last executing test programs: 7m25.297126247s ago: executing program 0 (id=185): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100001) 7m24.783077649s ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 7m24.248730303s ago: executing program 0 (id=191): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000), 0x4) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x280440, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002a0001000000050029000100000008000300", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) 7m23.971807436s ago: executing program 0 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 7m23.330428099s ago: executing program 0 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 7m20.63853957s ago: executing program 0 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m19.41563994s ago: executing program 32 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m5.466993487s ago: executing program 1 (id=251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0xa4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x2, 0x7, 0x6, 0xfffb, 0x8, 0x5, 0xffff, 0x5, [{0x7, 0x9, 0x81, 0xfff}, {0x7, 0x9, 0x5, 0x2}, {0x8, 0x8, 0x8, 0x6e}, {0x1, 0x1, 0x4, 0x5}, {0xb, 0x4, 0x8, 0x6}, {0x4, 0x3, 0x1ff, 0x3}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 7m5.148923253s ago: executing program 1 (id=254): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x3506, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 7m4.094240949s ago: executing program 1 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="56c355abbfb25656ae8a254adbc339dc171b30490a7ad42beee1cc68f78a8385a4fb8d437f96cb58b8d6a6726c0e7430596065733ec05015e505f57e964a01cab2df588439b0802434212b9f81c24fad954d423a80dda784c4d408490a47e6cfb048f5", 0x63}, {&(0x7f0000000180)="623f4e67cc0c62c634ad8c6a889c76c10b8d261e9635d3b00f03c133f0c990884b180fbc7caeffc198ae6f4f953b7cb5fab2ae4c2618a983ecf70d162e7c626afb1247fa12cab36da696c7bdd4b7839ed417fb7d055cb0da1cfc13b8639d93d0f494b6e54246411c754e50ec7dcf25636a67b582e414376d4b59cf34a8dfca96ef9a5163feec8ddebd25e01d4458ba023b8cccbea8b71219fc7d7738644ac009cea5897d32285128d56e87a2542c15e32c042ed2512f017c5ac805dad39d7295ad65c0d91f0d96d059e738c8d21944a3af3276d20e31914b316088d362719b64ad045f53d76b9d4915405c7ecc83f95fa86e455a52336dc376b6682eec206340f03751ee755138b999d8664535352fe7620407637767889da2cc016651b803a6e8290cd4de8b24de609f0e3dc85bb2c10c76b762d35de22789cd1ee9ff1595d9ed5b221fbb53af0568ebae", 0x14b}], 0x2}}], 0x2, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) 7m3.288949726s ago: executing program 1 (id=258): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f9, &(0x7f0000002a80)="$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") socket(0x26, 0x6, 0x8) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x4c5c, 0x7, 0x0, {0xffffffffff7ffffc, 0x40, 0xffffffffffffffff, 0x6, 0x0, 0x80000000000006, 0x4, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x78) 7m0.270219184s ago: executing program 1 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x300800a, &(0x7f0000000180), 0x2, 0x5fb, &(0x7f00000007c0)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCykpQWUGBew1JAGP+LGjZUWRAo0tEaLJpQENybGhcaYuHIh/hdKZMtKVy7cuDIkRA1LE8fMzL1tp70zbYd2hvT+fskw955zD+fctk/Pvafn3AmgsIYr/5Qi9kfEbBIxmCwu5XVHmjlcO+7B3x+frbySKJdf/zOJJE3Ljk/S94G0cF9E/PxTEvu+WFvv3MK125MzM9NX0/3R+Uuzo3ML1w5fuDR5fvr89OXx58dPHD92/MTYkZbO63pO2umb730w+OnEW999808y9v1vE0mcjFfSA1eex1YZjuHq1yRZmzVwYqsr65Cu9Oeka0Va0t3BBrEp2fevJyKeiMHoiuVv3mB88mpHGwdsq3ISUQYKKhH/UFDZdUB2b7/6PrjUkasSoB3un6oNAKyN/+7a2GD0VccGdj9IYuWwThIRrY3M1dsTEXfvTNw8d2fiZjQdhystVwxsicUbEfFkXvwn1fgfir4YqsZ/qS7+K9F4Jn2vpL/WtJbGQbt6qHg7xuGBfLX472sa/9Eg/t9eEf/vtFj/8PLmu/118d/f6ikBAAAAAABAYd0+FRHP5f39v7Q0/ydy5v8MRMTJLah/eNX+2r//l+5tQTVAjvunIl7Knf9byubcDXWlW/+rzgfoSc5dmJk+EhH/j4hD0bOrsj/WpI7Dn+37ulHecDr/L3tV6r+bzgVM23Gve1d9manJ+cmHPW8g4v6NiKdy5/8mS/1/ktP/V34fzG6wjn3P3jrTKG/9+Ae2S/nbiIO5/f/ynN2k+fM5RqvXA6PZVcFaT3/0+Q+N6m81/j1iAh5epf/f3Tz+h5La83ouVp/XM7f5Oo4udJcb5bV6/d+bvFF95Exvmvbh5Pz81bGI3uR0VyW1Ln18822GnSiLhyxeKvF/6Jnm43951//9EbG46v9O/qpfU5x5/N+B3xu1x/U/dE4l/qc21f9vfmP81tCPjerfWP9/rNrXH0pTjP9BzVdZmPbWp+eEY3deVrvbCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7QSki9kRSGlnaLpVGRiIGIuKxGKoddO7K+5enKnnVz/8vZZ/0O1jbT7LP/x9asT++av9oROyNiC+7+qv7I2evzEx1+uQBAAAAAAAAAAAAAAAAAADgETHQYP1/xR9dnW4dsO26O90AoGNy4v+XTrQDaD/9PxSX+IfiEv9QXOIfikv8Q3GJfygu8Q/FJf4BAAAAAGBH2Xvg9q9JRCy+2F99VfSmeT0dbRmw3UqdbgDQMR7xA8WVP/VnV/r+clvbArSXe3wgWSe/r2Gh9Uo2M3v2IQoDAAAAAAAAAAAAQOEc3G/9PxSV9f9QXNb/Q3Fl6/8PtFL4ha1tC9Be7vGBqFvJv3a1f+76/1WlAAAAAAAAAAAAAIDtNbdw7eLkzMz01Z29kU1SbnbMm49GU9u5US6Xr6/3ZbGx4Y3sp2wTpUqtxmBp83Vla/02VkX7fxcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5/gsAAP//JTQbuQ==") write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, 0x24}}, 0x40080) 6m58.722610881s ago: executing program 1 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180)=[0x0, 0x2], 0xfe) 6m57.502777501s ago: executing program 33 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180)=[0x0, 0x2], 0xfe) 4m5.110470873s ago: executing program 3 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000040)=0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xffd, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sync_file_range(0xffffffffffffffff, 0x8, 0x6, 0x1) 3m52.920717495s ago: executing program 3 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="11"], 0x11) 3m51.568546766s ago: executing program 34 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="11"], 0x11) 14.667537045s ago: executing program 7 (id=1278): writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13.514350989s ago: executing program 7 (id=1281): syz_emit_ethernet(0x3a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) open(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 13.5075365s ago: executing program 6 (id=1283): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) read(r0, 0x0, 0x0) close(r0) 12.926613247s ago: executing program 6 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 11.303037581s ago: executing program 6 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0xbec, 0x7f, 0xc, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.300661351s ago: executing program 7 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xed}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0xc080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.263791636s ago: executing program 7 (id=1291): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) 10.145574476s ago: executing program 7 (id=1292): connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xdaca7de7ff4502dc, 0xa2071, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) 10.046479204s ago: executing program 5 (id=1293): socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 8.829883614s ago: executing program 4 (id=1294): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) socket$inet6(0xa, 0x1, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8.778584599s ago: executing program 5 (id=1295): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10000, &(0x7f0000003800)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r5) 8.626243771s ago: executing program 2 (id=1296): r0 = syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2, r4}]) ioctl$VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000340)={0xa, @sliced={0xf68b, [0x8, 0x8, 0x4, 0x3ff, 0x1, 0x6, 0x6, 0x5, 0x72b, 0xb, 0x9, 0x3, 0x8f, 0x5, 0x2, 0x1, 0x7, 0x4, 0x8e, 0xc07f, 0xa, 0x4f0, 0x3, 0x8, 0x3, 0x2, 0x2, 0x80, 0x1, 0x4, 0x100, 0x7ff, 0x2, 0x2, 0xea, 0x10, 0x7, 0x401, 0x40, 0x81, 0x7ff, 0xc1f, 0xffff, 0x7, 0x1, 0x6, 0x3700, 0xe], 0x6dbdcd95}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r8, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x3a0, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1aa}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x324, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x88a}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "bfab185f32b18fadf6d077018aedfae5d60ed0c4e3a5e6a701a1739558bb397714302d960efcad3d0bd640"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev\xe0\xd7*(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc366}]}]}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "e74e99e6ba11f854466ff77c3724e445167ca5910ab1aea25d2ff4c44975c762d5005907c06a77a977e13fcf4ca98719728308fc48fb142664cbc2da9646b09205022ab67581363516844b6d42880ef4396d523d6d305f47b9ef976159894018658fdb30bd563d09f7590155bc760fa5258a59dd25a2a47c79a391472e90a1c5ad41d4fdbb4da7c03727a5a1f1eb94ebd820a3e35853e370c25a72c2cbcd28fae4ae670f5e38624fb1f837c85d62a1f3daa356c56fe14267b01fdf297140d43d4bf27531104b0170"}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "33f20c5d5fedf955ed1db23963c528dc6b7c1c15b5e734d20e744da73f38432c685230c2d71f15b6883a78d3ae0f79be5c6e305af1f7e4c0712dcf935382c75de6f6c30eefcde5215d5e28612a9942c0eb331a3b5754d013268c346a55f593f1a8ebcc7d5dee6cfd4793816199fb37f0236cb0635fa7ffc7"}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x57faf52d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*,*[$/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']}]*/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xc6\xf0$\x00'}]}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000200020601080000000000000000000020080500010006000000050005000200000005000400000000000900020073797a31000000000e0003006269746d61703a6970000000"], 0x48}}, 0x0) 7.822625637s ago: executing program 4 (id=1297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 7.815691568s ago: executing program 6 (id=1298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) 7.79571152s ago: executing program 5 (id=1299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 6.422685412s ago: executing program 5 (id=1300): syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) 6.226502998s ago: executing program 4 (id=1301): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) socketpair(0x1e, 0x80004, 0x0, &(0x7f0000000cc0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.20533792s ago: executing program 2 (id=1302): r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}}, 0x24}}, 0x0) 5.985027478s ago: executing program 6 (id=1303): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) 4.755383329s ago: executing program 4 (id=1305): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24040000) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073012700000000009500008000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xfffffffe, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x46) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 4.694043064s ago: executing program 2 (id=1306): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4ee6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, 0x0}}], 0x3, 0x0) 3.65385546s ago: executing program 4 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x8007}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) 2.708572598s ago: executing program 5 (id=1308): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="9f01000083667d1040203a337acbdde138e428ff019dffae3cd16402d100000190f19cda"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2]}}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2d, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0x40c8480) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 2.708195958s ago: executing program 2 (id=1309): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "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"}) openat$audio(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1d, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f0000000180)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRES32, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x20000000) 49.356546ms ago: executing program 5 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0xbec, 0x7f, 0xc, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 49.043706ms ago: executing program 6 (id=1311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 48.835696ms ago: executing program 2 (id=1312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 48.568236ms ago: executing program 7 (id=1313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 48.355916ms ago: executing program 4 (id=1314): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000456000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xf0ffffff) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 0s ago: executing program 2 (id=1315): mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x600}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) kernel console output (not intermixed with test programs): probe:881: Enable large directory feature to access it [ 124.885253][ T4927] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.181: Corrupt directory, running e2fsck is recommended [ 125.404962][ T4935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 125.852505][ T4944] loop0: detected capacity change from 0 to 128 [ 128.768568][ T4966] loop4: detected capacity change from 0 to 1024 [ 128.861270][ T4966] EXT4-fs (loop4): filesystem is read-only [ 129.841962][ T4372] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.062107][ T4372] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.141250][ T4372] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.203714][ T4372] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.302921][ T4985] loop3: detected capacity change from 0 to 128 [ 130.520734][ T4989] loop1: detected capacity change from 0 to 512 [ 130.642008][ T4985] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.670212][ T4989] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 130.677502][ T4989] EXT4-fs (loop1): Ignoring removed bh option [ 130.822542][ T4985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.275402][ T4989] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.313226][ T4989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.363702][ T4989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.436936][ T4989] EXT4-fs (loop1): 1 truncate cleaned up [ 131.470573][ T4989] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 131.522278][ T26] audit: type=1326 audit(1753834559.055:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 131.635266][ T26] audit: type=1326 audit(1753834559.085:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 131.746754][ T26] audit: type=1326 audit(1753834559.085:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 131.774105][ T4989] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 131.916984][ T26] audit: type=1326 audit(1753834559.085:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 131.951767][ T26] audit: type=1326 audit(1753834559.085:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 132.044107][ T26] audit: type=1326 audit(1753834559.085:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 132.080302][ T26] audit: type=1326 audit(1753834559.085:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 132.103591][ T26] audit: type=1326 audit(1753834559.095:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c55d9b5ab code=0x7ffc0000 [ 132.149087][ T26] audit: type=1326 audit(1753834559.095:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c55d9b5ab code=0x7ffc0000 [ 132.262621][ T26] audit: type=1326 audit(1753834559.105:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 132.821609][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835026][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189390][ T4357] Bluetooth: hci4: command 0x0409 tx timeout [ 133.247702][ T4994] chnl_net:caif_netlink_parms(): no params data found [ 133.418904][ T5035] loop1: detected capacity change from 0 to 8192 [ 134.809151][ T5061] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.269216][ T4357] Bluetooth: hci4: command 0x041b tx timeout [ 135.781179][ T5076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.005101][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.012718][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.030179][ T4994] device bridge_slave_0 entered promiscuous mode [ 137.149176][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.156430][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.220020][ T4994] device bridge_slave_1 entered promiscuous mode [ 137.349478][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 137.368701][ T5095] loop1: detected capacity change from 0 to 8 [ 138.060554][ T5093] tipc: Started in network mode [ 138.065563][ T5093] tipc: Node identity 4, cluster identity 4711 [ 138.082905][ T5093] tipc: Node number set to 4 [ 138.113458][ T4994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.287300][ T5068] loop2: detected capacity change from 0 to 32768 [ 138.297382][ T4372] device hsr_slave_0 left promiscuous mode [ 138.305123][ T4372] device hsr_slave_1 left promiscuous mode [ 138.461691][ T5068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.225 (5068) [ 138.504433][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.550871][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.597764][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.638769][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.655613][ T5068] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.680170][ T4372] device bridge_slave_1 left promiscuous mode [ 138.700872][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.720735][ T5068] BTRFS info (device loop2): using free space tree [ 138.745713][ T5068] BTRFS info (device loop2): has skinny extents [ 138.792207][ T4372] device bridge_slave_0 left promiscuous mode [ 138.800620][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.087091][ T5068] BTRFS error (device loop2): open_ctree failed: -12 [ 139.151608][ T4372] device veth1_macvtap left promiscuous mode [ 139.158671][ T4372] device veth0_macvtap left promiscuous mode [ 139.166473][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 139.166488][ T26] audit: type=1326 audit(1753834566.705:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.189219][ T4372] device veth1_vlan left promiscuous mode [ 139.242221][ T26] audit: type=1326 audit(1753834566.745:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.248616][ T4294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4294) [ 139.283100][ T4372] device veth0_vlan left promiscuous mode [ 139.350950][ T26] audit: type=1326 audit(1753834566.745:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.439740][ T5138] Bluetooth: hci4: command 0x0419 tx timeout [ 139.482016][ T26] audit: type=1326 audit(1753834566.745:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.654862][ T26] audit: type=1326 audit(1753834566.745:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.923817][ T26] audit: type=1326 audit(1753834566.745:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 139.967407][ T26] audit: type=1326 audit(1753834566.745:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 140.936544][ T26] audit: type=1326 audit(1753834566.745:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 141.051606][ T26] audit: type=1326 audit(1753834566.745:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 141.076265][ T26] audit: type=1326 audit(1753834566.745:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f0c55d9b9a9 code=0x7ffc0000 [ 141.305087][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 141.322834][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 141.338102][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.355069][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.434746][ T4372] bond0 (unregistering): Released all slaves [ 141.506815][ T4994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.526857][ T5147] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 141.576521][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 141.738148][ T4994] team0: Port device team_slave_0 added [ 141.768726][ T4994] team0: Port device team_slave_1 added [ 141.964517][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.982165][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.692365][ T4994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.740110][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.751668][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.842191][ T4994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.293562][ T4994] device hsr_slave_0 entered promiscuous mode [ 143.762166][ T5189] syz.1.248 (5189) used greatest stack depth: 20864 bytes left [ 143.851780][ T4994] device hsr_slave_1 entered promiscuous mode [ 143.882356][ T4994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.922193][ T4994] Cannot create hsr debugfs directory [ 144.715037][ T4994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.759683][ T4994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.807770][ T4994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.858666][ T4994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.270590][ T4994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.546928][ T4994] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.677507][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.687510][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.758561][ T5272] net_ratelimit: 991 callbacks suppressed [ 145.758582][ T5272] netlink: zone id is out of range [ 145.790456][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.850221][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.864309][ T5272] netlink: zone id is out of range [ 145.886497][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.893744][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.905406][ T5272] netlink: zone id is out of range [ 145.927771][ T5272] netlink: zone id is out of range [ 145.952503][ T5272] netlink: zone id is out of range [ 145.966541][ T5272] netlink: zone id is out of range [ 145.982174][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.038287][ T5272] netlink: zone id is out of range [ 146.043630][ T5272] netlink: zone id is out of range [ 146.048983][ T5272] netlink: zone id is out of range [ 146.054345][ T5272] netlink: zone id is out of range [ 146.089212][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.147406][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.154615][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.492033][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.186006][ T5287] loop1: detected capacity change from 0 to 512 [ 147.299199][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.330269][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.461490][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.482209][ T5287] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 148.503823][ T5287] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.553654][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.578188][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 148.602115][ T5287] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.258: corrupted inode contents [ 148.622662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.650022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.680801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.705076][ T5287] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.258: mark_inode_dirty error [ 148.722913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.747437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.776842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.792373][ T5287] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.258: corrupted inode contents [ 148.825040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.853676][ T5287] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.258: mark_inode_dirty error [ 148.872188][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.210628][ T4183] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 149.283967][ T4294] udevd[4294]: incorrect jbd checksum on /dev/loop1 [ 149.319909][ T4183] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz-executor: path /52/bus: directory fails checksum at offset 0 [ 149.391858][ T5329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.265'. [ 150.320227][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 150.387926][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.401573][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.548193][ T4994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.737294][ T4183] syz-executor (4183) used greatest stack depth: 20704 bytes left [ 152.021380][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.077620][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.203031][ T4994] device veth0_vlan entered promiscuous mode [ 152.300374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.663518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.730069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.749101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.777011][ T5371] loop3: detected capacity change from 0 to 256 [ 153.800232][ T4994] device veth1_vlan entered promiscuous mode [ 153.825117][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 153.876889][ T5371] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.934468][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.973705][ T5371] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 153.979979][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.989296][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.010031][ T5371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.047565][ T4994] device veth0_macvtap entered promiscuous mode [ 154.085228][ T4994] device veth1_macvtap entered promiscuous mode [ 154.157249][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.187028][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.215635][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.238613][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.255174][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.259066][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 154.266562][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.287807][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.300242][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.313630][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.329012][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.346360][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.366243][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.387102][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.411983][ T1108] usb 5-1: config index 0 descriptor too short (expected 19730, got 18) [ 154.420418][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.420440][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.420451][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.460920][ T1108] usb 5-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 154.471155][ T1108] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 54 [ 154.485490][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.495680][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.526044][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.536689][ T4994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.548106][ T4994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.560469][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.590087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.602366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.621938][ T4994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.639057][ T4994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.639227][ T1108] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 154.658140][ T4994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.683896][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.697848][ T4994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.706881][ T1108] usb 5-1: Product: syz [ 154.706902][ T1108] usb 5-1: Manufacturer: syz [ 154.706918][ T1108] usb 5-1: SerialNumber: syz [ 154.725802][ T1108] usb 5-1: config 0 descriptor?? [ 156.709468][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 156.794895][ T4372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.999302][ T5136] usb 5-1: USB disconnect, device number 3 [ 157.232097][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.379883][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.485786][ T4372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.639530][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.785269][ T4372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.864954][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.912956][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.975369][ T4372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.024034][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 158.066138][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.779270][ T5136] Bluetooth: hci0: command 0x041b tx timeout [ 160.869055][ T5135] Bluetooth: hci0: command 0x040f tx timeout [ 160.876253][ T5451] loop3: detected capacity change from 0 to 16 [ 160.917648][ T5451] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.983257][ T5451] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.091634][ T5449] loop2: detected capacity change from 0 to 8192 [ 161.171329][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.232850][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.338745][ T5372] device bridge_slave_0 entered promiscuous mode [ 161.391699][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.398818][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.572638][ T5372] device bridge_slave_1 entered promiscuous mode [ 161.751774][ T5135] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.309119][ T5135] usb 4-1: Using ep0 maxpacket: 8 [ 162.339856][ T4372] bond0: (slave ip6gretap1): Releasing backup interface [ 163.861596][ T5135] usb 4-1: config index 0 descriptor too short (expected 19730, got 18) [ 163.953083][ T5135] usb 4-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 163.963493][ T5478] loop2: detected capacity change from 0 to 512 [ 163.931619][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.998542][ T5135] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 54 [ 164.004749][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.186895][ T5134] Bluetooth: hci0: command 0x0419 tx timeout [ 164.223761][ T5478] EXT4-fs (loop2): Ignoring removed nobh option [ 164.585148][ T5478] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.296: iget: bad i_size value: 38620345925642 [ 164.625067][ T5372] team0: Port device team_slave_0 added [ 164.864251][ T5372] team0: Port device team_slave_1 added [ 164.889425][ T5478] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.296: couldn't read orphan inode 15 (err -117) [ 164.959623][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 165.206383][ T5135] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 165.217114][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.225311][ T5135] usb 4-1: Product: syz [ 165.256306][ T5135] usb 4-1: config 0 descriptor?? [ 165.305545][ T5135] usb 4-1: can't set config #0, error -71 [ 165.772187][ T5135] usb 4-1: USB disconnect, device number 2 [ 165.776436][ T5493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.296: bg 0: block 5: invalid block bitmap [ 165.797846][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.813064][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.841951][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.865492][ T5493] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 516 with error 28 [ 166.016607][ T5493] EXT4-fs (loop2): This should not happen!! Data will be lost [ 166.016607][ T5493] [ 166.053888][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.075064][ T5493] EXT4-fs (loop2): Total free blocks count 0 [ 166.088647][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.119410][ T5493] EXT4-fs (loop2): Free/Dirty block details [ 166.125415][ T5493] EXT4-fs (loop2): free_blocks=0 [ 166.137478][ T5493] EXT4-fs (loop2): dirty_blocks=520 [ 166.175986][ T5493] EXT4-fs (loop2): Block reservation details [ 166.196417][ T5493] EXT4-fs (loop2): i_reserved_data_blocks=520 [ 166.204517][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.828136][ T5372] device hsr_slave_0 entered promiscuous mode [ 167.230822][ T5372] device hsr_slave_1 entered promiscuous mode [ 167.272788][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.295990][ T5372] Cannot create hsr debugfs directory [ 169.382839][ T5540] loop4: detected capacity change from 0 to 256 [ 169.511928][ T5540] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.560592][ T5540] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 169.729297][ T5540] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 169.785218][ T5545] netlink: 92 bytes leftover after parsing attributes in process `syz.2.311'. [ 170.011403][ T4372] device hsr_slave_0 left promiscuous mode [ 170.054193][ T4372] device hsr_slave_1 left promiscuous mode [ 170.072185][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.302637][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.721563][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.746450][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.789165][ T4372] device bridge_slave_1 left promiscuous mode [ 170.816009][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.848822][ T4372] device bridge_slave_0 left promiscuous mode [ 170.876888][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.992987][ T4372] device veth1_macvtap left promiscuous mode [ 171.010516][ T4372] device veth0_macvtap left promiscuous mode [ 171.028692][ T4372] device veth1_vlan left promiscuous mode [ 171.055031][ T4372] device veth0_vlan left promiscuous mode [ 171.508811][ T5567] loop5: detected capacity change from 0 to 512 [ 171.584921][ T5567] EXT4-fs (loop5): Ignoring removed nobh option [ 171.633730][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 171.666719][ T5567] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.315: iget: bad i_size value: 38620345925642 [ 171.772891][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 171.788559][ T5567] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.315: couldn't read orphan inode 15 (err -117) [ 171.827968][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.837382][ T5567] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 171.926200][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.091498][ T4372] bond0 (unregistering): Released all slaves [ 172.124860][ T5567] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.315: bg 0: block 5: invalid block bitmap [ 172.146279][ T5567] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 676 with error 28 [ 172.165657][ T5567] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.165657][ T5567] [ 172.175696][ T5567] EXT4-fs (loop5): Total free blocks count 0 [ 172.188292][ T5567] EXT4-fs (loop5): Free/Dirty block details [ 172.195393][ T5567] EXT4-fs (loop5): free_blocks=0 [ 172.256340][ T5567] EXT4-fs (loop5): dirty_blocks=676 [ 172.292537][ T5567] EXT4-fs (loop5): Block reservation details [ 172.320949][ T5558] lo speed is unknown, defaulting to 1000 [ 172.327938][ T5558] lo speed is unknown, defaulting to 1000 [ 172.352688][ T5567] EXT4-fs (loop5): i_reserved_data_blocks=676 [ 172.373584][ T5571] device vlan3 entered promiscuous mode [ 172.427202][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 172.613391][ T5558] lo speed is unknown, defaulting to 1000 [ 172.616055][ T5372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.654930][ T5372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.662189][ T5558] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.688754][ T5372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.766944][ T5372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.782017][ T5558] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.932216][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 172.990866][ T5596] loop5: detected capacity change from 0 to 512 [ 173.122975][ T5596] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.138428][ T5558] lo speed is unknown, defaulting to 1000 [ 173.152582][ T5558] lo speed is unknown, defaulting to 1000 [ 173.156914][ T5596] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 173.170664][ T5558] lo speed is unknown, defaulting to 1000 [ 173.177570][ T5558] lo speed is unknown, defaulting to 1000 [ 173.231508][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.249882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.257264][ T5596] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.318: Corrupt directory, running e2fsck is recommended [ 173.258130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.281296][ T5596] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 173.309208][ T5596] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.318: corrupted in-inode xattr [ 173.326873][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.409500][ T5372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.439108][ T5372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.509115][ T5596] EXT4-fs (loop5): Remounting filesystem read-only [ 173.525603][ T5558] lo speed is unknown, defaulting to 1000 [ 173.541532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.560088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.569014][ T5596] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.318: couldn't read orphan inode 15 (err -117) [ 173.599504][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.606913][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.644348][ T5596] EXT4-fs (loop5): Remounting filesystem read-only [ 173.677068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.702367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.714618][ T5596] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,discard,auto_da_alloc,grpjquota=.usrjquota=,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 173.737699][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.744853][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.793468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.843279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.943462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.023304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.032145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.041740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.050402][ T5611] loop4: detected capacity change from 0 to 32768 [ 174.057989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.058485][ T5615] loop3: detected capacity change from 0 to 256 [ 174.067490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.082084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.109680][ T5611] XFS: ikeep mount option is deprecated. [ 174.121975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.149711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.307562][ T5615] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.377310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.419540][ T5626] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.431259][ T5626] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 174.441589][ T5626] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.318: Corrupt directory, running e2fsck is recommended [ 174.456558][ T5626] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.468453][ T5626] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 174.478891][ T5626] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.318: Corrupt directory, running e2fsck is recommended [ 174.559807][ T5611] XFS (loop4): Mounting V5 Filesystem [ 174.628990][ T5615] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 174.684975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.750439][ T5615] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 174.832181][ T5611] XFS (loop4): Ending clean mount [ 174.848413][ T5611] XFS (loop4): Quotacheck needed: Please wait. [ 175.053452][ T5611] XFS (loop4): Quotacheck: Done. [ 176.044920][ T4190] XFS (loop4): Unmounting Filesystem [ 176.066338][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.079109][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.138793][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.893719][ T5640] loop5: detected capacity change from 0 to 2048 [ 178.646167][ T5640] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.737802][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.770139][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.801455][ T5661] loop3: detected capacity change from 0 to 512 [ 178.846651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.892566][ T5661] EXT4-fs (loop3): Ignoring removed nobh option [ 178.901976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.958278][ T5372] device veth0_vlan entered promiscuous mode [ 178.967866][ T5661] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.328: iget: bad i_size value: 38620345925642 [ 178.980091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.988532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.101762][ T5372] device veth1_vlan entered promiscuous mode [ 179.149480][ T5661] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.328: couldn't read orphan inode 15 (err -117) [ 179.259736][ T5661] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 179.773180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.270944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.369999][ T5372] device veth0_macvtap entered promiscuous mode [ 180.435972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.467326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.566010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.299295][ T5372] device veth1_macvtap entered promiscuous mode [ 181.376383][ T5675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.328: bg 0: block 5: invalid block bitmap [ 181.655151][ T5675] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1480 with error 28 [ 181.676212][ T5675] EXT4-fs (loop3): This should not happen!! Data will be lost [ 181.676212][ T5675] [ 181.687566][ T5675] EXT4-fs (loop3): Total free blocks count 0 [ 181.694472][ T5675] EXT4-fs (loop3): Free/Dirty block details [ 181.702236][ T5675] EXT4-fs (loop3): free_blocks=0 [ 181.707525][ T5675] EXT4-fs (loop3): dirty_blocks=1484 [ 181.712722][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.714049][ T5675] EXT4-fs (loop3): Block reservation details [ 181.731285][ T5675] EXT4-fs (loop3): i_reserved_data_blocks=1484 [ 181.798622][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.888970][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.899285][ T5696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.918145][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.985453][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.026054][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.103595][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.114379][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.126640][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.137202][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.148911][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.158751][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.202860][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.216238][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.230293][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.246919][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.378369][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.600350][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.140549][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.212659][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.254223][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.291889][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.414690][ T5372] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.490706][ T5372] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.504393][ T5372] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.516531][ T5372] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.730007][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.779034][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.024848][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.029112][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.041651][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.080862][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.127427][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): rose5: link becomes ready [ 187.982403][ T5765] kthread_run failed with err -4 [ 188.262166][ T5786] capability: warning: `syz.4.358' uses 32-bit capabilities (legacy support in use) [ 190.503489][ T5812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.564935][ T5812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.729238][ T5812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.741346][ T5812] net_ratelimit: 23 callbacks suppressed [ 190.741364][ T5812] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.764853][ C0] Illegal XDP return value 16128, expect packet loss! [ 190.783250][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.802984][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.815672][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.847059][ T5814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.179044][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 191.185543][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 191.427241][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 191.470482][ T5818] loop2: detected capacity change from 0 to 764 [ 191.670019][ T5834] loop6: detected capacity change from 0 to 128 [ 192.277207][ T5834] EXT4-fs (loop6): Ignoring removed nobh option [ 192.381129][ T5834] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 192.483971][ T5834] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.683444][ T5849] loop3: detected capacity change from 0 to 2048 [ 192.692712][ T5851] mmap: syz.2.374 (5851): VmData 49119232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 192.708209][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.375'. [ 192.801558][ T5849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.239535][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245939][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.409024][ T5139] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 195.368976][ T5139] usb 7-1: Using ep0 maxpacket: 16 [ 195.509605][ T5139] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 195.529231][ T5139] usb 7-1: config 0 has no interface number 0 [ 195.739557][ T5139] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 195.971263][ T5893] lo speed is unknown, defaulting to 1000 [ 196.423390][ T5139] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.491179][ T5139] usb 7-1: Product: syz [ 196.515033][ T5139] usb 7-1: Manufacturer: syz [ 196.793359][ T5139] usb 7-1: SerialNumber: syz [ 196.800209][ T5139] usb 7-1: config 0 descriptor?? [ 196.917699][ T5139] usb 7-1: bad CDC descriptors [ 197.111106][ T5139] usb 7-1: USB disconnect, device number 2 [ 197.940461][ T5917] MPTCP: kernel_bind error, err=-98 [ 198.129735][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 198.177346][ T5914] netlink: 80 bytes leftover after parsing attributes in process `syz.2.390'. [ 200.069738][ T5950] capability: warning: `syz.4.400' uses deprecated v2 capabilities in a way that may be insecure [ 200.127575][ T5951] loop6: detected capacity change from 0 to 2048 [ 200.956101][ T5951] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.998045][ T5951] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.496497][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.413'. [ 202.864986][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 202.865001][ T26] audit: type=1107 audit(1753834630.395:223): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 204.304587][ T6023] syz.3.414 sent an empty control message without MSG_MORE. [ 205.620941][ T6032] netlink: 'syz.3.417': attribute type 3 has an invalid length. [ 206.428305][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 207.504084][ T6051] netlink: 276 bytes leftover after parsing attributes in process `syz.6.422'. [ 207.758926][ T5136] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.950532][ T6061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.005843][ T5136] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.109076][ T5136] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 210.313739][ T5136] usb 4-1: can't read configurations, error -71 [ 215.180301][ T6123] loop3: detected capacity change from 0 to 4096 [ 215.305782][ T6123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.484101][ T6148] loop3: detected capacity change from 0 to 40427 [ 216.500249][ T6148] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 216.508417][ T6148] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 216.522076][ T6148] F2FS-fs (loop3): invalid crc value [ 216.553368][ T6148] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.623345][ T6148] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 216.630884][ T6148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.888030][ T6161] loop2: detected capacity change from 0 to 256 [ 217.864520][ T6161] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 222.408297][ T6217] loop5: detected capacity change from 0 to 8192 [ 223.978013][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 224.856002][ T6238] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 224.902379][ T6238] FAT-fs (loop5): Filesystem has been set read-only [ 224.926475][ T6239] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 224.931938][ T6250] loop4: detected capacity change from 0 to 512 [ 225.058366][ T6217] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 225.436235][ T6260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.452093][ T6269] loop2: detected capacity change from 0 to 256 [ 227.211709][ T6282] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 228.503338][ T6301] netlink: 'syz.5.477': attribute type 3 has an invalid length. [ 228.845079][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 230.404807][ T6324] loop3: detected capacity change from 0 to 256 [ 230.462318][ T5136] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 230.472301][ T5136] Bluetooth: hci4: Injecting HCI hardware error event [ 231.212425][ T4184] Bluetooth: hci4: hardware error 0x00 [ 231.468908][ T5136] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 232.746630][ T6354] loop3: detected capacity change from 0 to 32768 [ 232.799138][ T5136] usb 7-1: Using ep0 maxpacket: 8 [ 232.836838][ T6354] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 232.845835][ T6354] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 232.873883][ T6354] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 232.900940][ T5138] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 232.908259][ T5138] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 232.929918][ T5136] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.949110][ T5136] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.958042][ T5136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 232.985701][ T5136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 233.000248][ T5136] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 233.010520][ T5138] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 233.019342][ T5136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.031375][ T5138] gfs2: fsid=syz:syz.0: jid=0: Done [ 233.039979][ T6354] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 233.054096][ T6354] attempt to access beyond end of device [ 233.054096][ T6354] loop3: rw=12288, want=9007199254757624, limit=32768 [ 233.066839][ T6354] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 233.160006][ T5136] hub 7-1:1.0: bad descriptor, ignoring hub [ 233.165987][ T5136] hub: probe of 7-1:1.0 failed with error -5 [ 233.179169][ T5136] cdc_wdm 7-1:1.0: skipping garbage [ 233.184544][ T5136] cdc_wdm 7-1:1.0: skipping garbage [ 233.197184][ T5136] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 233.203193][ T5136] cdc_wdm 7-1:1.0: Unknown control protocol [ 233.526289][ T4231] usb 7-1: USB disconnect, device number 3 [ 234.150241][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.203346][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.715999][ T6346] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.725054][ T6346] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.734391][ T6346] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.743511][ T6346] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.926722][ T6346] syz.2.487 (6346) used greatest stack depth: 20672 bytes left [ 235.402456][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 236.107501][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 236.134664][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 236.151465][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 236.161810][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 236.357469][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 237.336476][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 237.593616][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 237.604065][ T6395] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 238.909382][ T6429] netlink: 'syz.4.507': attribute type 12 has an invalid length. [ 240.598944][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 240.917990][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 241.848009][ T6458] loop4: detected capacity change from 0 to 40427 [ 242.040067][ T6458] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 242.047976][ T6458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 242.060929][ T6458] F2FS-fs (loop4): invalid crc value [ 242.104787][ T6458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.219659][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.277136][ T6458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.284927][ T6458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.752646][ T4231] usb 3-1: config 0 has no interfaces? [ 243.539257][ T4231] usb 3-1: string descriptor 0 read error: -71 [ 243.576471][ T4231] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 243.705837][ T6485] loop2: detected capacity change from 0 to 256 [ 243.716501][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.780064][ T4231] usb 3-1: config 0 descriptor?? [ 243.809418][ T6482] loop3: detected capacity change from 0 to 2048 [ 243.818480][ T4231] usb 3-1: can't set config #0, error -71 [ 243.834407][ T4231] usb 3-1: USB disconnect, device number 2 [ 243.901525][ T6482] EXT4-fs (loop3): failed to initialize system zone (-117) [ 243.987653][ T6482] EXT4-fs (loop3): mount failed [ 244.306222][ T6505] loop2: detected capacity change from 0 to 512 [ 244.330262][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 244.398054][ T6505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.479998][ T6505] EXT4-fs (loop2): 1 truncate cleaned up [ 244.493932][ T6505] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 244.851613][ T6518] netlink: 'syz.6.524': attribute type 12 has an invalid length. [ 244.906119][ T6519] loop2: detected capacity change from 0 to 1024 [ 249.368638][ T5136] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.348476][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.508898][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.591327][ T5136] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.612980][ T26] audit: type=1326 audit(1753837256.148:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 250.668253][ T5136] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.688009][ T26] audit: type=1326 audit(1753837256.178:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 250.714141][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.823149][ T5136] usb 6-1: config 0 descriptor?? [ 250.838267][ T26] audit: type=1326 audit(1753837256.188:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 250.861572][ T26] audit: type=1326 audit(1753837256.188:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 250.889371][ T26] audit: type=1326 audit(1753837256.188:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 251.000506][ T6605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.080200][ T26] audit: type=1326 audit(1753837256.198:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 251.296122][ T26] audit: type=1326 audit(1753837256.198:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 251.731637][ T26] audit: type=1326 audit(1753837256.198:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 251.853220][ T26] audit: type=1326 audit(1753837256.198:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 251.892796][ T26] audit: type=1326 audit(1753837256.198:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 252.108364][ T5136] usbhid 6-1:0.0: can't add hid device: -71 [ 252.114609][ T5136] usbhid: probe of 6-1:0.0 failed with error -71 [ 252.541129][ T5136] usb 6-1: USB disconnect, device number 2 [ 252.630471][ T6616] loop3: detected capacity change from 0 to 128 [ 252.865979][ T6616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.882942][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.936603][ T6616] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.028876][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038973][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.539109][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 256.577964][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 262.976863][ T6762] MPTCP: addr_signal error, add_addr=1, echo=0 [ 264.026752][ T6787] loop6: detected capacity change from 0 to 1024 [ 268.538334][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 268.571428][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 272.251713][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.6.596'. [ 274.108796][ T6878] 9pnet: Insufficient options for proto=fd [ 274.356575][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.602'. [ 275.806451][ T6915] loop5: detected capacity change from 0 to 1024 [ 276.629694][ T6906] loop2: detected capacity change from 0 to 4096 [ 276.717443][ T6906] ntfs3: Unknown parameter 'hide^dot_files' [ 276.904157][ T6915] hfsplus: invalid extended attribute record [ 277.535313][ T6906] loop2: detected capacity change from 0 to 4096 [ 277.585940][ T6756] hfsplus: b-tree write err: -5, ino 4 [ 280.474761][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 280.505720][ T6965] loop6: detected capacity change from 0 to 2048 [ 280.548793][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 281.034532][ T6967] HTB: quantum of class 800B000C is small. Consider r2q change. [ 281.078842][ T6965] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 281.140441][ T6965] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.530562][ T6989] kthread_run failed with err -4 [ 282.685889][ T6965] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.620: bg 0: block 345: padding at end of block bitmap is not set [ 283.780942][ T7005] loop2: detected capacity change from 0 to 4096 [ 284.042383][ T7005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.723944][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.731397][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.814129][ T7006] device bond_slave_0 left promiscuous mode [ 287.820843][ T7006] device bond_slave_1 left promiscuous mode [ 289.989960][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.002624][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.091717][ T7006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.100892][ T7006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.111770][ T7006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.121146][ T7006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.196211][ T13] lo speed is unknown, defaulting to 1000 [ 290.220383][ T7038] lo speed is unknown, defaulting to 1000 [ 290.230800][ T7048] device bridge1 entered promiscuous mode [ 290.301948][ T7048] team0: Port device bridge1 added [ 290.333809][ T7038] lo speed is unknown, defaulting to 1000 [ 290.371007][ T7038] lo speed is unknown, defaulting to 1000 [ 290.409174][ T7038] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 290.474643][ T7038] lo speed is unknown, defaulting to 1000 [ 290.506532][ T7038] lo speed is unknown, defaulting to 1000 [ 290.540430][ T7038] lo speed is unknown, defaulting to 1000 [ 291.779161][ T7038] lo speed is unknown, defaulting to 1000 [ 291.832373][ T7038] lo speed is unknown, defaulting to 1000 [ 293.850674][ T7099] lo speed is unknown, defaulting to 1000 [ 293.872504][ T7099] lo speed is unknown, defaulting to 1000 [ 296.658145][ T7139] loop9: detected capacity change from 0 to 7 [ 296.750232][ T7142] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 296.956772][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.968085][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 296.993033][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.004012][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.023311][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.034289][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.069432][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 297.069448][ T26] audit: type=1326 audit(1753837302.593:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 297.120001][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.131154][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.142780][ T26] audit: type=1326 audit(1753837302.603:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 297.168398][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.179400][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.189364][ T7154] cgroup: Unknown subsys name 'obj_role' [ 297.529146][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.540223][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.895665][ T26] audit: type=1326 audit(1753837302.603:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 298.137971][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.149065][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 298.157590][ T7139] ldm_validate_partition_table(): Disk read failed. [ 298.195062][ T26] audit: type=1326 audit(1753837302.603:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 299.998168][ T26] audit: type=1326 audit(1753837302.603:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 300.113818][ T7168] loop5: detected capacity change from 0 to 2048 [ 300.376699][ T26] audit: type=1326 audit(1753837302.643:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 300.515258][ T7168] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.688608][ T26] audit: type=1326 audit(1753837302.643:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 300.835265][ T26] audit: type=1326 audit(1753837302.643:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 300.915433][ T26] audit: type=1326 audit(1753837302.643:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 301.001079][ T26] audit: type=1326 audit(1753837302.643:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d952cb9a9 code=0x7ffc0000 [ 301.216195][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.227339][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 301.247975][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.258950][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 301.532420][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.543918][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 301.562417][ T7139] Dev loop9: unable to read RDB block 0 [ 302.534925][ C0] print_req_error: 1 callbacks suppressed [ 302.534944][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 302.551646][ C0] buffer_io_error: 1 callbacks suppressed [ 302.551663][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.340856][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.351858][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.354349][ T7195] netlink: 'syz.3.672': attribute type 32 has an invalid length. [ 303.377093][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.388113][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.396426][ T7139] loop9: unable to read partition table [ 303.407402][ T7139] loop9: partition table beyond EOD, truncated [ 303.424153][ T7196] loop4: detected capacity change from 0 to 256 [ 303.432794][ T7201] loop6: detected capacity change from 0 to 512 [ 303.446596][ T7139] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 303.446596][ T7139] ) failed (rc=-5) [ 303.462602][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.473610][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.523080][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.534105][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.578030][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.589421][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.608311][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.619341][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.632570][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.643859][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 303.677296][ T7196] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 303.752190][ T7201] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 304.536333][ T7201] EXT4-fs (loop6): invalid journal inode [ 304.569925][ T7201] EXT4-fs (loop6): can't get journal size [ 305.658095][ T7201] EXT4-fs (loop6): 1 truncate cleaned up [ 305.668998][ T7201] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 306.076399][ T7237] loop3: detected capacity change from 0 to 512 [ 306.361110][ T7245] loop2: detected capacity change from 0 to 8 [ 306.408230][ T7237] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 306.450902][ T7237] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.483350][ T7245] unable to read id index table [ 306.590092][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 306.590111][ T26] audit: type=1800 audit(1753837312.124:282): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.679" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 306.704732][ T7234] loop2: detected capacity change from 0 to 128 [ 306.829624][ T7234] FAT-fs (loop2): bogus number of FAT sectors [ 306.894625][ T7234] FAT-fs (loop2): Can't find a valid FAT filesystem [ 308.335968][ T7279] usb usb1: usbfs: process 7279 (syz.6.687) did not claim interface 6 before use [ 308.388418][ T7279] loop6: detected capacity change from 0 to 256 [ 309.556925][ T7285] kvm: pic: level sensitive irq not supported [ 309.576742][ T7285] kvm: pic: single mode not supported [ 309.645738][ T7293] loop2: detected capacity change from 0 to 1024 [ 309.847091][ T7308] loop4: detected capacity change from 0 to 256 [ 309.871869][ T7293] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,noquota,nobarrier,abort,user_xattr,norecovery,errors=remount-ro,. Quota mode: none. [ 312.507818][ T7330] loop3: detected capacity change from 0 to 512 [ 312.682669][ T7336] loop2: detected capacity change from 0 to 1024 [ 312.742473][ T7336] EXT4-fs (loop2): inline encryption not supported [ 312.749637][ T7336] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.548546][ T7336] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 317.147498][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.153894][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.688404][ T7375] ceph: No mds server is up or the cluster is laggy [ 320.119555][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.712'. [ 323.383805][ T7427] netlink: 'syz.6.718': attribute type 1 has an invalid length. [ 323.508608][ T7427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.708327][ T7429] device veth3 entered promiscuous mode [ 323.892936][ T7429] bond1: (slave veth3): Enslaving as an active interface with a down link [ 324.299224][ T7424] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 324.443906][ T7440] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 325.122581][ T4193] libceph: connect (1)[c::]:6789 error -101 [ 325.194057][ T4193] libceph: mon0 (1)[c::]:6789 connect error [ 325.584377][ T7451] ceph: No mds server is up or the cluster is laggy [ 327.220224][ T7486] netlink: zone id is out of range [ 329.762067][ T7512] loop5: detected capacity change from 0 to 2048 [ 330.644438][ T7519] loop3: detected capacity change from 0 to 2048 [ 330.785611][ T7519] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 330.822277][ T7512] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 330.889016][ T7519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.159583][ T7524] loop6: detected capacity change from 0 to 4096 [ 332.356671][ T7524] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 332.648164][ T7549] loop5: detected capacity change from 0 to 256 [ 334.068041][ T5372] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 334.078052][ T4189] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 334.714330][ T5372] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 334.758656][ T4189] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 334.982673][ T7560] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 335.000734][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 335.343933][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 336.075801][ T7574] loop6: detected capacity change from 0 to 128 [ 336.228931][ T7574] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 336.305462][ T7574] nftables ruleset with unbound chain [ 336.387426][ T7560] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 336.397373][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 336.445348][ T7574] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 336.495939][ T7578] tipc: Started in network mode [ 336.504776][ T7578] tipc: Node identity 4, cluster identity 4711 [ 336.551114][ T7578] tipc: Node number set to 4 [ 336.739235][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.495107][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.651388][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.677757][ T7634] loop6: detected capacity change from 0 to 256 [ 339.820807][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.761'. [ 340.850851][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.524601][ T7650] lo speed is unknown, defaulting to 1000 [ 341.558796][ T7650] lo speed is unknown, defaulting to 1000 [ 342.583458][ T7660] loop4: detected capacity change from 0 to 40427 [ 342.640122][ T7660] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 342.647984][ T7660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 342.662978][ T7660] F2FS-fs (loop4): Unrecognized mount option "& ؼg.fsync_mode=posix" or missing value [ 343.557163][ T4357] Bluetooth: hci2: command 0x0409 tx timeout [ 344.636405][ T144] tipc: Left network mode [ 345.120371][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 345.941827][ T4193] Bluetooth: hci2: command 0x041b tx timeout [ 347.307001][ T7709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.315119][ T7709] IPv6: NLM_F_CREATE should be set when creating new route [ 347.466665][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.473781][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.912751][ T7650] device bridge_slave_0 entered promiscuous mode [ 347.964022][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.031495][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.084392][ T7650] device bridge_slave_1 entered promiscuous mode [ 348.126519][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 348.237486][ T7724] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 348.348755][ T7728] netlink: 'syz.6.778': attribute type 16 has an invalid length. [ 348.381743][ T7728] netlink: 'syz.6.778': attribute type 3 has an invalid length. [ 348.390155][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.6.778'. [ 349.260372][ T7734] loop4: detected capacity change from 0 to 4096 [ 349.585957][ T7734] ntfs: volume version 3.1. [ 349.974642][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.206276][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 350.342321][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.789360][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 351.010594][ T7754] loop5: detected capacity change from 0 to 256 [ 351.037301][ T7650] team0: Port device team_slave_0 added [ 351.045644][ T7650] team0: Port device team_slave_1 added [ 351.435393][ T7754] FAT-fs (loop5): Directory bread(block 64) failed [ 351.637125][ T7760] loop2: detected capacity change from 0 to 256 [ 351.655414][ T7754] FAT-fs (loop5): Directory bread(block 65) failed [ 351.807829][ T7754] FAT-fs (loop5): Directory bread(block 66) failed [ 351.867741][ T7760] exfat: Unknown parameter '0xffffffffffffffff0177777777777777777777701777777777777777777777' [ 351.878320][ T7754] FAT-fs (loop5): Directory bread(block 67) failed [ 351.878472][ T7754] FAT-fs (loop5): Directory bread(block 68) failed [ 351.878505][ T7754] FAT-fs (loop5): Directory bread(block 69) failed [ 351.878576][ T7754] FAT-fs (loop5): Directory bread(block 70) failed [ 351.878608][ T7754] FAT-fs (loop5): Directory bread(block 71) failed [ 351.878684][ T7754] FAT-fs (loop5): Directory bread(block 72) failed [ 351.921549][ T7754] FAT-fs (loop5): Directory bread(block 73) failed [ 351.938094][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.945227][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.301948][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.349522][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.372616][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.423353][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.919005][ T7650] device hsr_slave_0 entered promiscuous mode [ 353.029828][ T7650] device hsr_slave_1 entered promiscuous mode [ 353.682383][ T26] audit: type=1326 audit(1753837359.230:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 353.779586][ T26] audit: type=1326 audit(1753837359.260:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 353.884348][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.933370][ T26] audit: type=1326 audit(1753837359.260:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 353.957777][ T26] audit: type=1326 audit(1753837359.260:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 353.984369][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.157800][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.330118][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.491135][ T26] audit: type=1326 audit(1753837359.260:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 354.799523][ T26] audit: type=1326 audit(1753837359.260:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 354.835614][ T26] audit: type=1326 audit(1753837359.260:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 354.908899][ T144] device bridge_slave_1 left promiscuous mode [ 354.909196][ T26] audit: type=1326 audit(1753837359.260:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 354.936325][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.185552][ T26] audit: type=1326 audit(1753837359.260:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 355.217411][ T144] device bridge_slave_0 left promiscuous mode [ 355.225861][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.247649][ T26] audit: type=1326 audit(1753837359.260:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f63ba4519a9 code=0x7ffc0000 [ 356.150005][ T144] device veth1_macvtap left promiscuous mode [ 356.172868][ T144] device veth0_macvtap left promiscuous mode [ 356.196477][ T144] device veth1_vlan left promiscuous mode [ 356.242490][ T144] device veth0_vlan left promiscuous mode [ 357.696181][ T144] team0 (unregistering): Port device team_slave_1 removed [ 357.729897][ T144] team0 (unregistering): Port device team_slave_0 removed [ 357.762771][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.773959][ T144] device bond_slave_1 left promiscuous mode [ 357.790714][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.801996][ T144] device bond_slave_0 left promiscuous mode [ 357.899359][ T144] bond0 (unregistering): Released all slaves [ 358.010203][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.799'. [ 358.123094][ T7840] loop6: detected capacity change from 0 to 512 [ 358.488374][ T7840] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 358.842492][ T7840] EXT4-fs (loop6): 1 truncate cleaned up [ 358.921350][ T7840] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.006297][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 359.006311][ T26] audit: type=1800 audit(1753837364.561:310): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.801" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 360.035900][ T7869] loop2: detected capacity change from 0 to 256 [ 360.054391][ T7650] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.118860][ T7650] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.194495][ T7650] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.252696][ T7650] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 363.824320][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.866800][ T7919] loop2: detected capacity change from 0 to 512 [ 363.897896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.917191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.924937][ T7919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.998777][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.058203][ T7919] EXT4-fs (loop2): 1 truncate cleaned up [ 364.078847][ T7919] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 364.242533][ T7929] loop6: detected capacity change from 0 to 128 [ 364.301349][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.322313][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.349049][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.356482][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.100048][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.109276][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.124678][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.131827][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.137071][ T7929] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.155005][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.226700][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.245156][ T7939] MPTCP: addr_signal error, add_addr=1, echo=0 [ 365.247224][ T7929] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.289823][ T7939] siw: device registration error -23 [ 365.298144][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.365920][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.412380][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.441728][ T7945] netlink: 64 bytes leftover after parsing attributes in process `syz.5.823'. [ 365.450214][ T7943] loop2: detected capacity change from 0 to 256 [ 365.490384][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.508987][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.543045][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.553981][ T7943] FAT-fs (loop2): Directory bread(block 64) failed [ 365.563066][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.581139][ T7947] netlink: 'syz.5.823': attribute type 11 has an invalid length. [ 365.590106][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.603767][ T7943] FAT-fs (loop2): Directory bread(block 65) failed [ 365.605252][ T7947] netlink: 428 bytes leftover after parsing attributes in process `syz.5.823'. [ 365.623537][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.642684][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.650969][ T7943] FAT-fs (loop2): Directory bread(block 66) failed [ 365.663082][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.716721][ T7943] FAT-fs (loop2): Directory bread(block 67) failed [ 365.723395][ T7943] FAT-fs (loop2): Directory bread(block 68) failed [ 365.761360][ T7943] FAT-fs (loop2): Directory bread(block 69) failed [ 365.820582][ T7943] FAT-fs (loop2): Directory bread(block 70) failed [ 365.850905][ T7943] FAT-fs (loop2): Directory bread(block 71) failed [ 365.891022][ T7943] FAT-fs (loop2): Directory bread(block 72) failed [ 365.938711][ T7943] FAT-fs (loop2): Directory bread(block 73) failed [ 367.020511][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.103516][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.154597][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.211773][ T7943] loop2: detected capacity change from 0 to 256 [ 367.692132][ T7977] loop4: detected capacity change from 0 to 32768 [ 368.971824][ T7977] JBD2: Ignoring recovery information on journal [ 369.233253][ T7977] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 369.993840][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.002839][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.116731][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 370.925053][ T7650] device veth0_vlan entered promiscuous mode [ 371.035059][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.052730][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.116585][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.117229][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.170469][ T7650] device veth1_vlan entered promiscuous mode [ 371.202318][ T8017] siw: device registration error -23 [ 371.232609][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.233363][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.251295][ T7650] device veth0_macvtap entered promiscuous mode [ 371.264843][ T7650] device veth1_macvtap entered promiscuous mode [ 371.308787][ T8029] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 371.315792][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.315826][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.315838][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.315852][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.319361][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.320672][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.321390][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.322003][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.322621][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.337595][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.337621][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.337635][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.337649][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.339518][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.339641][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.340435][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.350219][ T7650] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.350359][ T7650] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.350390][ T7650] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.350419][ T7650] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.384844][ T8032] netlink: 'syz.2.836': attribute type 16 has an invalid length. [ 371.384867][ T8032] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 371.384881][ T8032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 371.400645][ T8033] loop4: detected capacity change from 0 to 512 [ 371.682915][ T8033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.763342][ T8033] EXT4-fs (loop4): 1 truncate cleaned up [ 371.777878][ T8033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.941841][ T6757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.966088][ T6757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.088223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.506607][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.657761][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.054817][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.084903][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 373.330520][ T8068] loop6: detected capacity change from 0 to 512 [ 373.585438][ T8068] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 374.605996][ T26] audit: type=1804 audit(1753837380.152:311): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.849" name="file1" dev="ramfs" ino=45552 res=1 errno=0 [ 374.754847][ T8068] EXT4-fs (loop6): 1 truncate cleaned up [ 374.760942][ T8068] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 376.072442][ T8091] device syzkaller0 entered promiscuous mode [ 376.526541][ T8120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.855'. [ 376.623743][ T8123] ceph: No mds server is up or the cluster is laggy [ 377.595326][ T8136] delete_channel: no stack [ 378.034314][ T8150] xt_connbytes: Forcing CT accounting to be enabled [ 378.041531][ T8150] Cannot find set identified by id 0 to match [ 378.627100][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.559001][ T8167] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 380.682621][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 381.023992][ T8177] siw: device registration error -23 [ 383.183095][ T4193] libceph: connect (1)[c::]:6789 error -101 [ 383.189234][ T4193] libceph: mon0 (1)[c::]:6789 connect error [ 383.246239][ T8208] ceph: No mds server is up or the cluster is laggy [ 383.265680][ T4292] libceph: connect (1)[c::]:6789 error -101 [ 383.281594][ T4292] libceph: mon0 (1)[c::]:6789 connect error [ 387.133207][ T8253] vivid-004: ================= START STATUS ================= [ 387.143435][ T8253] vivid-004: Radio HW Seek Mode: Bounded [ 387.177264][ T8253] vivid-004: Radio Programmable HW Seek: false [ 387.203808][ T8253] vivid-004: RDS Rx I/O Mode: Block I/O [ 387.210040][ T8253] vivid-004: Generate RBDS Instead of RDS: false [ 387.216944][ T8253] vivid-004: RDS Reception: true [ 387.223028][ T8253] vivid-004: RDS Program Type: 0 inactive [ 387.230228][ T8253] vivid-004: RDS PS Name: inactive [ 387.235882][ T8253] vivid-004: RDS Radio Text: inactive [ 387.241916][ T8253] vivid-004: RDS Traffic Announcement: false inactive [ 388.114175][ T8253] vivid-004: RDS Traffic Program: false inactive [ 388.144451][ T8261] cifs: Unknown parameter 'mode' [ 388.255888][ T8253] vivid-004: RDS Music: false inactive [ 388.266666][ T8253] vivid-004: ================== END STATUS ================== [ 388.453966][ T8265] loop5: detected capacity change from 0 to 4096 [ 388.802581][ T4231] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 389.891600][ T4231] usb 7-1: not running at top speed; connect to a high speed hub [ 389.993259][ T4231] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 390.040193][ T4231] usb 7-1: config 1 has no interface number 1 [ 390.095642][ T8265] ntfs3: loop5: failed to convert "0000" to iso8859-6 [ 390.124290][ T8265] ntfs3: loop5: failed to convert "0030" to iso8859-6 [ 390.151705][ T8265] ntfs3: loop5: failed to convert name for inode 1e. [ 390.174990][ T8265] ntfs3: loop5: failed to convert "0032" to iso8859-6 [ 390.213916][ T8265] ntfs3: loop5: failed to convert "0033" to iso8859-6 [ 390.241637][ T4231] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.278655][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.340101][ T4231] usb 7-1: Product: syz [ 390.360086][ T4231] usb 7-1: Manufacturer: syz [ 390.378106][ T4231] usb 7-1: SerialNumber: syz [ 390.433828][ T8295] loop4: detected capacity change from 0 to 512 [ 390.509313][ T8294] IPVS: Scheduler module ip_vs_sip not found [ 390.598539][ T8295] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 390.656500][ T8305] tipc: Started in network mode [ 390.704425][ T8305] tipc: Node identity 6e8b44b19fbf, cluster identity 4711 [ 390.733574][ T8305] tipc: Enabled bearer , priority 0 [ 390.773267][ T8309] device syzkaller0 entered promiscuous mode [ 390.849979][ T8305] tipc: Resetting bearer [ 391.100654][ T8317] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.051485][ T8303] tipc: Resetting bearer [ 392.061360][ T4247] tipc: Node number set to 4046734513 [ 392.242814][ T8303] tipc: Disabling bearer [ 394.261169][ T4231] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 394.508538][ T4231] usb 7-1: USB disconnect, device number 4 [ 396.878572][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.937566][ T8367] loop2: detected capacity change from 0 to 512 [ 397.054155][ T8367] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 397.103952][ T8367] EXT4-fs (loop2): Ignoring removed bh option [ 397.180590][ T8367] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 398.261371][ T8367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 398.488157][ T8385] netlink: 40 bytes leftover after parsing attributes in process `syz.6.920'. [ 399.424704][ T8385] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 399.488994][ T8367] EXT4-fs (loop2): 1 truncate cleaned up [ 399.508658][ T8367] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 399.702625][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.673932][ T8385] syz.6.920 (8385) used greatest stack depth: 19456 bytes left [ 403.957171][ T8460] loop5: detected capacity change from 0 to 512 [ 405.246448][ T8460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 405.380613][ T8460] EXT4-fs (loop5): 1 truncate cleaned up [ 405.420466][ T8460] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 407.915832][ T8494] loop7: detected capacity change from 0 to 128 [ 410.255351][ T8509] "syz.2.944" (8509) uses obsolete ecb(arc4) skcipher [ 410.396370][ T8494] EXT4-fs (loop7): Ignoring removed nobh option [ 410.571988][ T8506] loop5: detected capacity change from 0 to 512 [ 410.621276][ T8494] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 410.633689][ T8494] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.217272][ T8506] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 411.410052][ T8506] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.575477][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'. [ 415.923585][ T8577] ODEBUG: Out of memory. ODEBUG disabled [ 418.309684][ T8613] loop2: detected capacity change from 0 to 64 [ 418.899164][ T8613] hfs: unable to change codepage [ 419.185365][ T8613] hfs: unable to parse mount options [ 420.739899][ T8628] loop7: detected capacity change from 0 to 2048 [ 420.841151][ T8643] --map-set only usable from mangle table [ 422.028878][ T8628] EXT4-fs (loop7): bad geometry: block count 512 exceeds size of device (256 blocks) [ 424.347359][ T5130] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 424.703817][ T8671] tipc: Enabled bearer , priority 0 [ 424.742441][ T8671] device syzkaller0 entered promiscuous mode [ 424.767722][ T5130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.857106][ T5130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.041136][ T5130] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.054445][ T5130] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.063657][ T5130] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.085105][ T5130] usb 7-1: config 0 descriptor?? [ 426.108194][ T8673] tipc: Resetting bearer [ 426.160196][ T8668] tipc: Resetting bearer [ 426.249976][ T8668] tipc: Disabling bearer [ 426.273531][ T5130] usb 7-1: can't set config #0, error -71 [ 426.280970][ T5130] usb 7-1: USB disconnect, device number 5 [ 427.553816][ T8686] io-wq is not configured for unbound workers [ 429.112773][ T8717] loop7: detected capacity change from 0 to 2048 [ 429.727091][ T8713] tipc: Started in network mode [ 429.733915][ T8717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.745125][ T8713] tipc: Node identity 5669b023e219, cluster identity 4711 [ 430.145419][ T26] audit: type=1800 audit(1753837435.609:312): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 430.182581][ T8708] loop2: detected capacity change from 0 to 4096 [ 430.246426][ T8713] tipc: Enabled bearer , priority 0 [ 430.274203][ T26] audit: type=1800 audit(1753837435.609:313): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.996" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 430.330319][ T8713] tipc: Disabling bearer [ 430.343832][ T8708] ntfs3: Unknown parameter '01777777777777777777777' [ 432.449212][ T8761] loop2: detected capacity change from 0 to 128 [ 432.713580][ T8761] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.739271][ T8753] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 432.742338][ T8762] loop4: detected capacity change from 0 to 40427 [ 432.773950][ T8761] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 432.792273][ T8762] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 432.800356][ T8762] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 432.811671][ T8762] F2FS-fs (loop4): invalid crc value [ 434.192561][ T4358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 434.240208][ T8762] F2FS-fs (loop4): Found nat_bits in checkpoint [ 434.314004][ T8762] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 434.321188][ T8762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 434.480268][ T8783] netlink: 'syz.6.1010': attribute type 1 has an invalid length. [ 434.553940][ T8783] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 434.887544][ T8791] device vlan2 entered promiscuous mode [ 435.112032][ T8791] device bridge0 entered promiscuous mode [ 435.120267][ T144] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.143438][ T8783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.198215][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 435.235336][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 435.290127][ T144] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.664630][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1017'. [ 435.862945][ T8816] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.693307][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.701429][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.881596][ T8841] tipc: Enabling of bearer rejected, failed to enable media [ 439.968345][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.974699][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.464065][ T8871] delete_channel: no stack [ 443.026114][ T8887] tipc: Enabled bearer , priority 0 [ 443.055758][ T8887] device syzkaller0 entered promiscuous mode [ 443.102180][ T8887] tipc: Resetting bearer [ 443.130071][ T8884] tipc: Resetting bearer [ 443.181707][ T8884] tipc: Disabling bearer [ 444.820339][ T8917] device bridge_slave_0 entered promiscuous mode [ 446.130344][ T8936] tipc: Enabled bearer , priority 0 [ 446.263705][ T8943] device syzkaller0 entered promiscuous mode [ 447.432352][ T8948] tipc: Enabling of bearer rejected, failed to enable media [ 448.994434][ T8967] loop4: detected capacity change from 0 to 32768 [ 449.547976][ T8967] XFS (loop4): Mounting V5 Filesystem [ 449.730286][ T8962] tipc: Resetting bearer [ 449.887758][ T8967] XFS (loop4): Ending clean mount [ 450.125279][ T8967] XFS (loop4): Quotacheck needed: Please wait. [ 450.287631][ T8962] tipc: Disabling bearer [ 451.888994][ T8967] XFS (loop4): Quotacheck: Done. [ 452.407211][ T9001] dlm: no local IP address has been set [ 452.413455][ T9001] dlm: cannot start dlm midcomms -107 [ 452.454454][ T4190] XFS (loop4): Unmounting Filesystem [ 452.468031][ T9000] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.477658][ T9000] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.486426][ T9000] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.495982][ T9000] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.625201][ T9010] loop6: detected capacity change from 0 to 1024 [ 452.754751][ T9000] team0: Port device vxlan0 added [ 457.723702][ T9051] tipc: Enabling of bearer rejected, failed to enable media [ 459.210156][ T9074] tipc: Started in network mode [ 459.227718][ T9074] tipc: Node identity 6e3567b562a7, cluster identity 4711 [ 460.218298][ T9083] delete_channel: no stack [ 460.240146][ T9083] loop5: detected capacity change from 0 to 2048 [ 460.297711][ T9083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.360837][ T26] audit: type=1800 audit(1753837465.912:314): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1071" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 460.631954][ T9080] loop6: detected capacity change from 0 to 2048 [ 460.643160][ T9074] tipc: Enabled bearer , priority 0 [ 460.823656][ T9084] device syzkaller0 entered promiscuous mode [ 461.256911][ T9096] device syzkaller0 entered promiscuous mode [ 461.893691][ T9091] tipc: Enabled bearer , priority 0 [ 461.935832][ T9080] NILFS (loop6): invalid segment: Inconsistency found [ 461.950683][ T9102] loop7: detected capacity change from 0 to 22 [ 461.963243][ T9102] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 462.002446][ T9102] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 462.275509][ T9080] NILFS (loop6): trying rollback from an earlier position [ 462.816632][ T5135] tipc: Node number set to 210921397 [ 462.873092][ T9090] tipc: Resetting bearer [ 463.134256][ T9090] tipc: Disabling bearer [ 463.144397][ T9080] NILFS (loop6): recovery complete [ 463.427364][ T9108] loop5: detected capacity change from 0 to 64 [ 463.436777][ T9080] NILFS (loop6): error -4 creating segctord thread [ 463.719555][ T9096] tipc: Resetting bearer [ 463.922205][ T9096] tipc: Disabling bearer [ 469.095505][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1088'. [ 469.106432][ T9159] loop6: detected capacity change from 0 to 512 [ 469.188428][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 469.240983][ T9159] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 469.280962][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.342609][ T9159] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 469.388980][ T9159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 469.397779][ T9171] loop7: detected capacity change from 0 to 512 [ 469.498182][ T9159] System zones: 0-3, 34-34 [ 469.601868][ T9159] EXT4-fs (loop6): orphan cleanup on readonly fs [ 469.622332][ T9171] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1092: casefold flag without casefold feature [ 469.624264][ T9190] xt_limit: Overflow, try lower: 65536/2147483648 [ 469.662944][ T9159] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1089: bad orphan inode 1039 [ 469.700465][ T9171] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1092: couldn't read orphan inode 15 (err -117) [ 469.760969][ T9159] EXT4-fs (loop6): Remounting filesystem read-only [ 469.773430][ T9159] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 469.788456][ T9171] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 469.801479][ T9198] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 469.855091][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.669962][ T9206] loop4: detected capacity change from 0 to 128 [ 471.842072][ T9215] comedi comedi0: rti802: I/O port conflict (0x6,4) [ 473.635052][ T3084] attempt to access beyond end of device [ 473.635052][ T3084] loop4: rw=1, want=833, limit=128 [ 474.776790][ T9236] tipc: Enabled bearer , priority 0 [ 474.792670][ T9236] device syzkaller0 entered promiscuous mode [ 474.870702][ T9236] tipc: Resetting bearer [ 474.966452][ T9235] tipc: Resetting bearer [ 475.011118][ T9235] tipc: Disabling bearer [ 475.546483][ T9238] loop7: detected capacity change from 0 to 8192 [ 477.173263][ T9238] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 477.209792][ T9238] REISERFS (device loop7): using journaled data mode [ 477.276411][ T9238] reiserfs: using flush barriers [ 477.424612][ T9238] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 477.455138][ T9269] loop4: detected capacity change from 0 to 256 [ 477.497604][ T9238] REISERFS (device loop7): checking transaction log (loop7) [ 477.541451][ T9238] REISERFS (device loop7): Using r5 hash to sort names [ 477.570289][ T9269] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 477.610726][ T9238] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 477.661525][ T26] audit: type=1800 audit(1753837483.224:315): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1108" name="file1" dev="loop4" ino=1048653 res=0 errno=0 [ 477.734625][ T9238] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 480.755927][ T9322] loop5: detected capacity change from 0 to 512 [ 480.812418][ T9322] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 480.974535][ T9322] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 481.894591][ T9322] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.007190][ T9338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.317327][ T9344] loop6: detected capacity change from 0 to 40427 [ 484.091381][ T9344] F2FS-fs (loop6): invalid crc value [ 484.120885][ T9344] F2FS-fs (loop6): Found nat_bits in checkpoint [ 484.153689][ T9344] F2FS-fs (loop6): Start checkpoint disabled! [ 484.386836][ T9344] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 484.429300][ T9358] netlink: 'syz.4.1124': attribute type 62 has an invalid length. [ 484.588978][ T9359] attempt to access beyond end of device [ 484.588978][ T9359] loop6: rw=2049, want=45224, limit=40427 [ 485.138757][ T6757] attempt to access beyond end of device [ 485.138757][ T6757] loop6: rw=2049, want=40984, limit=40427 [ 488.574724][ T9394] delete_channel: no stack [ 488.597116][ T9394] loop2: detected capacity change from 0 to 2048 [ 490.188756][ T9394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.432986][ T9402] input: syz1 as /devices/virtual/input/input6 [ 490.727087][ T9413] netlink: 'syz.4.1136': attribute type 16 has an invalid length. [ 490.735046][ T9413] netlink: 'syz.4.1136': attribute type 3 has an invalid length. [ 490.743064][ T9413] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.1136'. [ 491.641125][ T9409] loop2: detected capacity change from 0 to 4096 [ 491.767823][ T9409] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 491.777939][ T9409] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 495.279978][ T9435] loop6: detected capacity change from 0 to 32768 [ 495.513755][ T9435] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 496.335900][ T9446] loop5: detected capacity change from 0 to 128 [ 499.049611][ T4193] Bluetooth: hci2: command 0x0406 tx timeout [ 500.641819][ T5372] ocfs2: Unmounting device (7,6) on (node local) [ 500.931465][ T9467] loop2: detected capacity change from 0 to 40427 [ 501.356230][ T9467] F2FS-fs (loop2): invalid crc value [ 501.391396][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.431059][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.518865][ T9467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 501.587328][ T9467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 502.449750][ T4186] attempt to access beyond end of device [ 502.449750][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 502.873841][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.981530][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.484102][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.681942][ T9495] device bridge_slave_0 left promiscuous mode [ 503.748335][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.804956][ T9495] device bridge_slave_1 left promiscuous mode [ 503.822051][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.836537][ T9502] loop6: detected capacity change from 0 to 256 [ 503.879589][ T9495] bond0: (slave bond_slave_0): Releasing backup interface [ 503.934632][ T9502] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.962858][ T9495] bond0: (slave bond_slave_1): Releasing backup interface [ 503.977353][ T9502] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 504.054510][ T9502] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 504.374474][ T9495] team0: Port device team_slave_0 removed [ 504.470598][ T9495] team0: Port device team_slave_1 removed [ 505.604356][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.685250][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.896070][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.951769][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.333318][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 507.430857][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1165'. [ 508.950492][ T9536] loop6: detected capacity change from 0 to 40427 [ 510.515404][ T9536] F2FS-fs (loop6): invalid crc value [ 510.561155][ T9555] loop7: detected capacity change from 0 to 8 [ 510.598130][ T9536] F2FS-fs (loop6): Found nat_bits in checkpoint [ 510.656955][ T9536] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 511.818225][ T9571] loop2: detected capacity change from 0 to 256 [ 511.993825][ T9571] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.466429][ T9578] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1176'. [ 512.870066][ T26] audit: type=1800 audit(1753837518.088:316): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1173" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 512.981095][ T9571] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 514.328101][ T9571] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 516.639211][ T9598] tipc: Enabling of bearer rejected, failed to enable media [ 519.902263][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1185'. [ 520.377339][ T9646] input: syz1 as /devices/virtual/input/input7 [ 525.261525][ T9686] loop4: detected capacity change from 0 to 1024 [ 525.603897][ T9686] hfsplus: unable to parse mount options [ 525.957296][ T9678] can: request_module (can-proto-0) failed. [ 526.056540][ T9691] loop5: detected capacity change from 0 to 8192 [ 527.162082][ T9691] loop5: AHDI p1 p2 p4 [ 527.231492][ T9691] loop5: p4 start 40969 is beyond EOD, truncated [ 529.870974][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 529.953559][ T9738] loop7: detected capacity change from 0 to 512 [ 530.029857][ T9738] EXT4-fs (loop7): Ignoring removed bh option [ 530.118570][ T9738] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 530.802112][ T9738] EXT4-fs (loop7): 1 truncate cleaned up [ 530.813243][ T9738] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 536.573927][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.638462][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.152683][ T9829] loop5: detected capacity change from 0 to 512 [ 541.515162][ T9829] EXT4-fs (loop5): Ignoring removed nobh option [ 542.257414][ T9829] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1237: iget: bad i_size value: 38620345925642 [ 542.362813][ T9829] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1237: couldn't read orphan inode 15 (err -117) [ 542.389505][ T9829] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 542.413811][ T9853] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 542.683015][ T9861] tipc: Enabled bearer , priority 0 [ 542.694259][ T9861] device syzkaller0 entered promiscuous mode [ 543.306195][ T9859] tipc: Resetting bearer [ 544.368393][ T9859] tipc: Disabling bearer [ 545.661842][ T9910] loop4: detected capacity change from 0 to 64 [ 550.850252][ T9952] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 551.259677][ T9952] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.331020][ T9953] tipc: Enabled bearer , priority 0 [ 551.367764][ T9953] device syzkaller0 entered promiscuous mode [ 551.589871][ T9953] tipc: Resetting bearer [ 551.646617][ T9950] tipc: Resetting bearer [ 551.650661][ T9963] loop2: detected capacity change from 0 to 128 [ 551.848763][ T9950] tipc: Disabling bearer [ 552.637956][ T9963] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 553.239875][ T9963] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 553.291313][ T9980] loop5: detected capacity change from 0 to 1024 [ 554.842998][ T9980] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,init_itable,,errors=continue. Quota mode: none. [ 554.866013][ T5256] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 555.071942][ T9984] loop4: detected capacity change from 0 to 8192 [ 555.174357][T10004] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 555.182868][T10004] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 555.584662][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 556.928936][T10019] loop6: detected capacity change from 0 to 40427 [ 556.959127][T10019] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 556.967034][T10019] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 556.984755][T10019] F2FS-fs (loop6): invalid crc value [ 557.017288][T10019] F2FS-fs (loop6): Found nat_bits in checkpoint [ 557.082107][T10019] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 557.089198][T10019] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 558.866037][T10035] tipc: Enabled bearer , priority 0 [ 558.879621][T10035] device syzkaller0 entered promiscuous mode [ 558.943851][T10035] tipc: Resetting bearer [ 558.979745][T10031] tipc: Resetting bearer [ 559.014268][T10031] tipc: Disabling bearer [ 559.903060][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'. [ 560.928618][T10065] tipc: Enabling of bearer rejected, failed to enable media [ 562.076482][T10092] xt_socket: unknown flags 0x4 [ 563.043715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.050057][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.555447][T10104] loop6: detected capacity change from 0 to 512 [ 565.053423][T10104] EXT4-fs (loop6): Ignoring removed bh option [ 565.128208][T10104] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 565.415081][T10104] EXT4-fs (loop6): 1 truncate cleaned up [ 565.455484][T10104] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 566.397267][ T26] audit: type=1800 audit(1753837571.875:317): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1303" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 566.965462][T10123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.997764][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.174452][T10127] loop2: detected capacity change from 0 to 1024 [ 568.558352][T10127] hfsplus: unable to parse mount options [ 568.875483][T10121] can: request_module (can-proto-0) failed. [ 569.560123][T10141] tipc: Enabled bearer , priority 0 [ 569.586140][T10141] device syzkaller0 entered promiscuous mode [ 569.669216][T10135] gfs2: gfs2 mount does not exist [ 569.695182][T10142] ================================================================== [ 569.704031][T10142] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 569.711973][T10142] Write of size 4 at addr ffff888024cd58b8 by task syz.2.1315/10142 [ 569.719983][T10142] [ 569.722331][T10142] CPU: 1 PID: 10142 Comm: syz.2.1315 Not tainted 5.15.189-syzkaller #0 [ 569.730860][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.740960][T10142] Call Trace: [ 569.744270][T10142] [ 569.747225][T10142] dump_stack_lvl+0x168/0x230 [ 569.751947][T10142] ? show_regs_print_info+0x20/0x20 [ 569.757190][T10142] ? load_image+0x3b0/0x3b0 [ 569.761887][T10142] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 569.767481][T10142] ? lockdep_hardirqs_on+0x94/0x140 [ 569.772730][T10142] print_address_description+0x60/0x2d0 [ 569.778325][T10142] ? ax25_dev_device_down+0x35e/0x520 [ 569.783826][T10142] kasan_report+0xdf/0x130 [ 569.788289][T10142] ? ax25_dev_device_down+0x35e/0x520 [ 569.793699][T10142] ? kfree+0xef/0x2a0 [ 569.797762][T10142] kasan_check_range+0x27b/0x290 [ 569.802909][T10142] ax25_dev_device_down+0x35e/0x520 [ 569.808152][T10142] ax25_device_event+0x4b4/0x4f0 [ 569.813133][T10142] raw_notifier_call_chain+0xcb/0x160 [ 569.818555][T10142] dev_close_many+0x28d/0x400 [ 569.823317][T10142] ? _raw_spin_unlock+0x40/0x40 [ 569.828325][T10142] ? __dev_open+0x420/0x420 [ 569.832902][T10142] ? bond_netdev_event+0x159/0xea0 [ 569.838056][T10142] ? try_to_del_timer_sync+0x165/0x1b0 [ 569.843558][T10142] dev_close+0x14c/0x200 [ 569.847842][T10142] ? __dev_close_many+0x2a0/0x2a0 [ 569.852899][T10142] ? macvlan_device_event+0x10b/0x930 [ 569.858323][T10142] bpq_device_event+0x2f4/0x9c0 [ 569.863218][T10142] ? lockdep_rtnl_is_held+0x22/0x30 [ 569.868685][T10142] ? team_device_event+0x11b/0x9e0 [ 569.873948][T10142] raw_notifier_call_chain+0xcb/0x160 [ 569.879840][T10142] __dev_notify_flags+0x178/0x2d0 [ 569.885319][T10142] ? __dev_change_flags+0x6a0/0x6a0 [ 569.891215][T10142] ? __dev_change_flags+0x4bb/0x6a0 [ 569.896481][T10142] ? dev_get_flags+0x1c0/0x1c0 [ 569.901400][T10142] ? do_raw_spin_unlock+0x11d/0x230 [ 569.906839][T10142] dev_change_flags+0xe3/0x1a0 [ 569.911827][T10142] dev_ifsioc+0x147/0xe70 [ 569.916226][T10142] ? dev_ioctl+0x54e/0xe50 [ 569.920796][T10142] ? dev_ioctl+0xe50/0xe50 [ 569.925397][T10142] ? apparmor_capable+0x12c/0x190 [ 569.930644][T10142] ? full_name_hash+0x8e/0xe0 [ 569.935380][T10142] dev_ioctl+0x55f/0xe50 [ 569.939688][T10142] ? _copy_from_user+0x111/0x170 [ 569.944765][T10142] sock_do_ioctl+0x222/0x2f0 [ 569.949591][T10142] ? sock_show_fdinfo+0xb0/0xb0 [ 569.954526][T10142] sock_ioctl+0x4ed/0x6e0 [ 569.958912][T10142] ? sock_poll+0x3f0/0x3f0 [ 569.963380][T10142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 569.968448][T10142] ? security_file_ioctl+0x7c/0xa0 [ 569.973611][T10142] ? sock_poll+0x3f0/0x3f0 [ 569.978072][T10142] __se_sys_ioctl+0xfa/0x170 [ 569.982712][T10142] do_syscall_64+0x4c/0xa0 [ 569.987169][T10142] ? clear_bhb_loop+0x30/0x80 [ 569.991896][T10142] ? clear_bhb_loop+0x30/0x80 [ 569.996615][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.002576][T10142] RIP: 0033:0x7f0c55d9b9a9 [ 570.007031][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.026951][T10142] RSP: 002b:00007f0c53be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.035424][T10142] RAX: ffffffffffffffda RBX: 00007f0c55fc3080 RCX: 00007f0c55d9b9a9 [ 570.043441][T10142] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000a [ 570.051450][T10142] RBP: 00007f0c55e1dd69 R08: 0000000000000000 R09: 0000000000000000 [ 570.059452][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.067555][T10142] R13: 0000000000000000 R14: 00007f0c55fc3080 R15: 00007ffdf1a4f688 [ 570.075578][T10142] [ 570.078644][T10142] [ 570.081001][T10142] Allocated by task 5158: [ 570.085365][T10142] __kasan_kmalloc+0xb5/0xf0 [ 570.090001][T10142] ax25_dev_device_up+0x50/0x580 [ 570.094988][T10142] ax25_device_event+0x483/0x4f0 [ 570.100136][T10142] raw_notifier_call_chain+0xcb/0x160 [ 570.105564][T10142] __dev_notify_flags+0x178/0x2d0 [ 570.110711][T10142] dev_change_flags+0xe3/0x1a0 [ 570.115521][T10142] dev_ifsioc+0x147/0xe70 [ 570.119904][T10142] dev_ioctl+0x55f/0xe50 [ 570.124191][T10142] sock_do_ioctl+0x222/0x2f0 [ 570.128828][T10142] sock_ioctl+0x4ed/0x6e0 [ 570.133429][T10142] __se_sys_ioctl+0xfa/0x170 [ 570.138416][T10142] do_syscall_64+0x4c/0xa0 [ 570.142870][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.148800][T10142] [ 570.151148][T10142] Freed by task 10142: [ 570.155247][T10142] kasan_set_track+0x4b/0x70 [ 570.159873][T10142] kasan_set_free_info+0x1f/0x40 [ 570.164861][T10142] ____kasan_slab_free+0xd5/0x110 [ 570.169921][T10142] slab_free_freelist_hook+0xea/0x170 [ 570.175339][T10142] kfree+0xef/0x2a0 [ 570.179266][T10142] ax25_dev_device_down+0x1c0/0x520 [ 570.184510][T10142] ax25_device_event+0x4b4/0x4f0 [ 570.189481][T10142] raw_notifier_call_chain+0xcb/0x160 [ 570.195145][T10142] dev_close_many+0x28d/0x400 [ 570.199876][T10142] dev_close+0x14c/0x200 [ 570.204221][T10142] bpq_device_event+0x2f4/0x9c0 [ 570.209113][T10142] raw_notifier_call_chain+0xcb/0x160 [ 570.214521][T10142] __dev_notify_flags+0x178/0x2d0 [ 570.219670][T10142] dev_change_flags+0xe3/0x1a0 [ 570.224574][T10142] dev_ifsioc+0x147/0xe70 [ 570.229128][T10142] dev_ioctl+0x55f/0xe50 [ 570.233410][T10142] sock_do_ioctl+0x222/0x2f0 [ 570.238034][T10142] sock_ioctl+0x4ed/0x6e0 [ 570.242402][T10142] __se_sys_ioctl+0xfa/0x170 [ 570.247031][T10142] do_syscall_64+0x4c/0xa0 [ 570.251480][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.257411][T10142] [ 570.259760][T10142] Last potentially related work creation: [ 570.265491][T10142] kasan_save_stack+0x35/0x60 [ 570.270207][T10142] kasan_record_aux_stack+0xb8/0x100 [ 570.275530][T10142] insert_work+0x54/0x3d0 [ 570.279897][T10142] __queue_work+0x9c5/0xd50 [ 570.284434][T10142] queue_work_on+0x11d/0x1d0 [ 570.289055][T10142] inet6addr_event+0x9c/0xc0 [ 570.293690][T10142] atomic_notifier_call_chain+0x15d/0x280 [ 570.299442][T10142] ipv6_add_addr+0xb30/0xde0 [ 570.304073][T10142] inet6_addr_add+0x43a/0x9c0 [ 570.308780][T10142] inet6_rtm_newaddr+0x5d7/0x840 [ 570.313786][T10142] rtnetlink_rcv_msg+0x9b9/0xe60 [ 570.318752][T10142] netlink_rcv_skb+0x1e0/0x430 [ 570.323525][T10142] netlink_unicast+0x774/0x920 [ 570.328297][T10142] netlink_sendmsg+0x8ab/0xbc0 [ 570.333077][T10142] __sys_sendto+0x423/0x580 [ 570.337594][T10142] __x64_sys_sendto+0xda/0xf0 [ 570.342275][T10142] do_syscall_64+0x4c/0xa0 [ 570.346694][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.352602][T10142] [ 570.354929][T10142] The buggy address belongs to the object at ffff888024cd5800 [ 570.354929][T10142] which belongs to the cache kmalloc-192 of size 192 [ 570.369068][T10142] The buggy address is located 184 bytes inside of [ 570.369068][T10142] 192-byte region [ffff888024cd5800, ffff888024cd58c0) [ 570.382349][T10142] The buggy address belongs to the page: [ 570.387981][T10142] page:ffffea0000933540 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24cd5 [ 570.398223][T10142] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 570.405803][T10142] raw: 00fff00000000200 ffffea00007dd640 0000000900000009 ffff888016841a00 [ 570.414393][T10142] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 570.422976][T10142] page dumped because: kasan: bad access detected [ 570.429392][T10142] page_owner tracks the page as allocated [ 570.435284][T10142] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 12859066657, free_ts 0 [ 570.450048][T10142] get_page_from_freelist+0x1b77/0x1c60 [ 570.455604][T10142] __alloc_pages+0x1e1/0x470 [ 570.460281][T10142] alloc_page_interleave+0x24/0x1e0 [ 570.465482][T10142] new_slab+0xc0/0x4b0 [ 570.469548][T10142] ___slab_alloc+0x81e/0xdf0 [ 570.474158][T10142] __kmalloc+0x1cd/0x330 [ 570.478399][T10142] usb_alloc_urb+0x3f/0x140 [ 570.482905][T10142] usb_control_msg+0x115/0x3e0 [ 570.487672][T10142] hub_suspend+0x769/0x970 [ 570.492103][T10142] usb_suspend_both+0x28a/0x1050 [ 570.497043][T10142] usb_runtime_suspend+0x54/0x100 [ 570.502083][T10142] __rpm_callback+0x2eb/0x7e0 [ 570.506860][T10142] rpm_suspend+0x87a/0x1a50 [ 570.511363][T10142] __pm_runtime_suspend+0x10f/0x150 [ 570.516564][T10142] usb_new_device+0xeab/0x1640 [ 570.521338][T10142] register_root_hub+0x278/0x580 [ 570.526278][T10142] page_owner free stack trace missing [ 570.531768][T10142] [ 570.534100][T10142] Memory state around the buggy address: [ 570.539737][T10142] ffff888024cd5780: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 570.547808][T10142] ffff888024cd5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.556147][T10142] >ffff888024cd5880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 570.564208][T10142] ^ [ 570.570102][T10142] ffff888024cd5900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.578163][T10142] ffff888024cd5980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 570.586220][T10142] ================================================================== [ 570.594369][T10142] Disabling lock debugging due to kernel taint [ 570.878182][T10142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 570.885528][T10142] CPU: 1 PID: 10142 Comm: syz.2.1315 Tainted: G B 5.15.189-syzkaller #0 [ 570.895180][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.905539][T10142] Call Trace: [ 570.908835][T10142] [ 570.911882][T10142] dump_stack_lvl+0x168/0x230 [ 570.916736][T10142] ? show_regs_print_info+0x20/0x20 [ 570.922035][T10142] ? load_image+0x3b0/0x3b0 [ 570.926754][T10142] panic+0x2c9/0x7f0 [ 570.930690][T10142] ? bpf_jit_dump+0xd0/0xd0 [ 570.935307][T10142] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 570.941244][T10142] ? _raw_spin_unlock+0x40/0x40 [ 570.946482][T10142] ? ax25_dev_device_down+0x35e/0x520 [ 570.951876][T10142] check_panic_on_warn+0x80/0xa0 [ 570.956857][T10142] ? ax25_dev_device_down+0x35e/0x520 [ 570.962533][T10142] end_report+0x6d/0xf0 [ 570.966942][T10142] kasan_report+0x102/0x130 [ 570.971503][T10142] ? ax25_dev_device_down+0x35e/0x520 [ 570.977434][T10142] ? kfree+0xef/0x2a0 [ 570.981862][T10142] kasan_check_range+0x27b/0x290 [ 570.986942][T10142] ax25_dev_device_down+0x35e/0x520 [ 570.992478][T10142] ax25_device_event+0x4b4/0x4f0 [ 570.997707][T10142] raw_notifier_call_chain+0xcb/0x160 [ 571.003096][T10142] dev_close_many+0x28d/0x400 [ 571.007784][T10142] ? _raw_spin_unlock+0x40/0x40 [ 571.012725][T10142] ? __dev_open+0x420/0x420 [ 571.017403][T10142] ? bond_netdev_event+0x159/0xea0 [ 571.022514][T10142] ? try_to_del_timer_sync+0x165/0x1b0 [ 571.027978][T10142] dev_close+0x14c/0x200 [ 571.032234][T10142] ? __dev_close_many+0x2a0/0x2a0 [ 571.037252][T10142] ? macvlan_device_event+0x10b/0x930 [ 571.042745][T10142] bpq_device_event+0x2f4/0x9c0 [ 571.047595][T10142] ? lockdep_rtnl_is_held+0x22/0x30 [ 571.052789][T10142] ? team_device_event+0x11b/0x9e0 [ 571.057909][T10142] raw_notifier_call_chain+0xcb/0x160 [ 571.063368][T10142] __dev_notify_flags+0x178/0x2d0 [ 571.068388][T10142] ? __dev_change_flags+0x6a0/0x6a0 [ 571.073578][T10142] ? __dev_change_flags+0x4bb/0x6a0 [ 571.078789][T10142] ? dev_get_flags+0x1c0/0x1c0 [ 571.083561][T10142] ? do_raw_spin_unlock+0x11d/0x230 [ 571.088760][T10142] dev_change_flags+0xe3/0x1a0 [ 571.093559][T10142] dev_ifsioc+0x147/0xe70 [ 571.097897][T10142] ? dev_ioctl+0x54e/0xe50 [ 571.102315][T10142] ? dev_ioctl+0xe50/0xe50 [ 571.106764][T10142] ? apparmor_capable+0x12c/0x190 [ 571.111785][T10142] ? full_name_hash+0x8e/0xe0 [ 571.116553][T10142] dev_ioctl+0x55f/0xe50 [ 571.120804][T10142] ? _copy_from_user+0x111/0x170 [ 571.125777][T10142] sock_do_ioctl+0x222/0x2f0 [ 571.130468][T10142] ? sock_show_fdinfo+0xb0/0xb0 [ 571.135330][T10142] sock_ioctl+0x4ed/0x6e0 [ 571.139661][T10142] ? sock_poll+0x3f0/0x3f0 [ 571.144087][T10142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 571.149071][T10142] ? security_file_ioctl+0x7c/0xa0 [ 571.154210][T10142] ? sock_poll+0x3f0/0x3f0 [ 571.158639][T10142] __se_sys_ioctl+0xfa/0x170 [ 571.163270][T10142] do_syscall_64+0x4c/0xa0 [ 571.167700][T10142] ? clear_bhb_loop+0x30/0x80 [ 571.172482][T10142] ? clear_bhb_loop+0x30/0x80 [ 571.177182][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 571.183197][T10142] RIP: 0033:0x7f0c55d9b9a9 [ 571.187621][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.207411][T10142] RSP: 002b:00007f0c53be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.215857][T10142] RAX: ffffffffffffffda RBX: 00007f0c55fc3080 RCX: 00007f0c55d9b9a9 [ 571.223940][T10142] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000a [ 571.231941][T10142] RBP: 00007f0c55e1dd69 R08: 0000000000000000 R09: 0000000000000000 [ 571.239921][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.247977][T10142] R13: 0000000000000000 R14: 00007f0c55fc3080 R15: 00007ffdf1a4f688 [ 571.255955][T10142] [ 571.259212][T10142] Kernel Offset: disabled [ 571.263548][T10142] Rebooting in 86400 seconds..