7923] ioctl_standard_call+0xdb/0x280 [ 376.509048][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 376.514666][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 376.520281][ T7923] wext_ioctl_dispatch+0x16f/0x460 [ 376.525372][ T7923] ? wext_ioctl_dispatch+0x460/0x460 [ 376.530657][ T7923] ? iw_handler_get_private+0x1e0/0x1e0 [ 376.536186][ T7923] wext_handle_ioctl+0x15b/0x260 [ 376.541467][ T7923] ? call_commit_handler+0xf0/0xf0 [ 376.546607][ T7923] sock_ioctl+0x13b/0x770 [ 376.550918][ T7923] ? sock_poll+0x410/0x410 [ 376.555333][ T7923] ? __fget_files+0x413/0x480 [ 376.559998][ T7923] ? bpf_lsm_file_ioctl+0x5/0x10 [ 376.564924][ T7923] ? security_file_ioctl+0x7d/0xa0 [ 376.570028][ T7923] ? sock_poll+0x410/0x410 [ 376.574423][ T7923] __se_sys_ioctl+0xf1/0x160 [ 376.578997][ T7923] do_syscall_64+0x3b/0xb0 [ 376.583393][ T7923] ? clear_bhb_loop+0x15/0x70 [ 376.588136][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.594012][ T7923] RIP: 0033:0x7ff4c9169ef9 [ 376.598424][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.618526][ T7923] RSP: 002b:00007ff4c75e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.626947][ T7923] RAX: ffffffffffffffda RBX: 00007ff4c9305f80 RCX: 00007ff4c9169ef9 [ 376.634915][ T7923] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 376.642880][ T7923] RBP: 00007ff4c91d793e R08: 0000000000000000 R09: 0000000000000000 [ 376.650843][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.658809][ T7923] R13: 0000000000000000 R14: 00007ff4c9305f80 R15: 00007ffeb3a1a488 [ 376.666767][ T7923] [ 376.669772][ T7923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.677022][ T7923] CPU: 0 PID: 7923 Comm: syz.2.763 Not tainted 5.15.165-syzkaller #0 [ 376.685058][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 376.695108][ T7923] Call Trace: [ 376.698365][ T7923] [ 376.701297][ T7923] dump_stack_lvl+0x1e3/0x2d0 [ 376.705956][ T7923] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 376.711564][ T7923] ? panic+0x860/0x860 [ 376.715676][ T7923] ? panic+0x860/0x860 [ 376.719719][ T7923] ? __local_bh_enable_ip+0xe0/0x1f0 [ 376.724978][ T7923] ? __local_bh_enable_ip+0xe0/0x1f0 [ 376.730240][ T7923] panic+0x318/0x860 [ 376.734199][ T7923] ? __warn+0x16a/0x300 [ 376.738326][ T7923] ? fb_is_primary_device+0xd0/0xd0 [ 376.743508][ T7923] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 376.748862][ T7923] __warn+0x2b2/0x300 [ 376.752822][ T7923] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 376.758168][ T7923] report_bug+0x1b7/0x2e0 [ 376.762475][ T7923] handle_bug+0x3d/0x70 [ 376.766609][ T7923] exc_invalid_op+0x16/0x40 [ 376.771087][ T7923] asm_exc_invalid_op+0x16/0x20 [ 376.775913][ T7923] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 376.781875][ T7923] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 86 e9 8d 80 e1 07 80 c1 03 38 c1 [ 376.801474][ T7923] RSP: 0018:ffffc90002e07140 EFLAGS: 00010046 [ 376.807528][ T7923] RAX: 0000000000000000 RBX: 1ffff920005c0e2c RCX: 0000000000040000 [ 376.815477][ T7923] RDX: ffffc900053f2000 RSI: 0000000000000200 RDI: ffffffff884b2405 [ 376.823424][ T7923] RBP: ffffc90002e071f0 R08: dffffc0000000000 R09: fffffbfff1bd2a56 [ 376.831387][ T7923] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 376.839332][ T7923] R13: 1ffff1100efa1398 R14: ffffc90002e07180 R15: 0000000000000200 [ 376.847285][ T7923] ? local_bh_enable+0x5/0x20 [ 376.851948][ T7923] ? local_bh_enable+0x5/0x20 [ 376.856679][ T7923] ? _local_bh_enable+0xa0/0xa0 [ 376.861528][ T7923] __dev_queue_xmit+0x1c56/0x3230 [ 376.866554][ T7923] ? dev_queue_xmit+0x20/0x20 [ 376.871208][ T7923] ? __copy_skb_header+0x47b/0x600 [ 376.876332][ T7923] ? __skb_clone+0x454/0x6c0 [ 376.880905][ T7923] ? skb_clone+0x1ee/0x350 [ 376.885300][ T7923] __netlink_deliver_tap+0x4d2/0x760 [ 376.890573][ T7923] netlink_deliver_tap+0x16c/0x180 [ 376.895664][ T7923] netlink_broadcast_filtered+0xc2d/0x11a0 [ 376.901453][ T7923] netlink_broadcast+0x35/0x50 [ 376.906715][ T7923] genlmsg_multicast_netns+0x8e/0xc0 [ 376.912069][ T7923] nl80211_frame_tx_status+0x659/0xa40 [ 376.917509][ T7923] ? cfg80211_control_port_tx_status+0x50/0x50 [ 376.923659][ T7923] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.928840][ T7923] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 376.934707][ T7923] ? _raw_spin_unlock+0x40/0x40 [ 376.939533][ T7923] cfg80211_mgmt_tx_status+0x3a/0x50 [ 376.944796][ T7923] ieee80211_report_used_skb+0x12f6/0x1810 [ 376.950584][ T7923] ? _raw_spin_lock_irqsave+0xac/0x120 [ 376.956043][ T7923] ? ieee80211_handle_filtered_frame+0x750/0x750 [ 376.962430][ T7923] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 376.967865][ T7923] ? _raw_spin_lock+0x40/0x40 [ 376.972516][ T7923] ? skb_queue_purge+0x2b9/0x2e0 [ 376.977433][ T7923] ieee80211_free_txskb+0x1e/0x30 [ 376.982434][ T7923] ieee80211_do_stop+0x10b8/0x1ce0 [ 376.987535][ T7923] ? ieee80211_stop_queues_by_reason+0x1ce/0x250 [ 376.993839][ T7923] ? ieee80211_sdata_stop+0x70/0x70 [ 376.999016][ T7923] ? ieee80211_get_vif_queues+0x228/0x390 [ 377.004740][ T7923] ieee80211_if_change_type+0x447/0x9f0 [ 377.010268][ T7923] ieee80211_change_iface+0x57/0x430 [ 377.015531][ T7923] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 377.022013][ T7923] cfg80211_change_iface+0x789/0xf20 [ 377.027301][ T7923] __cfg80211_wext_siwmode+0x1b7/0x280 [ 377.032742][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 377.038377][ T7923] ? apparmor_capable+0x12e/0x190 [ 377.043377][ T7923] ? full_name_hash+0x8f/0xe0 [ 377.048034][ T7923] ioctl_standard_call+0xdb/0x280 [ 377.053038][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 377.058646][ T7923] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 377.064250][ T7923] wext_ioctl_dispatch+0x16f/0x460 [ 377.069337][ T7923] ? wext_ioctl_dispatch+0x460/0x460 [ 377.074613][ T7923] ? iw_handler_get_private+0x1e0/0x1e0 [ 377.080138][ T7923] wext_handle_ioctl+0x15b/0x260 [ 377.085055][ T7923] ? call_commit_handler+0xf0/0xf0 [ 377.090147][ T7923] sock_ioctl+0x13b/0x770 [ 377.094716][ T7923] ? sock_poll+0x410/0x410 [ 377.099113][ T7923] ? __fget_files+0x413/0x480 [ 377.103769][ T7923] ? bpf_lsm_file_ioctl+0x5/0x10 [ 377.108680][ T7923] ? security_file_ioctl+0x7d/0xa0 [ 377.113768][ T7923] ? sock_poll+0x410/0x410 [ 377.118182][ T7923] __se_sys_ioctl+0xf1/0x160 [ 377.122750][ T7923] do_syscall_64+0x3b/0xb0 [ 377.127147][ T7923] ? clear_bhb_loop+0x15/0x70 [ 377.131800][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.137704][ T7923] RIP: 0033:0x7ff4c9169ef9 [ 377.142097][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.161676][ T7923] RSP: 002b:00007ff4c75e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.170066][ T7923] RAX: ffffffffffffffda RBX: 00007ff4c9305f80 RCX: 00007ff4c9169ef9 [ 377.178013][ T7923] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 377.185959][ T7923] RBP: 00007ff4c91d793e R08: 0000000000000000 R09: 0000000000000000 [ 377.193906][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.201854][ T7923] R13: 0000000000000000 R14: 00007ff4c9305f80 R15: 00007ffeb3a1a488 [ 377.209812][ T7923] [ 377.213037][ T7923] Kernel Offset: disabled [ 377.217694][ T7923] Rebooting in 86400 seconds..