last executing test programs: 32.749162124s ago: executing program 3 (id=2569): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@dmask={'dmask', 0x3d, 0x9}}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f00000037c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x2, [@array, @const, @ptr, @typedef, @int, @restrict, @func, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0xa}, {0x4}, {}, {0x1}, {}, {}, {}, {0x40000}]}]}}, 0x0, 0xca}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x40000000015, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) 31.372762132s ago: executing program 3 (id=2610): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) getpeername$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, &(0x7f0000000400)=0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @multicast1}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0}, 0x90) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 28.212760514s ago: executing program 3 (id=2616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0d000000020000000000001800098014"], 0x34}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) pipe(&(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80c00) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010000020000000000000a00000000000002000000090000000000", @ANYRES32=0x0, @ANYBLOB="0500140000000000"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) pipe(&(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200009000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002c40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) 13.49344677s ago: executing program 1 (id=2656): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006904320000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 13.37274376s ago: executing program 1 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x108d45d223d353fb}, 0x14}}, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x144, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40086602, &(0x7f0000001780)={0x13}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xbe, 0x8c, &(0x7f0000000500)="ba6630632d831d58b39a1047caf3ffec906362002d4c7fe29ba3e3578a5bd3862d2ff1c178cd9c30166e9f5e7fc055bbfa4a6abaea545f6b423950f8e7ba2adbe4d63530c8c9a41f6d36d2305ec8da990814883643ac472c694fdda5257d1fc3515e96a3307889bdf03f73163ba7b699faeff4ddaf051b7887b73e5c9c85b7cf1e0ba2b227bc49dddfcda3b0063f9871bfa8e58aff468c4a057b5cb37b2fddbb26734a35546c171898a3699283d97379acb63b9375d776e14981a6f7ee24", &(0x7f00000005c0)=""/140, 0x3, 0x0, 0x3d, 0xa, &(0x7f0000000740)="3c6138027350619c0e617205f33f5d5466870525b36d102a52f2b46afe209fc52af1ebbafb337d8e94fcd0b62586179887c493200f9dd62a31d5b7b007", &(0x7f0000000380)="3b2a9fc3aa00adcce901", 0x1, 0x0, 0x38}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x74, 0x30, 0x0, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x2000400) sendmsg$NFT_MSG_GETSET(r2, 0x0, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) pread64(r11, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r12, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r14 = syz_genetlink_get_family_id$mptcp(0x0, r11) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r11, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x90, r14, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 12.482548187s ago: executing program 1 (id=2660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa74}]}, 0x2c}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r4, 0x4b36) sysfs$2(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6900330080000000ffffffffffff0802110000005050505050500000000000000000000000006a100006"], 0x88}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000180)) r7 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_script(r9, 0x0, 0x11) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000001840)) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="032786dd0501100ee1"], 0xfdef) 12.031825106s ago: executing program 1 (id=2664): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "813edd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, "81fbac2923"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xe, 0x1, 0x0, 0x0, "675dfcc5e05f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) close_range(0xffffffffffffffff, r0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xa530}, {r3, 0xa1}], 0x2, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) socket$nl_generic(0x10, 0x3, 0x10) 8.366928851s ago: executing program 0 (id=2672): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/214, 0xd6}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/7, 0x7}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f00000007c0)=""/40, 0x28}], 0x8, &(0x7f00000008c0)=""/204, 0xcc}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)}, {0x0}, {0x0}], 0x3, &(0x7f0000000c80)=""/132, 0x84}, 0x1}, {{&(0x7f0000000d40)=@tipc=@name, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000dc0)=""/135, 0x87}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/66, 0x42}, {&(0x7f0000000fc0)=""/195, 0xc3}, {&(0x7f00000010c0)=""/228, 0xe4}, {&(0x7f00000011c0)=""/200, 0xc8}], 0x6, &(0x7f0000001340)}, 0x7fffffff}], 0x3, 0x2, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690432000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000ac0)=""/155, 0x9b}], 0x1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x3a, 0x1, 0x0, 0x0) getdents(r3, &(0x7f0000001440)=""/228, 0xe4) splice(r2, &(0x7f0000002580)=0x2, r3, &(0x7f00000025c0)=0x7, 0x6, 0x1) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x185a02, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300), 0xfe7f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) 8.087907335s ago: executing program 4 (id=2673): r0 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x51) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) fcntl$setlease(r5, 0x400, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0x9362, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0x9362, 0x0) 7.872896613s ago: executing program 2 (id=2674): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4ea, 0xffff0000, 0x6, 0x10, r0, 0x98d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x2, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000006bc7301000000", @ANYRESDEC=r1, @ANYBLOB="0000001207d12c009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x20000000}, 0x90) fadvise64(r5, 0xfffffffffffffffc, 0xfffffffffffeffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80080) unshare(0xe020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 6.894093948s ago: executing program 2 (id=2675): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x2, 0x0, 0x0, 0x34010}]}}]}]}, 0x3c}}, 0x0) 6.503581911s ago: executing program 4 (id=2676): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2882) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}}}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002040)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffa1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x49, 0x206, 0x1ff, 0x5, r8}, 0x10) 6.493596762s ago: executing program 0 (id=2677): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690432000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 6.479897733s ago: executing program 2 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r5, 0x0, 0x7}, 0x38) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000380)={[{@nodiscard}, {}, {}, {@alloc_mode_reuse}, {@nobarrier}, {@disable_roll_forward}, {@background_gc_on}, {@grpjquota={'grpjquota', 0x3d, '(^'}}, {@noflush_merge}, {@background_gc_on}, {@jqfmt_vfsv1}, {@adaptive_mode}, {@lfs_mode}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) write$FUSE_GETXATTR(r7, &(0x7f0000000040)={0x18}, 0x18) pwritev2(r7, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x2, 0x48001050, r1, 0x0) r8 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x388644a, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64], 0xe, 0x2b3, &(0x7f0000000200)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xb}, 0x90) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000000)={0x100000000, 0x1, 0x401, 0x100000001, 0x3, 0x2}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r10 = openat$incfs(r8, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)) 4.944672125s ago: executing program 4 (id=2679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/214, 0xd6}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/7, 0x7}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f00000007c0)=""/40, 0x28}], 0x8, &(0x7f00000008c0)=""/204, 0xcc}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)}, {0x0}, {0x0}], 0x3, &(0x7f0000000c80)=""/132, 0x84}, 0x1}, {{&(0x7f0000000d40)=@tipc=@name, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000dc0)=""/135, 0x87}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/66, 0x42}, {&(0x7f0000000fc0)=""/195, 0xc3}, {&(0x7f00000010c0)=""/228, 0xe4}, {&(0x7f00000011c0)=""/200, 0xc8}], 0x6, &(0x7f0000001340)}, 0x7fffffff}], 0x3, 0x2, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690432000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000ac0)=""/155, 0x9b}], 0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x185a02, 0x0) 4.634912712s ago: executing program 1 (id=2680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x0, 0xffff, 0x0, 0x4}, {0x0, 0x1, 0x200, 0x8, 0x0, 0x40000000}, 0x0, 0x0, 0x1c44}}, @TCA_TBF_RATE64={0xc}]}}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @mptcp=@generic={0x1, 0xe, "9142cc2b04d4917fe04b7025"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x7, "cf6af75d5c"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d98"], 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000480)=ANY=[], 0x31) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) 4.550082319s ago: executing program 0 (id=2681): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2840}, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xd9, &(0x7f00000008c0)='\xff\xdd>\xb3\xd7A\x9d\x1cF\xbe\xc0{\xd3?e\xe6\xc1\xe2\x06\xdd\x84\x06\x91\xa0\xb2\x14\x9ds\xc1\xaeIC\xb7\x89\xca\xaa\"\x85A\xc9\xde\xef\xb0\x00e\xb0\x8e\x94\xcb\xf0\xcfI\x01s\x15\x9f\x97\xc87\xf0\xac\x86\xaa\xac\xaf\x84\xdd\x87\xb3\xca\x01\x0e\xdb\xf7\xdd>\xd5\ft\x96\xc8\f\r;\xd4C)\v\x99\xf6\xd4\xca\xce%\x11^{X\xc1\xb7gX{\xc9\f&\xf3\x81\n[\x80[/\xf4\xedS\xb3F\x13DK>\x00\x00\x00\x9d\x7f\x84\xbb\xf7\xb6\xfb\xd6\xc0\x18I\x94\x11\xd9\x18\a\xed\xcb\x10\x00\x8d\xecn\xa7\x85i\xfb1\x0f\xc5S\xf0I\xd9\xa7/Df\xa7z.1\f6\x19Ce\xf4\x84\xf5z\xcd(\x7f\x9a3\f\xa3\x93N\xd5\xe9\xa7R\xa2\xf3g|\xac8x\x05\n\x9dT\x94_Z\xc8\xf7\x9b\x99;{ \xb18\x84.F\xaf;\xe1l\xe4\xe5\x84\x93#e\xba\f\x01\x85\xad\xc7\x1dC\xc4\xfd\xd3J\x91\xaf\xb4\x10\xcf\x89\x11\xd9E\xdb\xfe\xc9\xfd\xf2\x95*#`\xcc,~M\xd9\x8c\xd0\xa4(\xfc\xc2\xe7\x03\xdd\x82\x89@\x86\xed\x00B1|\xdb\x84\xf9\fy<\"\xed\xff\xdb/\x11\xcd[\x01\x98\xa1\xad\r\xd3\r&\xb6\xfa\xa9\x91\xa6T\xfe\x9b\x1d?\x81;si\x86\xb5\x80?\xee\x94\xfc\xd8{N\xb4\xff\xb0o\xfc\xc4SU4\f=\xca\xfd\\\xc6\xda\xcd\xd0r/u\xca\x83\x9a\x1f=\x9fiG\x101\xd2\xb2\xfe\xc7\xf8\x11\xcd\xb8\xb0\\\xd3VW\t\x14@z,\xafX\x7fo\xc4\xba\xe3\xc7F\xaeh\xb8A\xed\xed+LC\xc7\rWoj\x16\xd2K\xee\x1e._H\x10\xadZ\x9b\x12m\xa0x,\xe8\x06#\x9ev\x97\xa6b4\xadR\xc3\xc9\xd1T\x06\x12Ac \x86\x90\x93Gt\t\x90\x87&~\a{\x87\xa0\x8c\x94\xf5,\xf6z$\xa2\x98E:]\xfd=\x96\xff'}, 0xffffffffffffffd4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000018000900000000000000000200000000fe0000df000000000800130000000100"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x6, 0x5427}, 0x8) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) 4.083354589s ago: executing program 2 (id=2682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000480)='./bus\x00', 0x80000, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,blksize=0x0000000000001c00,dont_hash,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d746d706673002c7375626a5f747970653d615f69d8498af9682c646f6e745f6d6561737572652c66756e633d4d4f44554c455f434845434b2c6673757569643d65006530666661632d326531312d663938392d643530002d65333331613235642c00"], 0x0, 0x0, &(0x7f0000001080)="be236ca1d890f11e15a9faffffffffffffffe372bbb777701f9cb354189a66b6efff6fbc9119e200a09e878a0b4c73f95bb31836086ee2f968c2284ce900961749c19bd315a25a12b638950b1e639bcc083ebe3485ab9e5486f9454596bfb334da43051bf2ff269055e21e4422396434b6e21797004184c67ccc89bceb8ab0b96c8c912538720b4ff7f8001e7564618ee5ce745f5e217025813d1bd276937514457f9c0c2bb32d62dbf0bfe01b1224d70fe86406f0643838bbe808d263d91bd970ce09867992bd120006ac6767439dbd85f82b669980027fc0186e075316511a602b921b54ed") 4.027345274s ago: executing program 4 (id=2683): sigaltstack(&(0x7f0000000000)={&(0x7f0000000180)=""/230, 0x80000000, 0xe6}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000300)={0x0, [[0x1], [0x10000], [0x1]], '\x00', [{}, {}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0xfffffffe}], '\x00', 0x1000}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@secondary) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000090000000008000700ffffffff080010000000000008001e009f"], 0x40}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x5522, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x200001e0, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/70, 0x46}}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x3, 0x11}, @flat, @flat=@weak_handle}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20081e, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) creat(0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x100}, 0x8) ioctl$FITHAW(r0, 0xc0045878) 3.9522202s ago: executing program 1 (id=2684): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x400, &(0x7f0000000040)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000100)=0x21) write$binfmt_elf32(r2, &(0x7f0000002000)=ANY=[@ANYBLOB], 0x858) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x9}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000b80)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000002e80)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000002740)='B', 0x1}]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0xfffffffffffffe64, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x84, 0x30, 0x20, 0x0, 0x0, {}, [{0x70}]}, 0x84}}, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024801}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.676370714s ago: executing program 0 (id=2685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513a", 0x66, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x7, 0x2f, 0x2, 0x9}, {0x2, 0x8, 0x2}, {0x2, 0x8, 0x6, 0x3}, {0x6, 0x0, 0x1, 0x6}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x5}}, 0xffffffffffffffff, 0x2}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, 0x0) r9 = semget$private(0x0, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) clock_gettime(0x0, 0x0) semtimedop(r9, &(0x7f0000000280)=[{}, {0x3, 0x8a, 0x1000}, {0x3, 0x3}], 0x2aaaaaaaaaaaac9d, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.968726355s ago: executing program 4 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a"], 0xd) pipe(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') pread64(r4, &(0x7f0000000040)=""/137, 0x89, 0x7fffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}}}, 0x108) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c000000010101040000000000000000020000001800028014000180080001"], 0x2c}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "81d90d", 0x8, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, {[@dstopts={0x2}]}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 2.023964196s ago: executing program 2 (id=2687): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x2, 0x0, 0x0, 0x34010}]}}]}]}, 0x3c}}, 0x0) 1.98527975s ago: executing program 3 (id=2617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(r1) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x305001, 0x0) unshare(0x2040600) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffa, @loopback, 0xb}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="850000002e000000350000000000ba000700000008000000950000000000000064f1c09faf5d6806f8a1572b41a141d524581835d80532cb457f454698165b61a3cf5fc6dd8442230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b1895c322a1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6b8e6fa045e4eb32d7ad1087c697acd9a7ab696922c9e35f0aee6156c599c7b297de0019b27d67bfb3fe241454a04080bf7f8ce021879c820f9b80fe04be5b11cc7bf16c8a029df573db051357c71be1f5e8ce8db0f96ee1d8a312e9671e652bd6f32c7a458f129a8d8bc9a5d905441c0785d333135a04001bb4cd5b295b9add7a0247cada056be3a9e29f9d4b57ddd4130ccbbbcd6e000000000000004102d74c391acc0880312cc8a8c51c80ddd3698f620a69f46984c2a2e742fadecf0e18c91f1715450ff0e09b7e52fd66a7c81b7e62ca8c3572c3dc46dc7579c100010000000000001af7d2149c8ab5ef187087f74b65a6c7da152e53894437ffcb5cc3a2b13759c42b350b09a639a8f257d81204e7c8e4632df6e61b7f7230db061fabbdc611df1129695265a3426e02f9b24ebc243a8b7ab50e4279be8594af30231a567d1f0ac5297daa6e9e82eb90c602adffc6a3de64b1db82ac547a6a4b78a323aebbf4917450e54b989c6065aeafe708ed91d86ee0ea4ad86715a9bad226f1eda090456f50863060f074c0469fb82752e4aacbf69b830391cdb628b5f371ce3b1431b2726cbd8b933f3ce2d452d46d56a8cc49e160581b4a23e881264d498b4b6e7c2f9bc962da260e699aa50d2da32c555047cad5280e65d7924a5f428be87fb0942cd21d3d3e36a761560015d39cc311b3206cea2de9324e621a182719662c0a185ee86f4fb5c92a8e13e3da4543cf3a169ff667f2f91549d121191b1b04d199e71694c15944278cfc30de71d3b53681e92fdc064822af13663aa92234be390a65af233a8f"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5d}, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000002c0)=r9, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) 1.840878462s ago: executing program 0 (id=2688): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000001940)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@initdev, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f00000006c0)=0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000014c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x3}) vmsplice(r3, &(0x7f0000001a40)=[{&(0x7f0000001800)="95bee663888d660aee2076456f0ad9cf7e15b14eb84271b5f1e3fc492c3b42eb1d23308f2c5771d3b4127eb29c6985ef6a9fd548748477edc27cd463f3163872a835ea8735448788a0f147169cc9c530cc94fdb466cea4c73903ded31861bf46f6f0afcf4f1b30b7cff15bcf9f6f58d6bfdbb1192b332b8c979e6a34546bd921917f79a2811ccf5d1d12c1ad808a1093bd4a8e26e4020e4566df2b895a2a1a5f06aab837dc7f5bdad40918726a2e5799e81f46056278627bffe973d472e1", 0xbe}, {&(0x7f00000018c0)="03cdf403710d13ca97de435cd033413b36e5b84e3d59e39725aa45fd6c3d9a1adf302772dad4733569a3588f212f3f9ba5ce112b0b2663bcdd381e00b9b595d189aad5e41cc0a1f9fba4fc2b0a877e6492b1bca2debba610e627f385cd941324558ca8acebeda13955f1fe17054ca2005482814483d1e3b2980c32d96b191eab695102438c1415ce34345851eb3258926a0d55e49c4b1d28cec2cdaa985caee87a82bf8378c54d0dd77ef8c7122052f5b8bc3a7fdb8627b83c330fddf14bed2118e3ed314c1f3bcc91b063ab453dad7d62db6b24d38d3f82ab364c94b4401320b614578487dee5f4f00032", 0xeb}, {&(0x7f00000019c0)="50baf25d38b9852db6a1e4f67097541898bf63cfdc60b9cb3fc407c1a8e8ac6ccba2935818064be81f07294fd8aeedf149178a17a5b0b15c11c1793b231435a96dcc1d956ad16e562ca5dda4e41e541e2606fe26c518bfecbfac94d97d63b1c0f7c67d2f1a5a", 0x66}], 0x3, 0x2) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="1e005500", @ANYRES16=r6, @ANYRES16=r6], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="251632237281c7a83865e42df92cc7dc04559b938e506da2dc444205fad0f87479fdc491b555aac71679ce95e34aa6393d9e2b31d88368dbc499c83a01f52db6300920aa340afd3e762547e992f0ae3b3936efcf7862e1b58cf7605871a939e1b7a0f4a47ae4b8e6e368ea10b0ab5b2d31cac1d21559e40da81d6b7b26294e18e9d2c4199494085d416ac2ad53ea3dfca7fdb495e0", @ANYRES16=r6, @ANYRES8=r8, @ANYRESHEX=r7, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008c0004000000"], 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) userfaultfd(0x800) 1.086836367s ago: executing program 4 (id=2689): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42b, &(0x7f00000008c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80000000}}, {@resgid}, {@errors_continue}, {@quota}, {@stripe={'stripe', 0x3d, 0x5}}, {}, {@barrier_val={'barrier', 0x3d, 0xd}}]}, 0xe, 0x509, &(0x7f0000001040)="$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") ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_io_uring_setup(0x0, &(0x7f00000007c0)={0x0, 0x2, 0x100, 0x0, 0x203}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, r0, 0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_service_time_recursive\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x468, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$l2tp(r8, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES32=r6], 0x0) r10 = creat(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r10) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0xfffffffffffffff9) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r7) io_uring_enter(r5, 0xa3b, 0xffb, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5425, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x42440, 0x125) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 973.644277ms ago: executing program 2 (id=2690): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet(0x2b, 0x3, 0x200000) r2 = gettid() sigaltstack(&(0x7f0000000040)={&(0x7f0000002000)=""/4126, 0x0, 0x101e}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)) connect$inet(r1, &(0x7f0000000080)={0x2, 0xfffc, @dev}, 0x10) socket(0x0, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8f8d, 0x0, 0x0, 0x0, 0x99d2d6c50532a72e, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rpc_clnt_new\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x5) fcntl$setown(r7, 0x8, 0xffffffffffffffff) preadv(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8894, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 973.148396ms ago: executing program 3 (id=2691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) dup(r6) listen(r5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000700600fc020000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0e200cc90780000080a0000000000000000030a0000000000b3c29a010000fe09f9897511e9000205060000a1be0003037efe0bf989d463e2c4e2da7a02040000fe04f989220230af27051e000100040000011c3f92ad6308000000000000fc040000028f00"], 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) r9 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0x40640) readv(r9, &(0x7f0000001700)=[{&(0x7f0000000340)=""/223, 0xdf}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 940.620899ms ago: executing program 0 (id=2692): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) epoll_create(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000a80)=""/149, 0x95}, {&(0x7f0000000000)=""/224, 0xe0}], 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) memfd_create(0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r7) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@bridge_dellink={0x60, 0x11, 0x900, 0x59, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x12, 0x8}, [@IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "60b469c2fb2418169db29770750ca2af"}, @IFLA_PORT_PROFILE={0x6, 0x2, ')\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "261c63d3f8d1cf78c0bd56edfbb3ad3c"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}]}, 0x60}}, 0x41) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 3 (id=2693): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000080e46060", @ANYRES16=r2], 0x34}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@mcast1, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10200}) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @dev, {[@ssrr={0x89, 0x0, 0xdf, [@loopback]}, @rr={0x7, 0x23, 0x0, [@remote, @loopback, @remote, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast]}]}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="3f03000001000000000005"], 0x14}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000d0"], 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000505050505050"], 0x36) unshare(0x20000400) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) unshare(0x20000400) r6 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x218c}], 0x1, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000005050505050500000000000000000000064000000000602020202020201a1710700000000000000dd8e6930a969de8ce3f558ac53d9a46fc056a85ab1ece80f535fb634973ceb8474cda45a6dc924a2522bff7626afb91a082cd70bacc0b034770717099d5d458b29b8f6a93519773764484a4282d2a73e85b9096f636841b322a99524e50f7b7521ce21d34b1bc2e2f6af44d927197d33bbb3acbfd3c2d012799ae97cef7bf5f6347e6667643c4dbd33e94f2221dda0ed039160dee15a3d114775", @ANYRES32], 0x2a5) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x0) unshare(0x100) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000100)=0xf, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r10, 0x29, 0x3a, 0x0, &(0x7f0000000a40)) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="a8c2941dd329b9a83cbc7e2bcb7aabde6f0a8d3add234862244573906d304a55ee7760db7aefc6873b7f4f5e62b302f29eb6ac558902ed7559853160bc7a1f143cf18037eb9ce4f50a9d56fbaef04a1b3695ebb5c3b38259e6763ccab54ca595bf366084acafdf5d809483e4c8b7e65de06b96cfcc9e2ee2498ddc5cddaa74571716b8d98a26c8fd82800b77d44451910ad723892181d5a9732010cdb6f3a591d5ad84d1581b4cea84514af7c88b5b073bb9bc31adf26bcd4731a6fb2a308600c8771f8eb9592c", 0xc7}, {&(0x7f00000002c0)="ecd9d2bd40e4e11b0aa2e15cad10e0bf", 0x10}, {&(0x7f0000000540)="f4e95f7fc3935081ada336092daa4622cd5298b850304b821cbc196147f26258106e0a2a1d8e01e64cf9353d22f85385b97069936a64b6ee43d0bc874e462323c256c9b41b2062d028098260d5ef3cfa4e4a75331cd4776455147d34c3b8dbc99affdcfb19f504f4d87ca071af71a82adb75a9303a35265ca475c38bf825d2078d55509d3d8b5466b54b117b8cd33efdc929e4410c4d37d2b0777eee2ea21c7369c014c5aaeacd79e46360f7ae7e7edb1bb1592d609bbc1fc9", 0xb9}, {&(0x7f0000000480)="5402b49c7464f87298f216df793ebae450288b8fa8e0d01c2a958b1bc46bf8b6fddcf445e5fab7a9291cd58ca4c30005b6e9ea238d3f71b592a6d35ec7d1d94943965a175965002556c49745cbffb8a892b48eac1dbf7207137b236230b5d111db56b4658201", 0x66}], 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) kernel console output (not intermixed with test programs): ANGE): veth1_to_team: link becomes ready [ 1023.491338][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1023.513999][T13871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.541404][T13796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.580363][T13796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.602654][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1023.611226][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1023.641998][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1023.665025][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1023.683062][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1023.691611][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1023.734982][T13871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.748778][T13999] loop4: detected capacity change from 0 to 64 [ 1023.754955][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 1023.994346][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1024.001826][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1024.084249][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.110762][T13871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1024.134419][T14005] Trying to free block not in datazone [ 1024.141550][T13871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1024.159627][T13871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1024.181142][T13871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1024.222645][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1024.240349][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1024.278030][T13796] device veth0_vlan entered promiscuous mode [ 1024.304322][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1024.323087][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1024.366237][T13796] device veth1_vlan entered promiscuous mode [ 1024.389243][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1024.403448][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1024.433722][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1024.556899][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1024.586760][T14012] binder: BINDER_SET_CONTEXT_MGR already set [ 1024.597796][T14012] binder: 14008:14012 ioctl 4018620d 20000040 returned -16 [ 1024.607819][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1024.618713][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1024.644735][T13796] device veth0_macvtap entered promiscuous mode [ 1025.493769][T13796] device veth1_macvtap entered promiscuous mode [ 1025.557783][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1025.583180][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1025.619237][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.664320][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.698699][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.712216][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.722770][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.734387][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.746510][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.759831][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.774277][T13796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.791247][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1025.804423][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1025.829694][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.860913][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.878529][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.912952][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.922978][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.933836][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.943824][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.958549][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.972215][T12721] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1025.986573][T13796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.002881][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1026.013097][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1026.026370][T13871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.045157][T13796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.062560][T13796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.071500][T13796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.088760][T13796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.113066][T13871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.120406][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1026.129284][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.166920][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1026.183459][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.192947][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.200014][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.210628][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.220104][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.228869][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.236017][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.245044][T12721] usb 5-1: Using ep0 maxpacket: 32 [ 1026.250396][ T3610] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1026.261946][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1026.270307][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.287327][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.329816][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.340244][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.349369][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.358994][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.368376][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.377547][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.396277][T13871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.399419][T12721] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1026.408164][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.430463][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.439401][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.448282][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.478875][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.506355][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.532668][ T3610] usb 2-1: Using ep0 maxpacket: 8 [ 1026.559920][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1026.579406][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.592820][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.623383][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1026.630726][T12721] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1026.662492][T12721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.670525][T12721] usb 5-1: Product: syz [ 1026.682142][T12721] usb 5-1: Manufacturer: syz [ 1026.686802][T12721] usb 5-1: SerialNumber: syz [ 1026.692754][ T3610] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.707820][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1026.712154][ T3610] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1026.722451][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1026.741367][T12721] usb 5-1: config 0 descriptor?? [ 1026.746438][T13871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.762131][ T3610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.783026][ T3610] usb 2-1: config 0 descriptor?? [ 1026.787035][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.803659][T12721] cdc_ether 5-1:0.0: More than one union descriptor, skipping ... [ 1026.818334][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.832874][T12721] usb 5-1: bad CDC descriptors [ 1026.838098][T12721] usb 5-1: unsupported MDLM descriptors [ 1026.908835][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1026.921285][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.938939][T13871] device veth0_vlan entered promiscuous mode [ 1026.961366][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.026216][T12855] usb 5-1: USB disconnect, device number 24 [ 1027.056985][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.066181][ T3610] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1027.112679][T13871] device veth1_vlan entered promiscuous mode [ 1027.198420][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.224937][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.247599][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.266673][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.282720][T13871] device veth0_macvtap entered promiscuous mode [ 1027.316981][T13871] device veth1_macvtap entered promiscuous mode [ 1027.349281][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.404187][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.445105][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.488951][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.533900][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.586666][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.644995][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.721148][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.763795][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.800268][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.818113][T13537] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1027.838321][T13871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.875372][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.900282][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.936008][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.982023][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.024235][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.076953][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.132267][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.291309][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.334849][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.374003][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.391533][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.409303][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.212494][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.223535][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.235912][T13871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.251104][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1029.262229][ T7327] usb 2-1: USB disconnect, device number 30 [ 1029.294006][ T7327] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 1029.307472][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1029.360072][T13871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.377559][T13871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.402142][T13871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.411142][T13871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.831135][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1030.099497][T14055] input: syz0 as /devices/virtual/input/input87 [ 1030.221928][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1030.232665][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1030.240127][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1030.270118][ T7] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1030.277921][ T7333] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1030.358903][T14058] syz.1.2404[14058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.359044][T14058] syz.1.2404[14058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.572335][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 1030.590096][ T7333] usb 5-1: Using ep0 maxpacket: 16 [ 1030.621382][ T5601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.631142][ T5601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.676178][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.758998][T14063] bridge0: port 3(erspan0) entered blocking state [ 1030.766042][T14063] bridge0: port 3(erspan0) entered disabled state [ 1030.779403][T14063] device erspan0 entered promiscuous mode [ 1030.789546][T14063] bridge0: port 3(erspan0) entered blocking state [ 1030.796056][T14063] bridge0: port 3(erspan0) entered forwarding state [ 1031.011911][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.023265][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1031.029715][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1031.190805][T14068] loop2: detected capacity change from 0 to 256 [ 1031.233172][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1031.453317][T14068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 1031.459287][ T7] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1031.482348][ T7333] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1031.495280][T14071] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.501339][T14071] binder: 14065:14071 ioctl 4018620d 20000040 returned -16 [ 1031.508920][ T7333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.653670][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.694773][ T7] usb 4-1: config 0 descriptor?? [ 1031.862688][T12384] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1032.499944][T12384] Bluetooth: hci3: Injecting HCI hardware error event [ 1032.510320][ T146] Bluetooth: hci3: hardware error 0x00 [ 1032.593673][T14077] fuse: Bad value for 'fd' [ 1032.628629][T14081] loop3: detected capacity change from 0 to 512 [ 1032.635537][ T7333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.663334][ T7333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.682357][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 1032.693852][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 1032.720020][T14083] program syz.4.2409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1032.758325][ T7333] usb 5-1: Product: Т [ 1032.775830][ T7] usb 4-1: USB disconnect, device number 34 [ 1032.801866][ T144] tipc: Disabling bearer [ 1032.807483][ T7333] usb 5-1: can't set config #1, error -71 [ 1032.898894][ T144] tipc: Left network mode [ 1032.943660][ T7333] usb 5-1: USB disconnect, device number 25 [ 1033.376532][T14089] loop3: detected capacity change from 0 to 512 [ 1035.400794][T14089] EXT4-fs (loop3): Ignoring removed nobh option [ 1035.434004][T14089] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1035.441861][T14089] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1035.449262][T14089] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext3 [ 1035.460528][T14096] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2413'. [ 1035.510281][T14096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2413'. [ 1035.568994][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1035.585820][T14100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.792150][T14096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.796221][T14101] loop0: detected capacity change from 0 to 2048 [ 1035.836415][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1035.893280][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1035.915516][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1035.938600][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1035.989619][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.020465][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.039629][T14101] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 1036.055047][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.071105][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.086629][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 1036.086641][ T26] audit: type=1800 audit(2000000228.675:641): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2411" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1036.119969][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.128009][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.137854][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.150569][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.156166][T14097] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1036.158263][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.181727][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.189354][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.202337][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.212202][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.219822][T14112] netlink: 'syz.3.2424': attribute type 10 has an invalid length. [ 1036.229128][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.242655][T14112] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2424'. [ 1036.243808][T14097] EXT4-fs (loop0): Remounting filesystem read-only [ 1036.259541][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.269362][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.279055][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.286943][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.295711][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.353624][T14097] EXT4-fs (loop0): Unrecognized mount option "ÿÿ0xffffffffffffffff00000000000000000000000ñ¼Þ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 1036.353624][T14097] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 1036.354385][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1036.475322][T14116] loop4: detected capacity change from 0 to 2048 [ 1037.271815][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.300100][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.315121][T14116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1037.888235][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.897486][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.910383][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.921672][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.929409][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.937515][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.946277][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.954086][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.961494][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.990705][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1037.998660][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.007043][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.015644][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.023767][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.031700][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.039946][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.047903][T12855] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1038.066069][T12855] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1038.133369][ C0] eth0: bad gso: type: 1, size: 1408 [ 1038.195302][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1038.524035][ T13] libceph: connect (1)[c::]:6789 error -101 [ 1038.583026][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 1039.033547][ T1075] libceph: connect (1)[c::]:6789 error -101 [ 1039.040224][ T1075] libceph: mon0 (1)[c::]:6789 connect error [ 1039.099048][T14133] ceph: No mds server is up or the cluster is laggy [ 1039.426565][ T144] device hsr_slave_0 left promiscuous mode [ 1039.453150][ T144] device hsr_slave_1 left promiscuous mode [ 1039.535587][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.553812][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.577137][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.666493][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.689543][ T144] device bridge_slave_1 left promiscuous mode [ 1039.707167][T14164] loop3: detected capacity change from 0 to 256 [ 1039.717733][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.908009][ T144] device bridge_slave_0 left promiscuous mode [ 1039.916882][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.933816][T14164] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1039.979246][T14170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2427'. [ 1039.992019][ T26] audit: type=1326 audit(2000000232.575:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.051092][ T144] device veth1_macvtap left promiscuous mode [ 1040.113934][ T144] device veth0_macvtap left promiscuous mode [ 1040.142329][ T26] audit: type=1326 audit(2000000232.575:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.175197][ T144] device veth1_vlan left promiscuous mode [ 1040.322646][ T26] audit: type=1326 audit(2000000232.605:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.490077][T14175] loop7: detected capacity change from 0 to 16384 [ 1040.512495][ T26] audit: type=1326 audit(2000000232.605:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.683351][ T26] audit: type=1326 audit(2000000232.605:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.817509][ T26] audit: type=1326 audit(2000000232.605:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.910665][ T26] audit: type=1326 audit(2000000232.605:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1040.967058][ T26] audit: type=1326 audit(2000000232.605:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.038003][ T26] audit: type=1326 audit(2000000232.605:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.140935][ T26] audit: type=1326 audit(2000000232.605:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.238346][ T26] audit: type=1326 audit(2000000232.605:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.299876][ T26] audit: type=1326 audit(2000000232.605:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.357947][ T26] audit: type=1326 audit(2000000232.605:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.423880][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1041.450472][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1041.471744][ T26] audit: type=1326 audit(2000000232.605:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.494706][ T26] audit: type=1326 audit(2000000232.605:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.528369][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.536593][ T26] audit: type=1326 audit(2000000232.605:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.560938][ T144] device bond_slave_1 left promiscuous mode [ 1041.565769][ T26] audit: type=1326 audit(2000000232.605:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.589383][ T26] audit: type=1326 audit(2000000232.605:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.609707][T14187] loop0: detected capacity change from 0 to 128 [ 1041.612737][ T26] audit: type=1326 audit(2000000232.605:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1041.622412][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.655888][ T144] device bond_slave_0 left promiscuous mode [ 1041.776941][ T144] bond0 (unregistering): Released all slaves [ 1041.832129][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 1041.910111][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 1041.924050][T14173] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 1041.933051][T14184] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1042.129468][T14194] loop1: detected capacity change from 0 to 512 [ 1042.154154][T14198] loop0: detected capacity change from 0 to 128 [ 1042.425245][ T1075] libceph: connect (1)[c::]:6789 error -101 [ 1042.439097][ T1075] libceph: mon0 (1)[c::]:6789 connect error [ 1042.907732][ T8796] libceph: connect (1)[c::]:6789 error -101 [ 1042.915294][T14209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1042.918659][T14194] EXT4-fs (loop1): Ignoring removed nobh option [ 1042.922559][T14209] IPv6: NLM_F_CREATE should be set when creating new route [ 1042.938992][T14194] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1042.953541][ T8796] libceph: mon0 (1)[c::]:6789 connect error [ 1043.461651][T14194] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 1043.487764][T14206] ceph: No mds server is up or the cluster is laggy [ 1043.508159][ T13] libceph: connect (1)[c::]:6789 error -101 [ 1044.253060][T14194] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 1044.274416][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 1044.396868][T14228] loop3: detected capacity change from 0 to 256 [ 1044.609687][T14193] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2435: bg 0: block 224: padding at end of block bitmap is not set [ 1044.643465][T14193] EXT4-fs (loop1): Remounting filesystem read-only [ 1044.696830][T14228] FAT-fs (loop3): Directory bread(block 64) failed [ 1044.743844][T14228] FAT-fs (loop3): Directory bread(block 65) failed [ 1044.814717][T14228] FAT-fs (loop3): Directory bread(block 66) failed [ 1044.840447][T14228] FAT-fs (loop3): Directory bread(block 67) failed [ 1044.872956][T14228] FAT-fs (loop3): Directory bread(block 68) failed [ 1044.925091][T14228] FAT-fs (loop3): Directory bread(block 69) failed [ 1045.115011][T14228] FAT-fs (loop3): Directory bread(block 70) failed [ 1045.792698][T14228] FAT-fs (loop3): Directory bread(block 71) failed [ 1045.805065][T14228] FAT-fs (loop3): Directory bread(block 72) failed [ 1045.827318][T14228] FAT-fs (loop3): Directory bread(block 73) failed [ 1045.938338][ T3788] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 1046.244034][T14245] loop0: detected capacity change from 0 to 2048 [ 1046.458160][T14245] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1046.638711][T14245] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 1046.801748][T14246] attempt to access beyond end of device [ 1046.801748][T14246] loop3: rw=524288, want=1164, limit=256 [ 1046.973638][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2445'. [ 1046.979640][T14246] attempt to access beyond end of device [ 1046.979640][T14246] loop3: rw=0, want=1164, limit=256 [ 1047.077523][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 1047.077540][ T26] audit: type=1800 audit(2000000239.665:687): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2442" name="memory.events" dev="loop3" ino=1048717 res=0 errno=0 [ 1047.195402][ T26] audit: type=1800 audit(2000000239.785:688): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2442" name="file0" dev="loop3" ino=1048719 res=0 errno=0 [ 1047.217138][T14263] tipc: Failed to obtain node identity [ 1047.222790][T14263] tipc: Enabling of bearer rejected, failed to enable media [ 1047.285423][T14263] bond0: (slave bond_slave_0): Releasing backup interface [ 1047.331023][T14265] loop0: detected capacity change from 0 to 256 [ 1047.485344][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 1048.124759][T14286] loop0: detected capacity change from 0 to 128 [ 1048.208342][T14286] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1048.357261][T14288] trusted_key: encrypted_key: keyword 'wpdate' not recognized [ 1048.553030][ T26] audit: type=1326 audit(2000000241.145:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14297 comm="syz.1.2457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1048.661866][T14301] loop1: detected capacity change from 0 to 512 [ 1048.711858][T14301] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1048.719442][T14301] UDF-fs: Scanning with blocksize 512 failed [ 1048.735746][T14301] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1048.743335][T14301] UDF-fs: Scanning with blocksize 1024 failed [ 1048.752928][T14301] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1048.760372][T14301] UDF-fs: Scanning with blocksize 2048 failed [ 1048.768620][T14301] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1048.781850][T14301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.233803][T14312] netlink: 'syz.2.2461': attribute type 7 has an invalid length. [ 1049.639194][T14333] fuse: Bad value for 'fd' [ 1050.041965][T14338] loop0: detected capacity change from 0 to 40427 [ 1050.088899][T14338] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1050.097694][T14338] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1050.194602][T14339] loop4: detected capacity change from 0 to 512 [ 1050.225844][T14339] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1050.253992][T14338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1050.265585][T14339] UDF-fs: Scanning with blocksize 512 failed [ 1050.295589][T14339] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1050.322412][T14339] UDF-fs: Scanning with blocksize 1024 failed [ 1050.332318][T14338] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1050.339411][T14338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1050.438967][T14359] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1050.571433][T14339] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1050.643871][T14339] UDF-fs: Scanning with blocksize 2048 failed [ 1050.682457][T14339] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1050.754824][T14339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1051.744178][ T26] audit: type=1400 audit(2000000244.325:690): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14378 comm="syz.3.2474" [ 1051.886278][T14380] loop3: detected capacity change from 0 to 512 [ 1051.953422][T14383] ERROR: device name not specified. [ 1051.976707][ T26] audit: type=1326 audit(2000000244.565:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.2.2477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619f01fe79 code=0x0 [ 1051.978076][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'. [ 1052.081448][T14380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1052.103141][T14383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2475'. [ 1052.113087][ T26] audit: type=1326 audit(2000000244.615:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.4.2476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1b6dfe79 code=0x0 [ 1052.118445][T14380] ext4 filesystem being mounted at /16/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 1052.224529][T14383] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 32779 - 0 [ 1052.281190][T14383] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 32779 - 0 [ 1052.307931][T14383] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 32779 - 0 [ 1052.317958][T14383] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 32779 - 0 [ 1052.339584][T14379] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2474: Directory hole found for htree leaf block 0 [ 1052.384112][ T26] audit: type=1326 audit(2000000244.975:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.1.2478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1052.966079][T14404] fuse: Bad value for 'fd' [ 1054.094092][ T26] audit: type=1326 audit(2000000246.685:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.3.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae839a0e79 code=0x0 [ 1054.264820][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.521157][T14422] loop3: detected capacity change from 0 to 2048 [ 1054.543151][ T8796] libceph: connect (1)[c::]:6789 error -101 [ 1054.553448][ T8796] libceph: mon0 (1)[c::]:6789 connect error [ 1054.570950][T14422] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1054.663141][T14422] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1054.812655][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1054.832638][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1054.896443][T14422] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,mblk_io_submit,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 1054.926497][T14425] ceph: No mds server is up or the cluster is laggy [ 1054.994229][T14432] QAT: Invalid ioctl 21531 [ 1055.983164][ T26] audit: type=1326 audit(2000000248.575:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14442 comm="syz.1.2489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1056.047196][T13796] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /17/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1056.149107][T13796] EXT4-fs (loop3): Remounting filesystem read-only [ 1056.169427][T14448] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.2492'. [ 1056.183533][T13796] EXT4-fs error (device loop3): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 1056.210103][T13796] EXT4-fs error (device loop3): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 1056.888080][ T9730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.257460][ T9730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.391710][T14458] tipc: Started in network mode [ 1057.412340][T14458] tipc: Node identity , cluster identity 4711 [ 1057.432500][T14458] tipc: Failed to set node id, please configure manually [ 1057.439715][T14458] tipc: Enabling of bearer rejected, failed to enable media [ 1057.469909][T14446] netlink: 'syz.4.2491': attribute type 13 has an invalid length. [ 1057.519251][ T9730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.545475][T14459] loop4: detected capacity change from 0 to 1024 [ 1058.249527][ T9730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.372669][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1058.381854][T14459] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000005,inode_readahead_blks=0x0000000000000010,debug_want_extra_isize=0x0000000000000006,lazytime,jqfmt=vfsv1,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 1058.407652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1058.662945][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 1058.782241][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.790717][ T13] usb 3-1: config 0 has no interface number 0 [ 1058.797443][ T13] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.812360][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1058.821527][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.844601][ T13] usb 3-1: config 0 descriptor?? [ 1058.905269][ T13] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1059.269042][T14469] chnl_net:caif_netlink_parms(): no params data found [ 1059.374343][T12721] usb 3-1: USB disconnect, device number 31 [ 1059.404024][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 1059.547170][T14469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.556623][T14469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.565267][T14469] device bridge_slave_0 entered promiscuous mode [ 1059.647775][ C0] eth0: bad gso: type: 1, size: 1408 [ 1059.707522][T14510] loop4: detected capacity change from 0 to 512 [ 1059.712340][ T13] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1059.763548][T14469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.776118][T14469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.801065][T14469] device bridge_slave_1 entered promiscuous mode [ 1059.802795][T14510] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1059.864444][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 1059.884886][T14510] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1059.893117][T14514] batman_adv: Cannot find parent device [ 1059.906008][T14510] EXT4-fs (loop4): 1 truncate cleaned up [ 1059.911823][T14510] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 1059.913468][T14514] device erspan1 entered promiscuous mode [ 1060.794088][ T13] usb 2-1: config 9 has an invalid descriptor of length 213, skipping remainder of the config [ 1060.881451][ T13] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1060.898173][ T13] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1060.922175][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.965541][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 1060.978576][T14469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.068607][T14533] loop2: detected capacity change from 0 to 16 [ 1061.086875][T14469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.163506][T14533] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1061.364395][T14533] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 1061.405303][T14542] 9pnet_rdma: rdma_create_trans (14542): problem binding to privport: 13 [ 1061.507159][T14469] team0: Port device team_slave_0 added [ 1061.681178][ T13] usb 2-1: USB disconnect, device number 31 [ 1061.691804][T14469] team0: Port device team_slave_1 added [ 1062.300285][T14469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.328043][T14469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.404789][T14469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.487662][T14469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.526801][T14469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.552797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.572154][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1062.595695][T14469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.967935][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.002585][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1063.012048][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.026408][ T7] usb 5-1: config 0 descriptor?? [ 1063.035228][ T1075] Bluetooth: hci1: command 0x041b tx timeout [ 1063.242202][ T9730] device hsr_slave_0 left promiscuous mode [ 1063.275547][ T9730] device hsr_slave_1 left promiscuous mode [ 1063.301784][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.372242][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.436130][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.449992][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.473216][ T9730] device bridge_slave_1 left promiscuous mode [ 1063.499905][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.518500][ T7] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1063.534994][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input88 [ 1063.554101][ T9730] device bridge_slave_0 left promiscuous mode [ 1063.560346][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.613191][ T9730] device veth1_macvtap left promiscuous mode [ 1063.629064][ T9730] device veth0_macvtap left promiscuous mode [ 1063.641668][ T9730] device veth1_vlan left promiscuous mode [ 1063.652312][ T9730] device veth0_vlan left promiscuous mode [ 1063.775749][ T7] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1064.055345][T14566] loop2: detected capacity change from 0 to 40427 [ 1064.177471][T14566] F2FS-fs (loop2): invalid crc value [ 1064.219418][T14566] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1064.246458][ T7] usb 5-1: USB disconnect, device number 26 [ 1064.393733][T14566] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1064.733246][ T9730] team0 (unregistering): Port device team_slave_1 removed [ 1064.798090][ T9730] team0 (unregistering): Port device team_slave_0 removed [ 1064.884330][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.948947][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.062348][ T1075] Bluetooth: hci1: command 0x040f tx timeout [ 1065.151384][ T9730] bond0 (unregistering): Released all slaves [ 1065.312614][T14469] device hsr_slave_0 entered promiscuous mode [ 1065.322832][T14469] device hsr_slave_1 entered promiscuous mode [ 1065.350805][T14469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.370263][T14469] Cannot create hsr debugfs directory [ 1065.377966][T14576] batadv0: mtu less than device minimum [ 1065.391496][T14584] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2518'. [ 1065.421337][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2518'. [ 1065.470452][T13871] attempt to access beyond end of device [ 1065.470452][T13871] loop2: rw=2049, want=45104, limit=40427 [ 1065.736780][T14590] crypto_alloc_aead failed rc=-2 [ 1065.757498][T14596] loop4: detected capacity change from 0 to 1024 [ 1066.386496][T14622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.459159][T14622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.928288][T14469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1066.951417][T14469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1066.974384][T14469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1067.001925][T14469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1067.142256][ T8796] Bluetooth: hci1: command 0x0419 tx timeout [ 1067.222356][ C0] eth0: bad gso: type: 1, size: 1408 [ 1067.348168][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2528'. [ 1067.412930][T14644] loop4: detected capacity change from 0 to 164 [ 1067.415382][T14640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2528'. [ 1067.446156][T14469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.508389][T14644] xt_bpf: check failed: parse error [ 1067.514206][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.522062][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.566935][T14469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.615390][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.653158][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.680332][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.687494][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.830189][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1067.879161][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.909757][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.940052][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.947209][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.008922][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1068.043362][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1068.082532][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1068.100855][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1068.130076][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1068.338050][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1068.837996][T14469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1068.879098][T14469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.022319][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1069.048438][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1069.092913][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1069.123610][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1069.153736][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1069.174493][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.609317][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.636527][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.821577][T14469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.431761][T14713] loop1: detected capacity change from 0 to 2048 [ 1071.508279][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1071.540722][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1071.553319][T14730] loop4: detected capacity change from 0 to 1024 [ 1071.598846][T14713] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1071.613740][T14730] hfsplus: unable to parse mount options [ 1071.675395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1071.720758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1071.769220][T14469] device veth0_vlan entered promiscuous mode [ 1071.802251][ T1075] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1071.812747][T14730] loop4: detected capacity change from 0 to 2048 [ 1071.813528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1071.836973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1071.859169][T14469] device veth1_vlan entered promiscuous mode [ 1071.906185][T14730] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1071.956659][T14730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1071.988862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1072.027804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1072.967031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1072.982460][ T1075] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1073.025761][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.073176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1073.289959][T14759] tipc: Trying to set illegal importance in message [ 1073.328008][ T1075] usb 3-1: config 0 descriptor?? [ 1073.384074][T14469] device veth0_macvtap entered promiscuous mode [ 1073.451075][T14767] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1073.802892][T14469] device veth1_macvtap entered promiscuous mode [ 1074.131228][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.153351][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.182193][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.196450][ T26] audit: type=1326 audit(2000000266.785:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f01fe79 code=0x7ffc0000 [ 1074.218887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.252176][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.268648][ T26] audit: type=1326 audit(2000000266.825:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f01fe79 code=0x7ffc0000 [ 1074.311991][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.335086][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.465219][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.512912][T12855] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1074.538568][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.558648][T12855] Bluetooth: hci5: Injecting HCI hardware error event [ 1074.571423][T14469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.588793][T13537] Bluetooth: hci5: hardware error 0x00 [ 1074.842287][ T1075] usb 3-1: Cannot read MAC address [ 1074.847726][ T1075] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 1074.910620][ T1075] usb 3-1: USB disconnect, device number 32 [ 1075.002224][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1075.036993][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1075.064243][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.108874][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.108899][T12721] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1075.139531][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.162607][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.182201][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.222119][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.244455][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.258038][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.270322][T14469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.281715][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1075.311585][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1075.355312][T14469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.364676][T14469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.382149][T14469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.397226][T14469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.512843][T14790] binder: BINDER_SET_CONTEXT_MGR already set [ 1075.544884][T14790] binder: 14786:14790 ioctl 4018620d 20000040 returned -16 [ 1075.639484][T14799] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1075.653878][T14799] qnx6: wrong signature (magic) in superblock #1. [ 1075.660406][T14799] qnx6: unable to read the first superblock [ 1075.740073][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 1075.862301][T12721] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1076.052350][T12721] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1076.069025][T12721] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1076.078301][T12721] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1076.091158][T12721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.102679][T14801] loop2: detected capacity change from 0 to 512 [ 1076.114758][T12721] usb 5-1: config 0 descriptor?? [ 1076.300540][ T5601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.352531][ T5601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.422492][T12721] Bluetooth: Can't get state to change to load ram patch err [ 1076.438836][T12721] Bluetooth: Loading patch file failed [ 1076.451580][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1076.490953][ T9190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.491037][ T9190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.507076][T12721] ath3k: probe of 5-1:0.0 failed with error -71 [ 1076.508688][T12721] usb 5-1: USB disconnect, device number 27 [ 1076.518606][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1076.656718][T14819] loop4: detected capacity change from 0 to 512 [ 1077.060781][T14828] can: request_module (can-proto-0) failed. [ 1078.258164][T14833] rdma_op ffff8880776bc1f0 conn xmit_rdma 0000000000000000 [ 1078.503968][T14845] loop3: detected capacity change from 0 to 1024 [ 1078.592303][ T13] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1078.650941][T14850] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2562'. [ 1078.678621][T14845] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1078.880482][T14853] netlink: 'syz.0.2562': attribute type 21 has an invalid length. [ 1079.009619][T14856] overlayfs: failed to resolve './file1': -2 [ 1079.192459][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.628580][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.671554][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.687600][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.698761][T14853] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2562'. [ 1079.703184][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.751662][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.779739][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'. [ 1079.796315][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.860544][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.906590][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1079.959108][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1080.002038][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1080.025053][T14469] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 1080.102786][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.126252][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.171227][ T13] usb 2-1: Manufacturer: 她蕋멳î ï¤‡Ø”ë›ê¦†ë—®é½”㗘మᆤ幽åŸïŠœîª£ïŸ¾ç€·î­¹ì¬Žë£±çª›í½é»±è¦îŒè½¤ã´“犂讯à£ä‰™ë…’ⶇ扚邆镻㢗濇蕃é혣☲밉庙랸袰৽夂憬芣ç¨å½•ë¹¬æ—Ÿê¹¿ê¦‡å©žã˜³à¯´îŠ‘ﺋ࣊绾鸓ᬪ哴s [ 1080.194666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.258606][ T13] usb 2-1: SerialNumber: syz [ 1080.512891][ T13] usb 2-1: 0:2 : does not exist [ 1080.571589][ T13] usb 2-1: USB disconnect, device number 32 [ 1080.651339][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 1080.836902][T14873] loop1: detected capacity change from 0 to 1024 [ 1082.039769][T14880] binder: BINDER_SET_CONTEXT_MGR already set [ 1082.081639][T14880] binder: 14875:14880 ioctl 4018620d 20000040 returned -16 [ 1083.074576][T14890] netlink: 480 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1083.139988][T14890] bond0: option mode: unable to set because the bond device has slaves [ 1083.159070][T14892] loop1: detected capacity change from 0 to 1024 [ 1083.565080][T14898] chnl_net:caif_netlink_parms(): no params data found [ 1083.792793][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.802000][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.816590][T14898] device bridge_slave_0 entered promiscuous mode [ 1083.829649][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.841199][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.851264][T14898] device bridge_slave_1 entered promiscuous mode [ 1083.889840][T14898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.903884][T14898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.956890][T14898] team0: Port device team_slave_0 added [ 1083.989690][T14898] team0: Port device team_slave_1 added [ 1084.077968][T14898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.091794][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.202514][T14898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.235377][T14898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.248468][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.304379][T14898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.481140][T14898] device hsr_slave_0 entered promiscuous mode [ 1084.519511][T14898] device hsr_slave_1 entered promiscuous mode [ 1084.550583][T14898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.572285][T14898] Cannot create hsr debugfs directory [ 1085.462209][ T8796] Bluetooth: hci1: command 0x0409 tx timeout [ 1086.658243][ T26] audit: type=1326 audit(2000000279.251:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.2.2584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619f01fe79 code=0x0 [ 1086.729416][T14938] loop2: detected capacity change from 0 to 512 [ 1086.736169][T14898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.837701][T14938] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1086.845238][T14938] UDF-fs: Scanning with blocksize 512 failed [ 1086.851968][T14938] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1086.859562][T14938] UDF-fs: Scanning with blocksize 1024 failed [ 1086.868100][T14938] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1086.875520][T14938] UDF-fs: Scanning with blocksize 2048 failed [ 1086.882641][T14938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1086.895642][T14938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.920325][T14898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.039091][T14898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.082010][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1087.129387][T14898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.258579][T14945] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.265720][T14945] binder: 14943:14945 ioctl 4018620d 20000040 returned -16 [ 1087.393302][T14947] loop1: detected capacity change from 0 to 512 [ 1087.398188][T14898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1087.443925][T14898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1087.483427][T14898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1087.525310][T14898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.542682][T12384] Bluetooth: hci1: command 0x041b tx timeout [ 1087.576711][T14947] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1087.713629][T14947] ext4 filesystem being mounted at /58/bus supports timestamps until 2038 (0x7fffffff) [ 1088.084626][T14957] cgroup: Invalid name [ 1089.733429][ T3614] Bluetooth: hci1: command 0x040f tx timeout [ 1089.867186][T14898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.934718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.959184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.036105][T14898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.059400][T14967] tap0: tun_chr_ioctl cmd 1074025677 [ 1090.082573][T14967] tap0: linktype set to 780 [ 1090.089819][ T26] audit: type=1326 audit(2000000282.681:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x7ffc0000 [ 1090.114857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1090.132243][ T3614] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1090.136068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1090.167435][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.174620][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.199477][ T26] audit: type=1326 audit(2000000282.731:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fa6eb7810 code=0x7ffc0000 [ 1090.221952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.249572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1090.280148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1090.302626][ T26] audit: type=1326 audit(2000000282.731:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fa6eb8a7b code=0x7ffc0000 [ 1090.324928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.334283][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.341436][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.354033][ T26] audit: type=1326 audit(2000000282.731:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fa6eb8a7b code=0x7ffc0000 [ 1090.357556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.388797][ T26] audit: type=1326 audit(2000000282.751:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fa6eb8a7b code=0x7ffc0000 [ 1090.392175][ T3614] usb 3-1: Using ep0 maxpacket: 16 [ 1090.412762][ T26] audit: type=1326 audit(2000000282.751:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fa6eb8a7b code=0x7ffc0000 [ 1090.439086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1090.458302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1090.495165][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1090.537299][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1090.567891][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1090.591684][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1090.608031][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1090.633585][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1090.652238][ T3614] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1090.654574][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1090.688698][T14898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.699160][ T3614] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1090.699234][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.738115][T14898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1090.740901][ T3614] usb 3-1: config 0 descriptor?? [ 1090.767062][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1090.785168][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1090.807333][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.855309][ T3614] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input89 [ 1091.120847][T14973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2593'. [ 1091.286825][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1091.391807][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1091.439750][T14898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.592309][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1091.608308][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1091.691497][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1091.711839][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1091.747241][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1091.761171][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 1091.792148][ T3620] Bluetooth: hci1: command 0x0419 tx timeout [ 1091.804875][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1091.822958][T14898] device veth0_vlan entered promiscuous mode [ 1091.876911][T14898] device veth1_vlan entered promiscuous mode [ 1091.943873][T14978] loop4: detected capacity change from 0 to 256 [ 1091.969339][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1091.986749][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1092.080829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1092.128930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1092.143563][T14898] device veth0_macvtap entered promiscuous mode [ 1092.188324][T14898] device veth1_macvtap entered promiscuous mode [ 1092.236745][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.248095][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.259607][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.287370][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.335641][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.356981][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.368788][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.380164][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.396383][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.411932][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.429313][T14898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.446153][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1092.459754][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1092.498068][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1092.528780][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.553802][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.567421][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.578816][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.592212][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.612215][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.625593][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.636234][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.647301][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.657784][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.669738][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.689565][T14898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.704805][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1092.714862][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1092.753234][T14898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.771827][T14898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.803441][T14898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.814030][ T26] audit: type=1326 audit(2000000285.411:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14991 comm="syz.1.2598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1092.814216][T14898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.913420][ T3012] bcm5974 3-1:0.0: could not read from device [ 1092.928155][T14993] loop1: detected capacity change from 0 to 512 [ 1092.967630][ T3614] usb 3-1: USB disconnect, device number 33 [ 1092.986633][T14993] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1092.994254][T14993] UDF-fs: Scanning with blocksize 512 failed [ 1093.007283][ T3012] bcm5974 3-1:0.0: could not read from device [ 1093.013918][T14993] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1093.021397][T14993] UDF-fs: Scanning with blocksize 1024 failed [ 1093.028899][T14993] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1093.036447][T14993] UDF-fs: Scanning with blocksize 2048 failed [ 1093.051618][T14993] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1093.080189][T14993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.143499][T14995] loop2: detected capacity change from 0 to 1024 [ 1093.162913][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.171353][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.196261][T14999] loop0: detected capacity change from 0 to 256 [ 1093.198227][T14995] hfsplus: unable to parse mount options [ 1093.213178][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1094.013843][ T7300] Bluetooth: hci1: command 0x0405 tx timeout [ 1094.462884][T14528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.471513][T14528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.568784][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1094.721536][T15014] loop3: detected capacity change from 0 to 256 [ 1094.727090][T15011] input: syz1 as /devices/virtual/input/input90 [ 1094.826684][T15014] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d) [ 1095.002241][ T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1095.107138][ T9730] device hsr_slave_0 left promiscuous mode [ 1095.952173][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1095.978727][ T9730] device hsr_slave_1 left promiscuous mode [ 1096.008592][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.041810][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.072394][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1096.094120][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0000, bcdDevice= 0.00 [ 1096.104435][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.122683][ T7] usb 2-1: config 0 descriptor?? [ 1096.129807][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.180954][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1096.199921][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.240669][ T9730] device bridge_slave_1 left promiscuous mode [ 1096.272368][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.285116][ T9730] device bridge_slave_0 left promiscuous mode [ 1096.291308][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.348566][ T9730] device veth1_macvtap left promiscuous mode [ 1096.357011][ T9730] device veth0_macvtap left promiscuous mode [ 1096.387309][ T9730] device veth1_vlan left promiscuous mode [ 1096.405973][ T9730] device veth0_vlan left promiscuous mode [ 1096.733653][T15029] No such timeout policy "syz0" [ 1097.981157][T15031] loop4: detected capacity change from 0 to 64 [ 1098.098643][ T9730] team0 (unregistering): Port device team_slave_1 removed [ 1098.137627][ T9730] team0 (unregistering): Port device team_slave_0 removed [ 1098.166396][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.223813][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.407603][ T9730] bond0 (unregistering): Released all slaves [ 1098.508855][T12384] usb 2-1: USB disconnect, device number 33 [ 1098.550391][ T26] audit: type=1326 audit(2000000291.141:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15033 comm="syz.1.2612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1098.582303][ T1075] Bluetooth: hci1: command 0x0409 tx timeout [ 1098.613892][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 1098.659246][T15035] loop1: detected capacity change from 0 to 512 [ 1098.742379][T15035] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1098.749869][T15035] UDF-fs: Scanning with blocksize 512 failed [ 1098.758877][T15035] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1098.766682][T15035] UDF-fs: Scanning with blocksize 1024 failed [ 1098.773644][T15035] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1098.781147][T15035] UDF-fs: Scanning with blocksize 2048 failed [ 1098.788157][T15035] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1098.800442][T15035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1099.087685][T15040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1099.175593][T15026] chnl_net:caif_netlink_parms(): no params data found [ 1099.227275][ C0] eth0: bad gso: type: 1, size: 1408 [ 1099.343797][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 1099.504893][ T26] audit: type=1326 audit(2000000292.101:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.4.2615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1b6dfe79 code=0x0 [ 1100.371882][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.382269][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.393745][T15026] device bridge_slave_0 entered promiscuous mode [ 1100.420405][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.462260][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.479266][T15026] device bridge_slave_1 entered promiscuous mode [ 1100.545710][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.574227][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.636292][T15063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1100.662254][T12384] Bluetooth: hci1: command 0x041b tx timeout [ 1100.728568][T15026] team0: Port device team_slave_0 added [ 1100.753379][T15026] team0: Port device team_slave_1 added [ 1100.800870][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.813019][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.842201][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.869473][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.877468][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.904627][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.011698][T15026] device hsr_slave_0 entered promiscuous mode [ 1101.026854][T15026] device hsr_slave_1 entered promiscuous mode [ 1101.037827][T15026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.051058][T15026] Cannot create hsr debugfs directory [ 1101.060605][T15050] chnl_net:caif_netlink_parms(): no params data found [ 1101.273894][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.282316][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.290957][T15050] device bridge_slave_0 entered promiscuous mode [ 1101.350499][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.357991][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.366693][T15050] device bridge_slave_1 entered promiscuous mode [ 1101.399391][T15026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.470660][T15050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.495522][T15050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.543064][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 1101.580562][T15026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.631586][T15050] team0: Port device team_slave_0 added [ 1101.650202][T15050] team0: Port device team_slave_1 added [ 1101.664602][T15026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.766155][T15026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.812839][T15050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.820672][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.849059][T15050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.870361][T15050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.892253][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.921494][T15050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.150954][T15050] device hsr_slave_0 entered promiscuous mode [ 1102.184198][ T26] audit: type=1326 audit(2000000294.781:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.0.2626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x0 [ 1102.223743][T15050] device hsr_slave_1 entered promiscuous mode [ 1102.231556][T15050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.244633][T15050] Cannot create hsr debugfs directory [ 1102.284516][T15092] loop1: detected capacity change from 0 to 64 [ 1102.309826][T15093] loop0: detected capacity change from 0 to 512 [ 1102.363715][T15026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1102.372782][T15093] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1102.380188][T15093] UDF-fs: Scanning with blocksize 512 failed [ 1102.388546][T15093] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1102.396017][T15093] UDF-fs: Scanning with blocksize 1024 failed [ 1102.403857][T15093] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1102.411967][T15093] UDF-fs: Scanning with blocksize 2048 failed [ 1102.420597][T15093] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1102.431920][T15093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1102.547345][T15026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1102.598754][T15026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1102.683143][T15026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1102.746524][T15097] loop4: detected capacity change from 0 to 1024 [ 1102.753744][ T3614] Bluetooth: hci1: command 0x040f tx timeout [ 1102.827348][T15097] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1102.833963][T15097] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1102.982760][T15050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.299276][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.773659][ T7300] Bluetooth: hci2: command 0x041b tx timeout [ 1103.796507][T15050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.839479][T15102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2630'. [ 1103.919061][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.957630][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.984920][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1104.048744][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1104.079236][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1104.095741][T15109] loop4: detected capacity change from 0 to 1024 [ 1104.109939][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1104.124291][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1104.152492][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.159603][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.167941][T15109] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1104.193915][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1104.219120][T15101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'. [ 1104.230708][T15109] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1104.326304][T15050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.419190][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1104.429177][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.447090][T15117] loop0: detected capacity change from 0 to 8 [ 1104.476763][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.483913][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.502392][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.522974][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.592632][T15050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.631810][T15117] SQUASHFS error: Unable to read directory block [629:26] [ 1104.643432][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1104.665337][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1104.684229][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1104.701497][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1104.721707][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.739937][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.750330][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.833040][ T7300] Bluetooth: hci1: command 0x0419 tx timeout [ 1104.855473][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.866090][T14528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.899753][T15123] netlink: 'syz.1.2634': attribute type 2 has an invalid length. [ 1104.908388][T15123] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1104.932413][ T26] audit: type=1326 audit(2000000297.521:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.1.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e31986e79 code=0x0 [ 1104.954354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.538037][T15050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1105.792336][T12855] Bluetooth: hci2: command 0x040f tx timeout [ 1106.658552][T15050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1106.692651][T15050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1106.903104][T15050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1107.769355][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.807845][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.823837][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.862434][ T3614] Bluetooth: hci2: command 0x0419 tx timeout [ 1107.934218][ T26] audit: type=1326 audit(2000000300.531:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.0.2639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x0 [ 1108.029401][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1108.048954][T15178] loop0: detected capacity change from 0 to 512 [ 1108.064300][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1108.097426][T15178] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1108.104927][T15178] UDF-fs: Scanning with blocksize 512 failed [ 1108.114352][T15178] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1108.121839][T15178] UDF-fs: Scanning with blocksize 1024 failed [ 1108.133495][T15178] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1108.140953][T15178] UDF-fs: Scanning with blocksize 2048 failed [ 1108.154002][T15178] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1108.172747][T15178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.200178][T15026] device veth0_vlan entered promiscuous mode [ 1108.216378][T15026] device veth1_vlan entered promiscuous mode [ 1108.240611][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1108.253174][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.264964][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.307085][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.332919][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.363486][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.529060][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.551835][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.603823][T15050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.645047][T15026] device veth0_macvtap entered promiscuous mode [ 1108.682819][T15050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.698713][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.727056][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1108.913193][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.739197][T15026] device veth1_macvtap entered promiscuous mode [ 1110.013529][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1110.063178][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1110.139982][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.147201][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.262858][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1110.407529][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1110.598942][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.606155][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.889979][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.933349][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1110.955073][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1110.989119][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1111.062542][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1111.178161][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1111.771565][T15214] loop0: detected capacity change from 0 to 1024 [ 1111.828798][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1111.848397][ T26] audit: type=1326 audit(2000000304.441:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.4.2651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1b6dfe79 code=0x0 [ 1111.878840][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1111.893185][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1111.922937][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1111.937133][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1111.965581][T15217] loop4: detected capacity change from 0 to 512 [ 1112.003050][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1112.025363][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.040758][T15217] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1112.048534][T15217] UDF-fs: Scanning with blocksize 512 failed [ 1112.058903][T15217] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1112.066398][T15217] UDF-fs: Scanning with blocksize 1024 failed [ 1112.073687][T15217] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1112.080375][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.081186][T15217] UDF-fs: Scanning with blocksize 2048 failed [ 1112.098915][T15217] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1112.100090][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.114576][T15217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.128740][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.177845][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.202184][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.213440][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.224850][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.235248][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.246232][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.268723][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.284046][T15050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1112.292678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1112.304961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1112.328296][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.340164][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.353358][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.364468][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.376808][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.393082][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.404152][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.419306][T15222] loop1: detected capacity change from 0 to 512 [ 1112.425828][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.435974][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.446508][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.458621][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.481317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1112.523383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1112.535636][T15026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.552362][T15026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.561781][T15026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.571429][T15026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.707096][T15222] loop1: detected capacity change from 0 to 512 [ 1113.789129][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1113.837528][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1113.878065][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1113.910652][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.919249][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1113.952374][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.969269][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.043075][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.050507][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.085340][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.098865][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.112319][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.119910][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.134965][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.168331][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.197579][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.241418][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.263801][T15246] loop4: detected capacity change from 0 to 512 [ 1114.277043][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.285387][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.297750][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.305778][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.313523][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.321024][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.382198][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.398256][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.408786][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.434689][T15246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1114.449209][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.483684][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.498331][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.509557][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.534096][T15246] EXT4-fs (loop4): 1 orphan inode deleted [ 1114.543517][T15246] EXT4-fs (loop4): 1 truncate cleaned up [ 1114.551475][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.562700][T15246] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 1114.590298][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.601205][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.616766][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.657815][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.668613][T15246] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.2659: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1114.694192][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.707939][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.716472][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.716884][T15246] EXT4-fs (loop4): Remounting filesystem read-only [ 1114.730884][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.751333][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.760427][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.768544][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.776111][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.783773][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.791387][ T13] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1114.802843][ T13] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1114.810195][T15246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2659'. [ 1114.840912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1114.914077][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.930723][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.007717][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.045355][T15255] loop0: detected capacity change from 0 to 1024 [ 1115.246667][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1115.263267][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1115.284958][T15050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.419789][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1115.432316][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1115.485934][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1115.502943][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1115.519708][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1115.529942][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1115.553479][T15050] device veth0_vlan entered promiscuous mode [ 1115.562395][ T3614] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1115.571597][T15050] device veth1_vlan entered promiscuous mode [ 1115.641192][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1115.659890][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1115.671744][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1115.687154][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1115.705291][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.772455][ T7300] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1115.963504][ T3614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.992243][ T3614] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.062468][ T7300] usb 2-1: Using ep0 maxpacket: 8 [ 1116.193138][ T7300] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1116.223172][ T3614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1116.254386][ T7300] usb 2-1: config 1 has no interface number 1 [ 1116.263294][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.294142][ T7300] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1116.313443][ T3614] usb 5-1: Product: syz [ 1116.333502][ T3614] usb 5-1: Manufacturer: syz [ 1116.349228][ T7300] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1116.369231][ T3614] usb 5-1: SerialNumber: syz [ 1116.521422][ T3614] usb 5-1: selecting invalid altsetting 1 [ 1116.535177][ T26] audit: type=1326 audit(2000000309.131:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x0 [ 1116.549484][T15153] device hsr_slave_0 left promiscuous mode [ 1116.581453][T15153] device hsr_slave_1 left promiscuous mode [ 1116.594090][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.601627][T15153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.665002][T15282] loop0: detected capacity change from 0 to 512 [ 1116.673600][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.681046][T15153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.698182][T15153] device bridge_slave_1 left promiscuous mode [ 1116.707426][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.725837][T15153] device bridge_slave_0 left promiscuous mode [ 1116.757954][T15282] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1116.765753][T15282] UDF-fs: Scanning with blocksize 512 failed [ 1116.792500][T15282] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1116.799961][T15282] UDF-fs: Scanning with blocksize 1024 failed [ 1116.807768][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.807939][T15282] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1116.815353][ T7300] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1116.822446][T15282] UDF-fs: Scanning with blocksize 2048 failed [ 1116.857784][T15282] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1117.221845][T15282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.239608][ T7300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.239743][ T7300] usb 2-1: Product: syz [ 1117.239867][ T7300] usb 2-1: Manufacturer: syz [ 1117.240064][ T7300] usb 2-1: SerialNumber: syz [ 1117.637284][T12855] Bluetooth: hci2: command 0x0405 tx timeout [ 1117.655659][T15153] device hsr_slave_0 left promiscuous mode [ 1117.682332][T15153] device hsr_slave_1 left promiscuous mode [ 1117.689087][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.697508][T15153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.706280][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.714168][T15153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.722458][T15153] device bridge_slave_1 left promiscuous mode [ 1117.729222][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.738723][T15153] device bridge_slave_0 left promiscuous mode [ 1117.747632][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.919652][T15263] udc-core: couldn't find an available UDC or it's busy [ 1118.041372][T15263] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1118.341652][T15153] device veth1_macvtap left promiscuous mode [ 1118.453902][T15153] device veth0_macvtap left promiscuous mode [ 1118.529938][T15153] device veth1_vlan left promiscuous mode [ 1118.550180][T15153] device veth0_vlan left promiscuous mode [ 1118.601121][T15153] device veth1_macvtap left promiscuous mode [ 1118.614604][T15153] device veth0_macvtap left promiscuous mode [ 1118.620770][T15153] device veth1_vlan left promiscuous mode [ 1118.631111][T15153] device veth0_vlan left promiscuous mode [ 1118.700666][T15296] loop0: detected capacity change from 0 to 1024 [ 1118.793229][ T3614] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 1118.822643][ T3614] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 1118.842246][ T3614] usb 5-1: selecting invalid altsetting 1 [ 1118.850312][ T3614] cdc_ncm 5-1:1.0: bind() failure [ 1118.867169][T15296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1118.889791][ T3614] usb 5-1: USB disconnect, device number 28 [ 1118.970509][T15296] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1119.021028][T15296] xt_TCPMSS: Only works on TCP SYN packets [ 1119.186086][ T26] audit: type=1326 audit(2000000311.781:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15301 comm="syz.0.2672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x0 [ 1119.299747][T15303] loop0: detected capacity change from 0 to 512 [ 1119.366949][T15303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1119.374507][T15303] UDF-fs: Scanning with blocksize 512 failed [ 1119.381152][T15303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1119.388779][T15303] UDF-fs: Scanning with blocksize 1024 failed [ 1119.414785][T15303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1119.422710][T15303] UDF-fs: Scanning with blocksize 2048 failed [ 1119.432535][T15303] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1119.447679][T15303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1119.491245][ T26] audit: type=1326 audit(2000000312.081:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1b6dfe79 code=0x0 [ 1119.777202][T15153] team0 (unregistering): Port device team_slave_1 removed [ 1119.919485][T15153] team0 (unregistering): Port device team_slave_0 removed [ 1120.067908][T15153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.230326][T15153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.577981][T15153] bond0 (unregistering): Released all slaves [ 1120.708265][T15153] team0 (unregistering): Port device team_slave_1 removed [ 1120.725992][T15153] team0 (unregistering): Port device team_slave_0 removed [ 1120.738170][T15153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.761411][T15153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.841424][T15153] bond0 (unregistering): Released all slaves [ 1120.891016][T15050] device veth0_macvtap entered promiscuous mode [ 1120.899255][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1120.987839][T15050] device veth1_macvtap entered promiscuous mode [ 1121.017052][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.027774][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.094053][T15321] loop2: detected capacity change from 0 to 40427 [ 1122.334313][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.443494][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.494005][ T26] audit: type=1326 audit(2000000315.091:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15324 comm="syz.4.2679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1b6dfe79 code=0x0 [ 1122.542715][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.610174][T15326] loop4: detected capacity change from 0 to 512 [ 1122.632305][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.672094][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.682979][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.700056][T15050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.710781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1122.720367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1122.763821][T15326] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1122.766997][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.771233][T15326] UDF-fs: Scanning with blocksize 512 failed [ 1122.772051][T15326] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1122.792632][ T7300] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1122.803100][T15326] UDF-fs: Scanning with blocksize 1024 failed [ 1122.811829][T15326] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1122.819299][T15326] UDF-fs: Scanning with blocksize 2048 failed [ 1122.825442][T15321] F2FS-fs (loop2): invalid crc value [ 1122.843731][T15321] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1122.848241][T15326] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1122.861810][T15326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.901530][T15321] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1122.911196][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.925739][T15321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1122.980370][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.000501][T15319] attempt to access beyond end of device [ 1123.000501][T15319] loop2: rw=2049, want=45104, limit=40427 [ 1123.042310][T15319] attempt to access beyond end of device [ 1123.042310][T15319] loop2: rw=524288, want=45104, limit=40427 [ 1123.055001][T15319] attempt to access beyond end of device [ 1123.055001][T15319] loop2: rw=0, want=45104, limit=40427 [ 1123.067844][T15319] attempt to access beyond end of device [ 1123.067844][T15319] loop2: rw=0, want=45104, limit=40427 [ 1123.080377][T15314] attempt to access beyond end of device [ 1123.080377][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.088617][ T7300] usb 2-1: USB disconnect, device number 34 [ 1123.092823][T15314] attempt to access beyond end of device [ 1123.092823][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.099178][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.110604][T15314] attempt to access beyond end of device [ 1123.110604][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.131219][T15314] attempt to access beyond end of device [ 1123.131219][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.138064][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.142453][T15314] attempt to access beyond end of device [ 1123.142453][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.143374][T15314] attempt to access beyond end of device [ 1123.143374][T15314] loop2: rw=0, want=45104, limit=40427 [ 1123.223680][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.255049][ T8142] udevd[8142]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.255629][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.289198][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.357422][T15050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.375431][T15337] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 1123.530982][T15344] 9pnet_virtio: no channels available for device syz [ 1123.547275][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.557051][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.570036][T15050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.579756][T15050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.590903][T15345] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1123.603719][T15050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.619207][T15345] loop4: detected capacity change from 0 to 512 [ 1123.625695][T15050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.650915][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1123.879480][ T13] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1123.916347][T15345] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000006,bsddf,,errors=continue. Quota mode: writeback. [ 1123.932467][T15345] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038 (0x7fffffff) [ 1123.992638][ T9173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.074922][ T26] audit: type=1326 audit(2000000316.671:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.0.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa6eb8e79 code=0x0 [ 1124.075012][ T9173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.125512][ T3719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.136325][ T3719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.188402][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1124.266377][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1124.272433][ T13] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1124.298239][ T13] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1124.476657][ T13] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1124.487276][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.835219][T15357] overlayfs: failed to get inode (-116) [ 1124.842785][T15357] overlayfs: failed to get inode (-116) [ 1124.848569][T15357] overlayfs: failed to get inode (-116) [ 1124.855196][T15357] overlayfs: failed to get inode (-116) [ 1125.432452][T15344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1125.480746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.655567][T15361] bridge0: port 4(team0) entered blocking state [ 1125.672292][T15361] bridge0: port 4(team0) entered disabled state [ 1125.806304][T15361] device team0 entered promiscuous mode [ 1125.820409][T15361] device team_slave_0 entered promiscuous mode [ 1125.842478][T15361] device team_slave_1 entered promiscuous mode [ 1125.867463][T15361] bridge0: port 4(team0) entered blocking state [ 1125.874117][T15361] bridge0: port 4(team0) entered forwarding state [ 1126.440855][T15373] loop4: detected capacity change from 0 to 512 [ 1126.681698][T15383] xt_socket: unknown flags 0x8 [ 1127.483774][T15389] [ 1127.486144][T15389] ===================================================== [ 1127.493167][T15389] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1127.500624][T15389] 5.15.165-syzkaller #0 Not tainted [ 1127.505820][T15389] ----------------------------------------------------- [ 1127.512766][T15389] syz.2.2690/15389 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1127.520495][T15389] ffffffff8c60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xd2/0x330 [ 1127.529046][T15389] [ 1127.529046][T15389] and this task is already holding: [ 1127.536414][T15389] ffff888023ca1538 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x2f/0x330 [ 1127.545242][T15389] which would create a new lock dependency: [ 1127.551135][T15389] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 1127.558866][T15389] [ 1127.558866][T15389] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1127.568294][T15389] (&client->buffer_lock){..-.}-{2:2} [ 1127.568316][T15389] [ 1127.568316][T15389] ... which became SOFTIRQ-irq-safe at: [ 1127.581375][T15389] lock_acquire+0x1db/0x4f0 [ 1127.585957][T15389] _raw_spin_lock+0x2a/0x40 [ 1127.590531][T15389] evdev_pass_values+0xe7/0xb60 [ 1127.595453][T15389] evdev_events+0x198/0x2c0 [ 1127.600032][T15389] input_pass_values+0x873/0x1200 [ 1127.605148][T15389] input_handle_event+0xd3d/0x1600 [ 1127.610339][T15389] input_event+0x9d/0xd0 [ 1127.614672][T15389] hidinput_hid_event+0x1135/0x18e0 [ 1127.619948][T15389] hid_process_event+0x433/0x580 [ 1127.624964][T15389] hid_report_raw_event+0xe9e/0x1640 [ 1127.630321][T15389] hid_input_report+0x419/0x4d0 [ 1127.635241][T15389] hid_irq_in+0x45c/0x690 [ 1127.639643][T15389] __usb_hcd_giveback_urb+0x371/0x530 [ 1127.645108][T15389] dummy_timer+0x8ad/0x3200 [ 1127.649685][T15389] call_timer_fn+0x16d/0x560 [ 1127.654343][T15389] __run_timers+0x67c/0x890 [ 1127.659004][T15389] run_timer_softirq+0x63/0xf0 [ 1127.663856][T15389] handle_softirqs+0x3a7/0x930 [ 1127.668689][T15389] __irq_exit_rcu+0x157/0x240 [ 1127.673432][T15389] irq_exit_rcu+0x5/0x20 [ 1127.677744][T15389] sysvec_apic_timer_interrupt+0x91/0xb0 [ 1127.683543][T15389] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1127.689598][T15389] kasan_check_range+0x7b/0x290 [ 1127.694634][T15389] zone_watermark_fast+0x43/0x240 [ 1127.699762][T15389] get_page_from_freelist+0x4af/0x33c0 [ 1127.705310][T15389] __alloc_pages+0x272/0x700 [ 1127.709977][T15389] alloc_pages_vma+0x39a/0x800 [ 1127.714821][T15389] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 1127.720530][T15389] shmem_getpage_gfp+0x17b1/0x3190 [ 1127.725729][T15389] shmem_write_begin+0xce/0x1a0 [ 1127.730672][T15389] generic_perform_write+0x2bf/0x5b0 [ 1127.736031][T15389] __generic_file_write_iter+0x243/0x4f0 [ 1127.741738][T15389] generic_file_write_iter+0xa7/0x1b0 [ 1127.747204][T15389] vfs_write+0xacd/0xe50 [ 1127.751547][T15389] ksys_write+0x1a2/0x2c0 [ 1127.755950][T15389] do_syscall_64+0x3b/0xb0 [ 1127.760453][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.766429][T15389] [ 1127.766429][T15389] to a SOFTIRQ-irq-unsafe lock: [ 1127.773429][T15389] (tasklist_lock){.+.+}-{2:2} [ 1127.773453][T15389] [ 1127.773453][T15389] ... which became SOFTIRQ-irq-unsafe at: [ 1127.786052][T15389] ... [ 1127.786059][T15389] lock_acquire+0x1db/0x4f0 [ 1127.793198][T15389] _raw_read_lock+0x32/0x40 [ 1127.797778][T15389] do_wait+0x2a7/0xaf0 [ 1127.801928][T15389] kernel_wait+0xe5/0x230 [ 1127.806347][T15389] call_usermodehelper_exec_work+0xb5/0x220 [ 1127.812322][T15389] process_one_work+0x8a1/0x10c0 [ 1127.817346][T15389] worker_thread+0xaca/0x1280 [ 1127.822121][T15389] kthread+0x3f6/0x4f0 [ 1127.826279][T15389] ret_from_fork+0x1f/0x30 [ 1127.830767][T15389] [ 1127.830767][T15389] other info that might help us debug this: [ 1127.830767][T15389] [ 1127.840977][T15389] Chain exists of: [ 1127.840977][T15389] &client->buffer_lock --> &f->f_owner.lock --> tasklist_lock [ 1127.840977][T15389] [ 1127.854342][T15389] Possible interrupt unsafe locking scenario: [ 1127.854342][T15389] [ 1127.862644][T15389] CPU0 CPU1 [ 1127.867991][T15389] ---- ---- [ 1127.873339][T15389] lock(tasklist_lock); [ 1127.877746][T15389] local_irq_disable(); [ 1127.884607][T15389] lock(&client->buffer_lock); [ 1127.891974][T15389] lock(&f->f_owner.lock); [ 1127.898988][T15389] [ 1127.902438][T15389] lock(&client->buffer_lock); [ 1127.907449][T15389] [ 1127.907449][T15389] *** DEADLOCK *** [ 1127.907449][T15389] [ 1127.915680][T15389] 3 locks held by syz.2.2690/15389: [ 1127.920861][T15389] #0: ffffffff914d3b78 (&fsnotify_mark_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 1127.930679][T15389] #1: ffff888065ae2100 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x5d/0x440 [ 1127.940321][T15389] #2: ffff888023ca1538 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x2f/0x330 [ 1127.949531][T15389] [ 1127.949531][T15389] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1127.959935][T15389] -> (&client->buffer_lock){..-.}-{2:2} { [ 1127.965846][T15389] IN-SOFTIRQ-W at: [ 1127.969984][T15389] lock_acquire+0x1db/0x4f0 [ 1127.976487][T15389] _raw_spin_lock+0x2a/0x40 [ 1127.982989][T15389] evdev_pass_values+0xe7/0xb60 [ 1127.989826][T15389] evdev_events+0x198/0x2c0 [ 1127.996312][T15389] input_pass_values+0x873/0x1200 [ 1128.003324][T15389] input_handle_event+0xd3d/0x1600 [ 1128.010437][T15389] input_event+0x9d/0xd0 [ 1128.016661][T15389] hidinput_hid_event+0x1135/0x18e0 [ 1128.023943][T15389] hid_process_event+0x433/0x580 [ 1128.030863][T15389] hid_report_raw_event+0xe9e/0x1640 [ 1128.038128][T15389] hid_input_report+0x419/0x4d0 [ 1128.044961][T15389] hid_irq_in+0x45c/0x690 [ 1128.051275][T15389] __usb_hcd_giveback_urb+0x371/0x530 [ 1128.058634][T15389] dummy_timer+0x8ad/0x3200 [ 1128.065120][T15389] call_timer_fn+0x16d/0x560 [ 1128.071690][T15389] __run_timers+0x67c/0x890 [ 1128.078173][T15389] run_timer_softirq+0x63/0xf0 [ 1128.084933][T15389] handle_softirqs+0x3a7/0x930 [ 1128.091703][T15389] __irq_exit_rcu+0x157/0x240 [ 1128.098397][T15389] irq_exit_rcu+0x5/0x20 [ 1128.104623][T15389] sysvec_apic_timer_interrupt+0x91/0xb0 [ 1128.112240][T15389] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1128.120204][T15389] kasan_check_range+0x7b/0x290 [ 1128.127037][T15389] zone_watermark_fast+0x43/0x240 [ 1128.134061][T15389] get_page_from_freelist+0x4af/0x33c0 [ 1128.141501][T15389] __alloc_pages+0x272/0x700 [ 1128.148072][T15389] alloc_pages_vma+0x39a/0x800 [ 1128.154824][T15389] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 1128.162442][T15389] shmem_getpage_gfp+0x17b1/0x3190 [ 1128.169547][T15389] shmem_write_begin+0xce/0x1a0 [ 1128.176396][T15389] generic_perform_write+0x2bf/0x5b0 [ 1128.183672][T15389] __generic_file_write_iter+0x243/0x4f0 [ 1128.191285][T15389] generic_file_write_iter+0xa7/0x1b0 [ 1128.198639][T15389] vfs_write+0xacd/0xe50 [ 1128.204863][T15389] ksys_write+0x1a2/0x2c0 [ 1128.211177][T15389] do_syscall_64+0x3b/0xb0 [ 1128.217577][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.225455][T15389] INITIAL USE at: [ 1128.229509][T15389] lock_acquire+0x1db/0x4f0 [ 1128.235908][T15389] _raw_spin_lock+0x2a/0x40 [ 1128.242306][T15389] evdev_pass_values+0xe7/0xb60 [ 1128.249055][T15389] evdev_events+0x198/0x2c0 [ 1128.255453][T15389] input_pass_values+0x873/0x1200 [ 1128.262402][T15389] input_handle_event+0xc9b/0x1600 [ 1128.269410][T15389] input_inject_event+0x1fc/0x300 [ 1128.276363][T15389] evdev_write+0x668/0x7c0 [ 1128.282696][T15389] vfs_write+0x30c/0xe50 [ 1128.288834][T15389] ksys_write+0x1a2/0x2c0 [ 1128.295056][T15389] do_syscall_64+0x3b/0xb0 [ 1128.301372][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.309163][T15389] } [ 1128.311821][T15389] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 1128.320169][T15389] -> (&new->fa_lock){...-}-{2:2} { [ 1128.325373][T15389] IN-SOFTIRQ-R at: [ 1128.329423][T15389] lock_acquire+0x1db/0x4f0 [ 1128.335735][T15389] _raw_read_lock_irqsave+0xd9/0x120 [ 1128.342828][T15389] kill_fasync+0x16a/0x490 [ 1128.349052][T15389] sock_wake_async+0x145/0x170 [ 1128.355640][T15389] sk_wake_async+0x15d/0x250 [ 1128.362065][T15389] sock_def_readable+0x181/0x240 [ 1128.368818][T15389] tcp_data_queue+0x2146/0x6f20 [ 1128.375478][T15389] tcp_rcv_established+0xe3e/0x1e20 [ 1128.382483][T15389] tcp_v6_do_rcv+0x4f2/0x10f0 [ 1128.388971][T15389] tcp_v6_rcv+0x2220/0x27b0 [ 1128.395374][T15389] ip6_protocol_deliver_rcu+0x93d/0x12d0 [ 1128.402832][T15389] ip6_input_finish+0xa2/0x130 [ 1128.409435][T15389] NF_HOOK+0x364/0x410 [ 1128.415353][T15389] NF_HOOK+0x364/0x410 [ 1128.421248][T15389] __netif_receive_skb+0x1c6/0x530 [ 1128.428172][T15389] process_backlog+0x363/0x7f0 [ 1128.434752][T15389] __napi_poll+0xc7/0x440 [ 1128.440889][T15389] net_rx_action+0x617/0xda0 [ 1128.447287][T15389] handle_softirqs+0x3a7/0x930 [ 1128.453866][T15389] do_softirq+0x162/0x240 [ 1128.460003][T15389] __local_bh_enable_ip+0x1b1/0x1f0 [ 1128.467013][T15389] sk_stream_wait_memory+0x709/0xe80 [ 1128.474128][T15389] tcp_sendmsg_locked+0x1468/0x3a90 [ 1128.481150][T15389] tcp_sendmsg+0x2c/0x40 [ 1128.487213][T15389] __sys_sendto+0x564/0x720 [ 1128.493657][T15389] __x64_sys_sendto+0xda/0xf0 [ 1128.500146][T15389] do_syscall_64+0x3b/0xb0 [ 1128.506369][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.514073][T15389] INITIAL USE at: [ 1128.518053][T15389] lock_acquire+0x1db/0x4f0 [ 1128.524275][T15389] _raw_write_lock_irq+0xcf/0x110 [ 1128.531042][T15389] fasync_remove_entry+0xfb/0x1d0 [ 1128.537794][T15389] sock_fasync+0x86/0xf0 [ 1128.543758][T15389] __fput+0x766/0x8e0 [ 1128.549471][T15389] task_work_run+0x129/0x1a0 [ 1128.555786][T15389] get_signal+0x143a/0x14e0 [ 1128.562031][T15389] arch_do_signal_or_restart+0xc3/0x1890 [ 1128.569411][T15389] exit_to_user_mode_loop+0x97/0x130 [ 1128.576436][T15389] exit_to_user_mode_prepare+0xb1/0x140 [ 1128.583833][T15389] syscall_exit_to_user_mode+0x5d/0x240 [ 1128.591131][T15389] do_syscall_64+0x47/0xb0 [ 1128.597280][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.604906][T15389] INITIAL READ USE at: [ 1128.609308][T15389] lock_acquire+0x1db/0x4f0 [ 1128.615971][T15389] _raw_read_lock_irqsave+0xd9/0x120 [ 1128.623416][T15389] kill_fasync+0x16a/0x490 [ 1128.629994][T15389] sock_wake_async+0x145/0x170 [ 1128.636919][T15389] sk_wake_async+0x15d/0x250 [ 1128.643701][T15389] unix_release_sock+0x535/0xaa0 [ 1128.650816][T15389] unix_release+0x88/0xc0 [ 1128.657449][T15389] sock_close+0xcd/0x230 [ 1128.663862][T15389] __fput+0x3fe/0x8e0 [ 1128.670008][T15389] task_work_run+0x129/0x1a0 [ 1128.676793][T15389] get_signal+0x143a/0x14e0 [ 1128.683470][T15389] arch_do_signal_or_restart+0xc3/0x1890 [ 1128.691296][T15389] exit_to_user_mode_loop+0x97/0x130 [ 1128.698748][T15389] exit_to_user_mode_prepare+0xb1/0x140 [ 1128.706475][T15389] syscall_exit_to_user_mode+0x5d/0x240 [ 1128.714186][T15389] do_syscall_64+0x47/0xb0 [ 1128.720765][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.728818][T15389] } [ 1128.731392][T15389] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1128.740144][T15389] ... acquired at: [ 1128.744016][T15389] lock_acquire+0x1db/0x4f0 [ 1128.748679][T15389] _raw_read_lock_irqsave+0xd9/0x120 [ 1128.754132][T15389] kill_fasync+0x16a/0x490 [ 1128.758731][T15389] evdev_pass_values+0x5ad/0xb60 [ 1128.763874][T15389] evdev_events+0x198/0x2c0 [ 1128.768545][T15389] input_pass_values+0x873/0x1200 [ 1128.773740][T15389] input_handle_event+0xc9b/0x1600 [ 1128.779016][T15389] input_inject_event+0x1fc/0x300 [ 1128.784199][T15389] evdev_write+0x668/0x7c0 [ 1128.788774][T15389] vfs_write+0x30c/0xe50 [ 1128.793176][T15389] ksys_write+0x1a2/0x2c0 [ 1128.797665][T15389] do_syscall_64+0x3b/0xb0 [ 1128.802239][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.808311][T15389] [ 1128.810614][T15389] -> (&f->f_owner.lock){...-}-{2:2} { [ 1128.815981][T15389] IN-SOFTIRQ-R at: [ 1128.819942][T15389] lock_acquire+0x1db/0x4f0 [ 1128.826078][T15389] _raw_read_lock_irqsave+0xd9/0x120 [ 1128.832999][T15389] send_sigurg+0x25/0x380 [ 1128.838965][T15389] sk_send_sigurg+0x6a/0xb0 [ 1128.845105][T15389] tcp_urg+0x2b8/0xb40 [ 1128.850806][T15389] tcp_rcv_established+0xe33/0x1e20 [ 1128.857637][T15389] tcp_v6_do_rcv+0x4f2/0x10f0 [ 1128.863948][T15389] tcp_v6_rcv+0x2220/0x27b0 [ 1128.870083][T15389] ip6_protocol_deliver_rcu+0x93d/0x12d0 [ 1128.877351][T15389] ip6_input_finish+0xa2/0x130 [ 1128.883768][T15389] NF_HOOK+0x364/0x410 [ 1128.889473][T15389] NF_HOOK+0x364/0x410 [ 1128.895197][T15389] __netif_receive_skb+0x1c6/0x530 [ 1128.901952][T15389] process_backlog+0x363/0x7f0 [ 1128.908353][T15389] __napi_poll+0xc7/0x440 [ 1128.914339][T15389] net_rx_action+0x617/0xda0 [ 1128.920597][T15389] handle_softirqs+0x3a7/0x930 [ 1128.926994][T15389] do_softirq+0x162/0x240 [ 1128.932954][T15389] __local_bh_enable_ip+0x1b1/0x1f0 [ 1128.939800][T15389] sk_stream_wait_memory+0x709/0xe80 [ 1128.946727][T15389] tcp_sendmsg_locked+0x1468/0x3a90 [ 1128.953576][T15389] tcp_sendmsg+0x2c/0x40 [ 1128.959470][T15389] __sys_sendto+0x564/0x720 [ 1128.965622][T15389] __x64_sys_sendto+0xda/0xf0 [ 1128.971966][T15389] do_syscall_64+0x3b/0xb0 [ 1128.978023][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.985553][T15389] INITIAL USE at: [ 1128.989430][T15389] lock_acquire+0x1db/0x4f0 [ 1128.995502][T15389] _raw_write_lock_irq+0xcf/0x110 [ 1129.002083][T15389] f_modown+0x38/0x340 [ 1129.007709][T15389] f_setown+0x127/0x1d0 [ 1129.013441][T15389] do_fcntl+0x1b7/0x1600 [ 1129.019235][T15389] __se_sys_fcntl+0xd8/0x1b0 [ 1129.025498][T15389] do_syscall_64+0x3b/0xb0 [ 1129.031464][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.038909][T15389] INITIAL READ USE at: [ 1129.043220][T15389] lock_acquire+0x1db/0x4f0 [ 1129.049721][T15389] _raw_read_lock_irq+0xd6/0x120 [ 1129.056637][T15389] do_fcntl+0x160/0x1600 [ 1129.062863][T15389] __se_sys_fcntl+0xd8/0x1b0 [ 1129.069437][T15389] do_syscall_64+0x3b/0xb0 [ 1129.075851][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.083729][T15389] } [ 1129.086237][T15389] ... key at: [] __alloc_file.__key+0x0/0x10 [ 1129.094370][T15389] ... acquired at: [ 1129.098166][T15389] lock_acquire+0x1db/0x4f0 [ 1129.102829][T15389] _raw_read_lock_irqsave+0xd9/0x120 [ 1129.108278][T15389] send_sigio+0x2f/0x330 [ 1129.112701][T15389] kill_fasync+0x20c/0x490 [ 1129.117289][T15389] sock_wake_async+0x145/0x170 [ 1129.122214][T15389] sk_wake_async+0x15d/0x250 [ 1129.126979][T15389] unix_release_sock+0x535/0xaa0 [ 1129.132077][T15389] unix_release+0x88/0xc0 [ 1129.136582][T15389] sock_close+0xcd/0x230 [ 1129.141001][T15389] __fput+0x3fe/0x8e0 [ 1129.145251][T15389] task_work_run+0x129/0x1a0 [ 1129.150032][T15389] get_signal+0x143a/0x14e0 [ 1129.154696][T15389] arch_do_signal_or_restart+0xc3/0x1890 [ 1129.160496][T15389] exit_to_user_mode_loop+0x97/0x130 [ 1129.166031][T15389] exit_to_user_mode_prepare+0xb1/0x140 [ 1129.171740][T15389] syscall_exit_to_user_mode+0x5d/0x240 [ 1129.177471][T15389] do_syscall_64+0x47/0xb0 [ 1129.182054][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.188117][T15389] [ 1129.190418][T15389] [ 1129.190418][T15389] the dependencies between the lock to be acquired [ 1129.190425][T15389] and SOFTIRQ-irq-unsafe lock: [ 1129.203902][T15389] -> (tasklist_lock){.+.+}-{2:2} { [ 1129.209009][T15389] HARDIRQ-ON-R at: [ 1129.212971][T15389] lock_acquire+0x1db/0x4f0 [ 1129.219106][T15389] _raw_read_lock+0x32/0x40 [ 1129.225244][T15389] do_wait+0x2a7/0xaf0 [ 1129.230948][T15389] kernel_wait+0xe5/0x230 [ 1129.237000][T15389] call_usermodehelper_exec_work+0xb5/0x220 [ 1129.244529][T15389] process_one_work+0x8a1/0x10c0 [ 1129.251107][T15389] worker_thread+0xaca/0x1280 [ 1129.257420][T15389] kthread+0x3f6/0x4f0 [ 1129.263124][T15389] ret_from_fork+0x1f/0x30 [ 1129.269177][T15389] SOFTIRQ-ON-R at: [ 1129.273154][T15389] lock_acquire+0x1db/0x4f0 [ 1129.279290][T15389] _raw_read_lock+0x32/0x40 [ 1129.285446][T15389] do_wait+0x2a7/0xaf0 [ 1129.291166][T15389] kernel_wait+0xe5/0x230 [ 1129.297146][T15389] call_usermodehelper_exec_work+0xb5/0x220 [ 1129.304691][T15389] process_one_work+0x8a1/0x10c0 [ 1129.311265][T15389] worker_thread+0xaca/0x1280 [ 1129.317575][T15389] kthread+0x3f6/0x4f0 [ 1129.323275][T15389] ret_from_fork+0x1f/0x30 [ 1129.329326][T15389] INITIAL USE at: [ 1129.333205][T15389] lock_acquire+0x1db/0x4f0 [ 1129.339259][T15389] _raw_write_lock_irq+0xcf/0x110 [ 1129.345834][T15389] copy_process+0x22be/0x3ef0 [ 1129.352064][T15389] kernel_clone+0x210/0x960 [ 1129.358135][T15389] kernel_thread+0x168/0x1e0 [ 1129.364280][T15389] rest_init+0x21/0x330 [ 1129.369986][T15389] start_kernel+0x48c/0x540 [ 1129.376034][T15389] secondary_startup_64_no_verify+0xb1/0xbb [ 1129.383493][T15389] INITIAL READ USE at: [ 1129.387830][T15389] lock_acquire+0x1db/0x4f0 [ 1129.394319][T15389] _raw_read_lock+0x32/0x40 [ 1129.400818][T15389] do_wait+0x2a7/0xaf0 [ 1129.406880][T15389] kernel_wait+0xe5/0x230 [ 1129.413194][T15389] call_usermodehelper_exec_work+0xb5/0x220 [ 1129.421083][T15389] process_one_work+0x8a1/0x10c0 [ 1129.428017][T15389] worker_thread+0xaca/0x1280 [ 1129.434677][T15389] kthread+0x3f6/0x4f0 [ 1129.440752][T15389] ret_from_fork+0x1f/0x30 [ 1129.447163][T15389] } [ 1129.449651][T15389] ... key at: [] tasklist_lock+0x18/0x40 [ 1129.457372][T15389] ... acquired at: [ 1129.461167][T15389] lock_acquire+0x1db/0x4f0 [ 1129.465863][T15389] _raw_read_lock+0x32/0x40 [ 1129.470530][T15389] send_sigio+0xd2/0x330 [ 1129.474931][T15389] dnotify_handle_event+0x138/0x440 [ 1129.480382][T15389] fsnotify+0x1cee/0x2450 [ 1129.484873][T15389] do_iter_read+0x5e3/0x760 [ 1129.489534][T15389] do_preadv+0x211/0x350 [ 1129.493960][T15389] do_syscall_64+0x3b/0xb0 [ 1129.498543][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.504596][T15389] [ 1129.506902][T15389] [ 1129.506902][T15389] stack backtrace: [ 1129.512772][T15389] CPU: 0 PID: 15389 Comm: syz.2.2690 Not tainted 5.15.165-syzkaller #0 [ 1129.520996][T15389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1129.531042][T15389] Call Trace: [ 1129.534339][T15389] [ 1129.537283][T15389] dump_stack_lvl+0x1e3/0x2d0 [ 1129.542012][T15389] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1129.547674][T15389] ? panic+0x860/0x860 [ 1129.551799][T15389] ? print_shortest_lock_dependencies+0xee/0x150 [ 1129.558133][T15389] validate_chain+0x4d01/0x5930 [ 1129.562981][T15389] ? reacquire_held_locks+0x660/0x660 [ 1129.568349][T15389] ? __lock_acquire+0x1295/0x1ff0 [ 1129.573379][T15389] ? mark_lock+0x98/0x340 [ 1129.577695][T15389] __lock_acquire+0x1295/0x1ff0 [ 1129.582559][T15389] lock_acquire+0x1db/0x4f0 [ 1129.587050][T15389] ? send_sigio+0xd2/0x330 [ 1129.591768][T15389] ? read_lock_is_recursive+0x10/0x10 [ 1129.597136][T15389] ? _raw_read_lock_irqsave+0xac/0x120 [ 1129.602606][T15389] ? lockdep_hardirqs_off+0x70/0x100 [ 1129.607909][T15389] ? do_raw_read_lock+0x38/0x80 [ 1129.612851][T15389] ? _raw_read_lock_irqsave+0xe5/0x120 [ 1129.618313][T15389] ? _raw_read_lock+0x40/0x40 [ 1129.623078][T15389] ? __rwlock_init+0x140/0x140 [ 1129.627837][T15389] _raw_read_lock+0x32/0x40 [ 1129.632329][T15389] ? send_sigio+0xd2/0x330 [ 1129.636732][T15389] send_sigio+0xd2/0x330 [ 1129.640963][T15389] dnotify_handle_event+0x138/0x440 [ 1129.646152][T15389] ? rcu_lock_release+0x20/0x20 [ 1129.651011][T15389] fsnotify+0x1cee/0x2450 [ 1129.655371][T15389] ? __fsnotify_parent+0x730/0x730 [ 1129.660470][T15389] ? __lock_acquire+0x1295/0x1ff0 [ 1129.665481][T15389] do_iter_read+0x5e3/0x760 [ 1129.669972][T15389] ? import_iovec+0xe6/0x120 [ 1129.674548][T15389] do_preadv+0x211/0x350 [ 1129.678794][T15389] ? do_writev+0x470/0x470 [ 1129.683202][T15389] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1129.689169][T15389] ? vtime_user_exit+0x2d1/0x400 [ 1129.694103][T15389] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1129.700069][T15389] ? lockdep_hardirqs_on+0x94/0x130 [ 1129.705264][T15389] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1129.711235][T15389] do_syscall_64+0x3b/0xb0 [ 1129.715635][T15389] ? clear_bhb_loop+0x15/0x70 [ 1129.720299][T15389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.726203][T15389] RIP: 0033:0x7fd68b8f4e79 [ 1129.730665][T15389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.750257][T15389] RSP: 002b:00007fd689d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1129.758661][T15389] RAX: ffffffffffffffda RBX: 00007fd68ba91130 RCX: 00007fd68b8f4e79 [ 1129.766620][T15389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1129.774576][T15389] RBP: 00007fd68b96293e R08: 0000000000000000 R09: 0000000000000000 [ 1129.782530][T15389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.790500][T15389] R13: 0000000000000000 R14: 00007fd68ba91130 R15: 00007ffdbb3ba908 [ 1129.798484][T15389] [ 1129.892863][T15388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.906371][T15388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.925894][T15388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.168586][ T1075] usb 2-1: USB disconnect, device number 35