last executing test programs: 9.236883572s ago: executing program 3 (id=1216): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x5, &(0x7f0000001140)) io_setup(0x7, &(0x7f0000000000)) io_setup(0x253, &(0x7f00000000c0)) io_setup(0x7bba, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000001180)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x44}}, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x40086602, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) fstat(r1, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) 9.001589223s ago: executing program 2 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r6 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x401) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x80086603, &(0x7f0000000140)) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0), 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) prctl$PR_GET_PDEATHSIG(0x29, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000000301010100000000000000000a000000100800800c00028005000100010000000c0000"], 0x30}}, 0x0) 8.288834593s ago: executing program 3 (id=1218): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000a80), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='nfs4\x00', 0x8, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x214050, 0x0) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000ac0)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6, 0xee00}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x3, 0xee01}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x1}, [], {0x10, 0x4}}, 0x44, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80), 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)={0x2, 'ip6gretap0\x00', {0x4}, 0x3}) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) r4 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="31cf838007a4ed1ef0ec3e696569ce9c42385b73499a41d494aef67e710e77a06b599aab98dcb229229bcb071dfab73c238ff453e3d3db7661f03b8b0a2fc551a0a8ed9a07c0834409725bbb0950e9"], 0x90) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000440)="e5857e026721e2ecc35e01c3ea1ead72c5444cb0d38f23d5fb30d02bd5b83a279107580e97bc8a2b2ef48b3db27b0ff19e96ab4d102d292c192bc657baf5ea6369430640071dcce4dcc65053a4c3648b0032b21ad8b37acdc8225d968e5acdbb60", 0x61, 0x880, &(0x7f00000001c0)={0xa, 0x4e22, 0xdfed, @empty, 0x100}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f00000005c0), {[{{@arp={@remote, @rand_addr=0x64010101, 0xff, 0xff, 0x8, 0xe, {@empty, {[0x80, 0x0, 0x0, 0xff, 0xff, 0x46133ef3feed42d7]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x101, 0x9, 0x40, 0x9e, 0x7, 0x8ae, 'ip6gretap0\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @loopback, @private=0xa010101, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @empty, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="c725d27450a1", @mac=@multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0x3ef80954e8a19f78}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=0xaf8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) chmod(&(0x7f00000003c0)='./file0\x00', 0x114) lchown(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 8.288490553s ago: executing program 1 (id=1219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0xfeffff, &(0x7f00000007c0)="df"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x7e, 0x7fff) r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x4010, r4, 0x95709000) r5 = dup(r3) write$cgroup_pid(r5, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) sendfile(r3, r5, &(0x7f0000000100), 0x6c03) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x4000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x207, 0x5, 0x8, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f0000000080)={&(0x7f0000000540)=""/115, 0x73, 0x0, &(0x7f00000005c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.324465926s ago: executing program 3 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00', @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r5) r10 = fcntl$dupfd(r7, 0x0, r8) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000080)={0x0, r9}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x12}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 7.323932986s ago: executing program 2 (id=1222): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r9 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) r10 = openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x800, 0x12) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_int(r13, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 7.273503819s ago: executing program 1 (id=1223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) unshare(0x400) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0205649, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$inet6(0xa, 0x1, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0d, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) close(r3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}}, 0x0) 7.134082712s ago: executing program 2 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000003c0)="f1b3a88e7237e45516b2e47621e62e01", 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r5, 0x1, 0x7, &(0x7f0000000180)=""/82, &(0x7f00000000c0)=0x52) r6 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x29, 0x42, 0x0, 0x20000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8e34}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@loopback}}, {{@in6=@empty}}}, &(0x7f0000000500)=0xe8) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = openat$cgroup_type(r2, &(0x7f0000000400), 0x2, 0x0) ppoll(&(0x7f0000000440)=[{r6, 0xc210}, {r0, 0x10}, {0xffffffffffffffff, 0x30}, {r9, 0x4d2}], 0x4, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f0000000500)={[0x3]}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1}, 0x1c}}, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f050400000009058303"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x9db625f9be0ca362) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 6.782661232s ago: executing program 1 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x2, 0x1002, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b458af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3f4bd17a5354e179acd329b82c9eb256570617f3a2a12726870f0282fa7ba03cc7525bb0cbfdd9ee2e94b6b38d1d02130f3d07c1752970827351a1b2e2c6d5d57a4752a397a95a55775e7bf068f7d192be71bf9f5851de4703c1900a640126b7053abed4b81f8a08a378f07b86a4f8a5f55bafcd39e24401dc7594568cfd48a7555d0ec61f67434c3be25e40aa8713ddb6d84f4eb06d6b96014bd8ce64054a4b1c81d905d8b6a6e8faafb8d34815bf3fea3c5eb0cddb2082dd3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f0000000040)=0xb3c3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)='E', 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{}, {}, {0x20, 'H'}], 0xa, "e60a6e3c08cb34b1b47989ff0d287f7ae9c7d1a0d30d34b1b10b2aef78477f6649796697592f9b1e55cb62e352cbd72309081e9fb12a23d8e111b26c12969d656aadb96f4629a4012f78d18f9a348d"}, 0x5e) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001640)="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", 0x3ef}], 0x1, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x48}}], 0x1, 0x4000080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="c2", 0x1}], 0x1) shutdown(r1, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x2, 0x0}, &(0x7f0000000080)="a82b567dd8c9", &(0x7f0000000480)=""/220, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x30, 0x0, 0x44) unlink(&(0x7f0000000140)='./cgroup\x00') 6.547998182s ago: executing program 1 (id=1227): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000001540)='./file0\x00', 0x80000c, &(0x7f0000001740)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6f6465636f6d706f73652c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESOCT, @ANYBLOB=',umask=00000000000000000000003,creator=q\x00\x00\x00,barrier,nodecompose,umask=00000000000000000000217,decompose,force,uid=', @ANYRESDEC=0x0, @ANYBLOB="2ce9643d", @ANYRES16, @ANYBLOB=',nobarrier,subj_role=nls,obj_role=!-+,appraise_type=imasig,\x00'], 0x1, 0x6e4, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) unshare(0x24020400) pread64(r2, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a08fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0d34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c35c57b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33df070000000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d12cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61440073552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b3cb6626324328d3c3c2464e78065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54bb951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be60fdc3afdf32813261d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf22165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000f139b6af65b7c45a47e381623dd511f4bcc8f53fb36737eb6a1ff6d8de36f0f6574a4222e15cfa9845a9d1d39eb7f6aad27c12d9270a6171a1f47d045ca5e749746a5a83b0b318b6f4e892d496c7c37271d45462550ba1ae485cd56bd671e56ea309ae95891f43cd1c7d81691d8204eb30eba2932e3fe0f838f1fd0153a36f10230ada35084857326849b79dd2876016791c72e4552728ae0f93886c6ecd71e50e8fde4bd64aa0ae21a6c2020ccbf43977f2b878a2e93a12d155a5ad2656e4ae5956f6da41731f7aa71872b9512bc0dcfe62b04afc4df6c5dc4ebb6034e705fe103572f424a7f132fdb02637a483de9c2b2c88be2d2400"/3074], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e145483ddd0569ba56a5cfd", 0x0, 0x22, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@orlov}, {@noload}, {@commit}]}, 0x0, 0x624, &(0x7f0000000100)="$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") r4 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',\x00']) fcntl$addseals(r4, 0x409, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r4}) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0xc17, &(0x7f0000000800)="$eJzs3UFsHNd9B+D/Gy3FldxWTJyodhsXm7ZIZcVyZUkxFatwVzXNNoAsC6GYWwCuyJW6MEUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRICeDwcy+FZcUZcmmSJH299nUb3bmvZn3ZtYzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+eLp59KjbgUAsJcuj3319BnPfwD4RLnq//8BAAAAAAAAAAAAAGC/S1HE45Fi7vJamqg+d9UvdWZu3R4fGd2+2pFU1TxUlS9/6s+dOXvuS88Pn+/lB9d/2J6MV8euXmy8NHtzbr69sNCeaozPdCZnp9oPvIed1t/qZHUCGjdfuzV1/fpC48yzZzdtvj303uBjx4cuDD996qle2fGR0dGxvjK1gY989Lvca4TH4SjiVKR45ns/Sa2IKGLn5+I+353ddqTqxMmqE+Mjo1VHpjutmcVy45XeiSgiGn2Vmr1ztAfXYkeaEUtl88sGnyy7NzbXmm9dm243rrTmFzuLndmZK6nb2rI/jSjifIpYjojVwbt3NxBF1CLFd46tpWsRcah3Hr5YDQy+dzuKXezjAyjb2RiIWC4OwDXbxwajiFcixU/fLmKyPGf5J74Q8UqZP4h4s8wXI1L5xTgX8e423yMOploU8Rfl9b+wlqaq+0HvvnLpa42vzFyf7Svbu68c+OfDXtrn96Z6FNGq7vhr6aP/ZgcAAAAAAAAAAAAAAACAh+1IFPFkpHj5P/6oGlcc1bj0YxeGf3/oF/vHjD9xn/2UZZ+NiKXiwcbkHs5DiK+kKyk94rHEn2T1KOKP8/i/bz3qxgAAAAAAAAAAAAAAAAAAAHyiFfHjSPHCOyfScvTPKd6ZudG42ro23Z0Vtjf3b2/O9PX19fVG6mYz50TOpZzLOVdyruaMItfP2cw5kXMp53LOlZyrOeNQrp+zmXMi51LO5ZwrOVdzRi3Xz9nMOZFzKedyzpWcqzljn8zdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEEe9Him9/Yy1FiohmxER0c2WwVwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJQGUxHfjxSNP2jeWVeLiFT923Wi/OVcNA+X+eloDpf5YjQv5mxVWWt+6xG0n50ZSEX8KFIM1t+6c8Hz9R/ofrrzNYg3v7nx6Vdq3TzU2zj03uBjx49dGB79tSfutZy2a8DJS52ZW7cb4yOjo2N9q2v56J/uWzeUj1s8nK4TEQuvv/Faa3q6PW/hk7FQ6y7UYp+0Z68W8v0q9kt7ti4090czNhYe8Y2JPVE+/9+NFL/9zn/2Hvi95/8vdD/decLHz/5k4/n/wtYd7dLz//G+dS/k340M1CLqizfnBo5H1Bdef+NU52brRvtGe+bc6dNfHh7+8tnTA4cj6tc70+2+pR2fKgAAAAAAAAAAAAAAAIC9lYr43UjR+tFaakTE7Wq81tCF4adPPXUoDlXjrTaN23p17OrFxkuzN+fm2wsL7anG+Exncnaq/aCHq1fDvcZHRnelM/d1ZJfbf6T+0uzc6/OdG3+4uO32o/WL1xYW51uT22+OI1FENPvXnKwaPD4yWjV6utOaqape2XYw3Yc3kIr4r0gxea6RPp/X5fF/W0f4bxr/v7R1R7s0/u9TfevKY6ZUxM8ixW/95RPx+aqdR+Ouc5bL/W2kOHn+c7lcHC7L9drQfa9Ad2RgWfb/IsU/vr+5bG885OMbZZ974BN7QJTX/1ik+P6ffzd+Pa/b/P6H7a//0a072qXr/5m+dUc3va9gx10nX/9TkeLFx9+K38jrPuj9H0Wsr6//acSJXPjO+zl26fp/tm/dUHSP+5sPr/sAAAAAAAAAAAAH1kAq4u8ixVOjtfR8Xvcgf/9vauuOdunvf/1y37qpPZqvaMcnFQAAAAD2iYFUxI8jxY3Ft+6Mod48/rtv/OfvbMy9PpK2bK3+nO+XqvcGPMw//+s3lI87sfNuAwAAAAAAAAAAAAAAAAAAwL6SUhHP5/nUJ+4zn/pKpHj5f57J5dLxslxvHvih6tf65dmZUxenp2cnW4uta9Ptxthca7Jd1v1MpFj7m8/lukU1v3pvvvnuHO/19d5c7PORYvTve2W7c7H35ibvzgfenYu9LPupSPHf/7C5bG8e689ulD1Tlv3rSPH1f96+7PGNsmfLst+NFD/8eqNX9mhZtvd+1O47Seu1mG4/Ozk7fderUAEAAAAAAAAAAAAAAAAAAODDGkhF/Fmk+N+by7GUh/3n+f97M/DXemXf/GbffP9b3K7m+R+q5v+/1/JHmf9/6KH1FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo4URbwRKeYur6WVwfJzV/1SZ+bW7fGR0e2rHUlVzUNV+fKn/tyZs+e+9Pzw+V5+cP2H7cl4dezqxcZLszfn5tsLC+2pxvhMZ3J2qv3Ae9hp/Y1T13WyOgGNm6/dmrp+faFx5tmzmzbfHnpv8LHjQxeGnz71VK/s+Mjo6FhfmdrAhzj6h2rchsNRxF9Fime+95P0L4MRRez8XNznu7PbjlSdOFl1YnxktOrIdKc1s1huvFLPpYqIRl+lZu8c7cG12JFmxFLZ/LLBJ8vujc215lvXptuNK635xc5iZ3bmSuq2tuxPI4o4nyKWI2J18O7dDUQRr0WK7xxbS/86GHGodx6+eHnsq6fP3LsdxS728QGU7WwMRCwXB+Ca7WODUcQ/RYqfvn0i/m0wohbdn/hCxCtl/iDizTJfjEjlF+NcxLvbfI84mGpRxP+X1//CWnp7sLwf9O4rl77W+MrM9dm+sr37yoF/PuylfX5vqkcRP6zu+Gvp3/13DQAAAAAAAAAAAAAAALCPFPGrkeKFd06kanzwnTHFnZkbjauta9PdYX29sX+9MdPr6+vrjdTNZs6JnEs5l3Ou5FzNGUWun7OZcyLnUs7lnCs5V3PGoVw/ZzPnRM6lnMs5V3Ku5oxarp+zmXMi51LO5ZwrOVdzxj4ZuwcAAAAAAAAAAAAAAAAAAHy8FNU/Kb79jbW0PtidX3oiurliPtCPvZ8HAAD//8dk/RI=") memfd_create(&(0x7f0000000300)='sysB%\xee\xde\xe0\x15X\xaftemckpr\x02\x13otonam\xa8]@P\xf1\xa7\x831/\xbd\xe0=\xaa\x9b\x00\x00\x12', 0x0) socket$unix(0x1, 0x1, 0x0) 6.460847019s ago: executing program 4 (id=1228): syz_emit_ethernet(0x3b3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61e"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 6.348146979s ago: executing program 4 (id=1229): socket$inet6(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x11, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ftruncate(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000eaff000800050008000000080004"], 0x3c}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0xc636}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 5.356262113s ago: executing program 0 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x4, 0x3}, 0xfffffffffffffe88) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4c}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r3) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe0}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0a1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce}]}]}]}, 0xa4}}, 0x40001) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x15, 0xa, 0x5, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000780)={0x2, 0xf, 0x1b, 0x1, 0x4, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d6, 0xc0, 0xaf, 0x96, 0x3, 0xc0000000}]}, 0x20}}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00018008000500000003000c0001"], 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, '\x00', r11, r1, 0x2, 0x1, 0x1}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x3c}}, 0x0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r14, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000000)=""/221, 0xfffffffffffffcc0}) 4.961722487s ago: executing program 0 (id=1232): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x85, 0x764, &(0x7f0000000f80)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x40) fallocate(r1, 0x20, 0x0, 0x1000f8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000380), 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002700), 0x0}, 0x50) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r8}, 0x50) sendmmsg$unix(r6, &(0x7f0000002700)=[{{&(0x7f0000002540)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, r5]}}], 0xc8, 0x40010}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000029c0)="a4b14e83409247d31add159d6f518dff3d079952c08580446002a24511498e13e2dff1ae3127dc1d8bba2573c3691b072c3fa65dfbd78582af236d016eb6cdbcb765963f8588de9bdb32f19691507b13409e9ff5a7150c624b5c06d6d0bd3511982a07e135c6a700", 0x68}], 0x1, &(0x7f0000002b80)=[@cred={{0x1c}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002c40)="9dbddd61a599b9fd18513a", 0xb}, {0x0}, {&(0x7f0000002f80)="bd7d4ac0a5774f55223b9b991ed7eb18be9314739fd8ae438890cddd996d493ec6d039c38ccd56eb86ef54885881fed5fa35fc39f1d0305b2001e2ab462466a9796b7a6b3c0136868d765a4ada058695e2710c9a782f8a1dc2a8cea8cc1dc76fbae553aa8e65102aa606a5847b916157cc0725", 0x73}, {&(0x7f0000003040)="8efe00bbdfc48c9a12e415424d2133ad354a2548d0ce3c91b41714575f92cc7cbd37a735d57b02b8d96bba884280351ed6911e9dac33ff6c0fdac159944373e81cd32b2141436c839a11c79db01a3017aad991f198fae8de0033072a5001fd8b4a", 0x61}], 0x4, &(0x7f0000005240)=[@rights={{0x24, 0x1, 0x1, [r3, r6, r3, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x68, 0xa842}}, {{0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f0000007800)}, {0x0}, {&(0x7f00000079c0)="812cf31e4db2fe295ff5d9df5222830379af034ff70ab939abf8d200aab2c71c157a5b45a0afd2defd58b87ff656d0dcedacee2f106825a614e545cb11c4e40983d357da883bd32aa788fc7cafc9e37772a28b", 0x53}, {0x0}, {0x0}, {&(0x7f0000007bc0)="c66c489b58bc4bf8d4671cbbd4153b5d38440c6e94d123deb34c97e9fb147ee7e304f62cd787626105f5", 0x2a}], 0x6, &(0x7f0000007cc0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x50}}], 0x4, 0x4015) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.747610905s ago: executing program 1 (id=1233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000ee4b0000000600000032c1530f0000000040"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3e, 0x0, 0x0, 0x2}, 0x50) mkdir(0x0, 0x0) r5 = dup3(r1, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'gre0\x00', 0x0}) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$romfs(&(0x7f0000000480), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20764e314fdc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x13e, &(0x7f00000004c0)="$eJzs2r9Kw1AUBvATEYQ+gjgUGrAO+a91cBcEJ5/A0OamwRuvJIK0U/EFFIfrI7i6iW4+QmafQN/AKZI0tSa3gkNBwe+33I+ey+nNcqZjJCJ2WGoQbU1ujl5XEhG3e95unznMp6kDImoXIcvzW5MUx5/1LJ+YyoXOU3V2Q3n4yCIeuGoPAAAAAAAAAAAAAAAAAAAAAIB/ovNWhdZQijsW8cD5Uk1H4xOf8yBJZ7/oVO3oEJNir7jv1fp134n0cn8nkvuXRd2u1fVZp82hFFrz/6xzTSMajY0o9sMgDE5d1+vZ27a941plL6vZUb+u3kRZ/nCm7hPp9/N9ohd7wb5Ra3qsrkfy6oJt1LvPv39R0OjbEgLCkgPRn3gGQhma84MGa17nuZhOZl/wwY/mx3KCOtIAfsdHAAAA///ckzXc") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/104, 0x68) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 4.543475633s ago: executing program 3 (id=1234): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d0300000800"], 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ef6a997fb2963b8909e7a8041f8c84afda621b1878024d8e22271af9f", @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800c001a800800028004000180"], 0x40}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe0, &(0x7f00000000c0)=""/224}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r9 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) r10 = openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000240)=0x800, 0x12) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_int(r13, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 4.417761103s ago: executing program 2 (id=1235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0xfeffff, &(0x7f00000007c0)="df"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x7e, 0x7fff) r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x4010, r4, 0x95709000) r5 = dup(r3) write$cgroup_pid(r5, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) sendfile(r3, r5, &(0x7f0000000100), 0x6c03) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x4000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x207, 0x5, 0x8, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f0000000080)={&(0x7f0000000540)=""/115, 0x73, 0x0, &(0x7f00000005c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.447469466s ago: executing program 1 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004800)={0x2020}, 0x2020) lseek(r5, 0xfffffffffffffff5, 0x1) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/31, 0x1f}], 0x1) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001e0000a38000"], 0x30}}, 0x0) sendmmsg$unix(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x24000081}}], 0x1, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 3.419047239s ago: executing program 0 (id=1237): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000004c0)={@pppoe={0x18, 0x0, {0x4, @local, 'team0\x00'}}, {&(0x7f0000000200)=""/54, 0x36}, &(0x7f0000000280), 0x20}, 0xa0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x40) fcntl$lock(r4, 0x3, &(0x7f0000000100)={0x1, 0x1, 0x6f, 0x8d8}) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) listen(r1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000008000000000000c00094f"], 0x28}}, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.368698223s ago: executing program 2 (id=1238): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b80)={0xffffffffffffffff}) shutdown(r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r5, &(0x7f0000000200), 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000010c0)) recvmsg$kcm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/64, 0x40}], 0x1}, 0x0) sendmmsg$unix(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="db801fda91a11ef9d6ee97ab508c396d6fa4fe8fe097a66f22678897b46ad0841d3c18d8af5d8a3536b916838e2643ccc64de7faecd24143cc23e73ae3b461f123"], 0x90}}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001bc0)}, {&(0x7f0000000480)="a1d57d8556af6fbc3bd84f5903bce2d617ad8e27f366e4d754a5f6", 0x1b}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x4000}}, {{&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{0x0}], 0x1, &(0x7f0000003380)=ANY=[@ANYRES32, @ANYRES32], 0x18, 0x80}}], 0x6, 0x0) 3.292931529s ago: executing program 4 (id=1239): syz_emit_ethernet(0x3b5, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 3.258821242s ago: executing program 3 (id=1240): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r5}, {r5}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3.119363274s ago: executing program 2 (id=1241): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0xfffffea7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497d, &(0x7f0000000100)={0x0, 0x8ff3, 0x800, 0x0, 0x1ed}, &(0x7f0000000040), &(0x7f0000000180)) r2 = io_uring_setup(0x3eb1, &(0x7f0000000480)={0x0, 0x655f, 0x800, 0x0, 0x0, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x0, 0x300) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r7) r9 = dup3(r6, r3, 0x0) ioctl$NBD_DO_IT(r9, 0xab03) write$binfmt_misc(r8, &(0x7f0000000300)={'syz1', "d2216281721efe9bf1fdd1f3"}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400003ebd4b0510830027e1aaa2436f6004ea0df342350d02237083d692b6436169441f121c70a7648d493d6a8cac0bef4d8f06636408d50aa7c94509933e64171c0d7119ed316fbc2bb1998eb568c2c05907d321a427e7f232ca7b101f3bc3e148e6ed43cdea9138dae5f33f9957f5bb252a11fe059d98cde79c61aaa653beb307478fc29c61433267557ce8400f759a9a337b8d3daccf340a8c18ff8641409a61b55c8f711d4ad976dc78df58d2788e0af097da7448a245004c290a9766b7afae", @ANYRES16=0x0], 0x34}}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 3.088855897s ago: executing program 4 (id=1242): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x7b9, 0xfffffffe) syz_emit_vhci(0x0, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setparam(0x0, &(0x7f0000000400)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000576000/0xd000)=nil, 0xd000}}) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xc8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c000180"], 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x4, 0x3}}, 0x2e) accept4(0xffffffffffffffff, &(0x7f0000000540)=@nl=@unspec, &(0x7f0000000200)=0x80, 0x800) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="caa2e39ec01b52a3bb72b9f1ea75aceba61f03a0b21f0e899d5efb9151d834ef3cf80bd643a4f18c3eb459c25d842b3255a36a5f246086cf8aa5", 0x3a}], 0x1) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e05000f205a00f88d188eea041b4452c6ea7360368bbcc1e0e9de9d30850edf9772525d75c4653b12aae8dec4c1eae9383dbbc59225326d37c7fc1d1901283ad19b291c77067e62cc43e9c406dea5bfd6dfda0600bdc5fadf45d2c39171592a26904e2d6de41ea609cc8af30e07e51d6f83ce56a33d2cf579b312a6f1552779e114b2c9495cfdd563b93123910efa8d38ddcf87537d21075afdc008019b033c0970454d9ef085fc85ead9cc8bad61ae8dac92469aa3d9178a39d9aebfd172"], 0x8) 2.594403379s ago: executing program 4 (id=1243): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@ifindex, 0xffffffffffffffff, 0xe, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r4, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r0, r0}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) pwritev(r8, &(0x7f00000033c0)=[{&(0x7f00000030c0)='\n', 0x1}], 0x1, 0x0, 0x0) 1.907599188s ago: executing program 0 (id=1244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x540c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000180)={0x0, 0x5}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) 1.882231319s ago: executing program 3 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x1}) listen(r0, 0xfffbf7f5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket(0x1e, 0x1, 0x0) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000001100)=ANY=[@ANYBLOB="01"], 0x6d, 0x0) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='\"'], 0x8, 0x0) msgctl$IPC_RMID(r6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, 0x0, 0x0) io_setup(0x100, &(0x7f0000000280)=0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000002000000052e7c66505a127317c4175aefc76fdd67be1035d68561d1acb1e7e55f4920ab6ffc853dc134b3e7e8c32fba232c50f71d972dd145cdf5ecac12bf8b8ae08fe1fb3b30955f70e733b94b9c18ffb67d25f78730380c726d41e6e49a74b6c8b77763bb37e225ca7959148f19a2aefca11cb6371ee0be0196985a8cd1aa17c5d8fbea633ef69bf9de29256f5ffe3e9882d9d202997700adf9baa599b2afff4a57f9b176c7032c22f55d6c8abd01e20ece404f4b82c6b2cf0350b88e"], 0x8, 0x0) kexec_load(0x0, 0x1, &(0x7f00000014c0)=[{0x0, 0x0, 0xff9f3a2a00000000}], 0x0) io_submit(r8, 0x1, &(0x7f0000000900)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x8}}, 0x10) 940.37438ms ago: executing program 0 (id=1246): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x1a4, &(0x7f0000000d00)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x7, 0x0) getdents(r0, 0x0, 0x22) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9}}}]}}]}, 0x45c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32], 0x11, 0x6a0, &(0x7f0000004200)="$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") r4 = creat(&(0x7f00000201c0)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b28, 0x0) pwrite64(r4, &(0x7f0000000240)="ac", 0xc00, 0x10001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 704.8618ms ago: executing program 4 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x4) ioctl$IMGETCOUNT(r3, 0x80044944, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000180)={r1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000800000000000000059500000000000000f6243a8022bf391259245e29e986e685a8a3f43558634989776b600b90e2f864d418443460452587e4058daab35bf616de"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r6, r5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') write$FUSE_POLL(r8, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r10, 0x1, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}}, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48}, 0x0) 0s ago: executing program 0 (id=1248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0xfeffff, &(0x7f00000007c0)="df"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x7e, 0x7fff) r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x4010, r4, 0x95709000) r5 = dup(r3) write$cgroup_pid(r5, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) sendfile(r3, r5, &(0x7f0000000100), 0x6c03) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x4000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x207, 0x5, 0x8, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f0000000080)={&(0x7f0000000540)=""/115, 0x73, 0x0, &(0x7f00000005c0)=""/249, 0xf9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.472657][ T8598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.504001][ T8716] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000004,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 420.543774][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.559041][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.607338][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.659916][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.705429][ T3614] Bluetooth: hci0: command 0x0419 tx timeout [ 420.712607][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.766855][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.804870][ T8716] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 420.844423][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 420.884116][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.897535][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 420.997723][ T8741] loop1: detected capacity change from 0 to 256 [ 421.263793][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 421.931493][ T21] usb 1-1: USB disconnect, device number 18 [ 421.954734][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.963507][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.128407][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.132534][ T8755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.980'. [ 422.221911][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 422.458130][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.473921][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.525850][ T8707] device bridge_slave_0 entered promiscuous mode [ 422.576552][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.611910][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.619589][ T5550] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 422.654883][ T8707] device bridge_slave_1 entered promiscuous mode [ 422.774543][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.885060][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.923541][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.950350][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.004025][ T5550] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 423.012910][ T5550] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 423.125302][ T5550] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.251565][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.267887][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.306298][ T8598] device veth0_vlan entered promiscuous mode [ 423.314687][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.333786][ T5550] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.334986][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.351009][ T3614] Bluetooth: hci1: command 0x041b tx timeout [ 423.366292][ T5550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.398792][ T5550] usb 2-1: Product: syz [ 423.417764][ T8707] team0: Port device team_slave_0 added [ 423.430384][ T5550] usb 2-1: Manufacturer: syz [ 423.450208][ T5550] usb 2-1: SerialNumber: syz [ 423.469214][ T8707] team0: Port device team_slave_1 added [ 423.519629][ T8598] device veth1_vlan entered promiscuous mode [ 423.622243][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.652771][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.775164][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.819516][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.841041][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.952073][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.605209][ T5552] Bluetooth: hci5: command 0x0409 tx timeout [ 424.611407][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 424.650906][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.660710][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.920337][ T8707] device hsr_slave_0 entered promiscuous mode [ 424.927422][ T8707] device hsr_slave_1 entered promiscuous mode [ 424.963545][ T8598] device veth0_macvtap entered promiscuous mode [ 424.991915][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.002304][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.011866][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.019528][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.029452][ T8752] device bridge_slave_0 entered promiscuous mode [ 425.041110][ T8598] device veth1_macvtap entered promiscuous mode [ 425.052408][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.062767][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.091297][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.099870][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.118481][ T8752] device bridge_slave_1 entered promiscuous mode [ 425.148158][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.160178][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.171926][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.183118][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.194169][ T5549] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 425.212668][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.224013][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.234728][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.245302][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.257319][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.289613][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.322829][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.350464][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.362359][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.372461][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.383547][ T5550] usb 2-1: 0:2 : does not exist [ 425.392716][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.423796][ T3614] Bluetooth: hci1: command 0x040f tx timeout [ 425.438963][ T5550] usb 2-1: USB disconnect, device number 27 [ 425.458877][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.469520][ T5549] usb 1-1: Using ep0 maxpacket: 8 [ 425.486236][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.500610][ T8031] udevd[8031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.521481][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.526096][ T8831] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.532637][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.555434][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.565860][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.591474][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.609210][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.625252][ T8598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.641801][ T8598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.667971][ T8598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.683771][ T8598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.703495][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.783744][ T5549] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=cb.d8 [ 425.803270][ T5549] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 425.828226][ T5549] usb 1-1: Manufacturer: syz [ 425.832842][ T5549] usb 1-1: SerialNumber: syz [ 425.867673][ T8752] team0: Port device team_slave_0 added [ 425.884837][ T5549] usb 1-1: config 0 descriptor?? [ 425.928578][ T5549] gspca_main: spca501-2.14.0 probing 0000:0000 [ 425.964806][ T8752] team0: Port device team_slave_1 added [ 426.003127][ T8707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.135778][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.142730][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.185479][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.250577][ T8707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.266255][ T5549] gspca_spca501: reg write: error -71 [ 426.271643][ T5549] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 426.281409][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.297794][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.300570][ T5549] spca501: probe of 1-1:0.0 failed with error -22 [ 426.332467][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.355984][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 426.398881][ T5549] usb 1-1: USB disconnect, device number 19 [ 426.462587][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.492835][ T8707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.496003][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.569325][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.596794][ T8707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.626261][ T3614] Bluetooth: hci5: command 0x041b tx timeout [ 426.643278][ T8752] device hsr_slave_0 entered promiscuous mode [ 426.654714][ T8752] device hsr_slave_1 entered promiscuous mode [ 426.668673][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.681586][ T8752] Cannot create hsr debugfs directory [ 426.698626][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.715003][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.779206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 426.995953][ T8707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.017763][ T8844] IPv6: Can't replace route, no match found [ 427.082324][ T8752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.111575][ T8707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.135609][ T8707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.152156][ T8707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.198482][ T8845] team0: Device geneve2 is up. Set it down before adding it as a team port [ 427.256577][ T8752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.348618][ T8752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.439062][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.487604][ T8752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.505098][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 427.601942][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.621663][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.635562][ T8850] loop4: detected capacity change from 0 to 1024 [ 427.675292][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.733808][ T8850] EXT4-fs (loop4): Unrecognized mount option "measure" or missing value [ 427.771226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.791199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.866710][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.873877][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.020285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.044248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.708878][ T4803] Bluetooth: hci5: command 0x040f tx timeout [ 428.754108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.804545][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.811829][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.828348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.850072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.864847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.875542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.898995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.910220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.919752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.947501][ T8707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.042065][ T8707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.648712][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.700576][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.187250][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.196076][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 430.284543][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.483128][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 430.498826][ T6315] device hsr_slave_0 left promiscuous mode [ 430.555930][ T6315] device hsr_slave_1 left promiscuous mode [ 430.562624][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.571278][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.580454][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.588612][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.597567][ T6315] device bridge_slave_1 left promiscuous mode [ 430.604181][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.615583][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.623070][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.634327][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.647937][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.658953][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.676978][ T23] usb 2-1: config 0 descriptor?? [ 430.684642][ T6315] device bridge_slave_0 left promiscuous mode [ 430.690864][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.720856][ T6315] device veth1_macvtap left promiscuous mode [ 430.727534][ T6315] device veth0_macvtap left promiscuous mode [ 430.734221][ T6315] device veth1_vlan left promiscuous mode [ 430.740447][ T6315] device veth0_vlan left promiscuous mode [ 430.784004][ T3616] Bluetooth: hci5: command 0x0419 tx timeout [ 430.882696][ T8876] loop4: detected capacity change from 0 to 40427 [ 430.965871][ T8876] F2FS-fs (loop4): invalid crc value [ 431.019015][ T8876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 431.167257][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 431.177776][ T8876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 431.192208][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input24 [ 431.287763][ T23] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 431.336906][ T6315] team0 (unregistering): Port device team_slave_1 removed [ 431.374049][ T8598] attempt to access beyond end of device [ 431.374049][ T8598] loop4: rw=2049, want=45104, limit=40427 [ 431.386768][ T6315] team0 (unregistering): Port device team_slave_0 removed [ 431.402632][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.420529][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.667224][ T8895] udc-core: couldn't find an available UDC or it's busy [ 431.685424][ T8895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 431.782351][ T6315] bond0 (unregistering): Released all slaves [ 431.844254][ T8752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.853390][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.896410][ T8752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.943111][ T8752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.002699][ T8898] Option 'kÆvÏ4ì…ð' to dns_resolver key: bad/missing value [ 432.003696][ T8752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.070509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.079615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.117425][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.132499][ T8898] 9pnet: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 432.192514][ T23] usb 2-1: USB disconnect, device number 28 [ 432.338755][ T8903] loop4: detected capacity change from 0 to 256 [ 432.379170][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.397199][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.424592][ T8903] exfat: Bad value for 'gid' [ 432.831730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.866857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.895695][ T8707] device veth0_vlan entered promiscuous mode [ 432.897813][ T8903] loop4: detected capacity change from 0 to 764 [ 432.907054][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.922139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.935277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.973447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.001437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.023817][ T3612] Bluetooth: hci0: command 0x0406 tx timeout [ 433.042172][ T8707] device veth1_vlan entered promiscuous mode [ 433.091242][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.223488][ T8707] device veth0_macvtap entered promiscuous mode [ 433.272066][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.310135][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.457236][ T8752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.509345][ T8752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.544738][ T8707] device veth1_macvtap entered promiscuous mode [ 433.560234][ T8910] loop4: detected capacity change from 0 to 4096 [ 433.720496][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.783019][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.947549][ T8910] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 433.990261][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.200243][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.258223][ T8910] ntfs: volume version 3.1. [ 434.274161][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.281249][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.154037][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.163144][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.194367][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.201448][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.260746][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.281657][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.314188][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.374210][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.513646][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.148985][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.206732][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.252546][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.296973][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.351102][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.411746][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.456724][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.515122][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.590271][ T8928] bridge0: port 3(team0) entered blocking state [ 436.609653][ T8928] bridge0: port 3(team0) entered disabled state [ 436.628272][ T8928] device team0 entered promiscuous mode [ 436.637950][ T8928] device team_slave_0 entered promiscuous mode [ 436.646075][ T8928] device team_slave_1 entered promiscuous mode [ 436.658157][ T8928] bridge0: port 3(team0) entered blocking state [ 436.665090][ T8928] bridge0: port 3(team0) entered forwarding state [ 436.676558][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.687550][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.698330][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.713208][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.723787][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.735042][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.755695][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.779653][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.790542][ T1074] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 436.818424][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.842416][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.855868][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.888104][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.915535][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.944770][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.970484][ T8936] loop4: detected capacity change from 0 to 164 [ 436.990558][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.011725][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.033427][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.064893][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.101062][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.116234][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.128893][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.140108][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.226632][ T8707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.261470][ T8707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.291814][ T8707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.310915][ T8707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.358012][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.393853][ T1074] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 437.403455][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.411814][ T1074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.432762][ T1074] usb 2-1: Product: syz [ 437.433973][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.444435][ T1074] usb 2-1: Manufacturer: syz [ 437.453158][ T1074] usb 2-1: SerialNumber: syz [ 437.581911][ T1074] usb 2-1: config 0 descriptor?? [ 437.616715][ T8939] mkiss: ax0: crc mode is auto. [ 437.686831][ T8944] ubi: mtd0 is already attached to ubi0 [ 437.742239][ T8944] program syz.4.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.781915][ T1074] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 438.239536][ T8949] loop4: detected capacity change from 0 to 256 [ 438.260611][ T8922] overlayfs: missing 'lowerdir' [ 438.277089][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.286308][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.348519][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.361426][ T1074] usb 2-1: USB disconnect, device number 29 [ 438.369188][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.507173][ T8752] device veth0_vlan entered promiscuous mode [ 439.009338][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.017748][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.038367][ T2680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.055084][ T8752] device veth1_vlan entered promiscuous mode [ 439.152390][ T2680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.226475][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.237439][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.282031][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.321721][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.371675][ T8958] loop0: detected capacity change from 0 to 512 [ 439.396409][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.425878][ T8752] device veth0_macvtap entered promiscuous mode [ 439.433264][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.654964][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.818957][ T8752] device veth1_macvtap entered promiscuous mode [ 439.831011][ T8958] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 439.985294][ T8958] UDF-fs: Scanning with blocksize 512 failed [ 440.019829][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.033175][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.042891][ T8958] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 440.055919][ T8958] UDF-fs: Scanning with blocksize 1024 failed [ 440.064188][ T8955] delete_channel: no stack [ 440.067989][ T8958] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 440.091226][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.114760][ T8958] UDF-fs: Scanning with blocksize 2048 failed [ 440.145270][ T8958] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 440.186915][ T8963] loop4: detected capacity change from 0 to 1024 [ 440.192221][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.226743][ T8958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.243029][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.271244][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.309891][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.362717][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.494348][ T8966] program syz.1.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.853847][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.627086][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.669337][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.715192][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.749396][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.785416][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.802231][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1019'. [ 441.855386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.894562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.077366][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.088545][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.111183][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.215747][ T8981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 442.585127][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 442.799860][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.155790][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.187714][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.213271][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.232562][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.242813][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.260405][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.272470][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.313752][ T5553] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 443.331786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.420923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.457084][ T8752] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.497381][ T8752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.537560][ T8752] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.551776][ T8989] loop1: detected capacity change from 0 to 4096 [ 443.563790][ T8752] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.713962][ T5553] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 443.722677][ T5553] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 443.751435][ T5553] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.843691][ T4803] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 443.920743][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.956208][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.963929][ T5553] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.987907][ T5553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.015954][ T5553] usb 1-1: Product: syz [ 444.031703][ T5553] usb 1-1: Manufacturer: syz [ 444.036543][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 444.050446][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.065552][ T5553] usb 1-1: SerialNumber: syz [ 444.085096][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.113930][ T4803] usb 3-1: Using ep0 maxpacket: 16 [ 444.132046][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.212441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.234075][ T4803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 444.265636][ T4803] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 444.283656][ T4803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.312445][ T4803] usb 3-1: config 0 descriptor?? [ 444.371856][ T8996] loop1: detected capacity change from 0 to 16384 [ 444.386495][ T9000] loop4: detected capacity change from 0 to 256 [ 444.738428][ T9000] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 444.844626][ T5553] usb 1-1: 0:2 : does not exist [ 444.947629][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.018437][ T8992] udc-core: couldn't find an available UDC or it's busy [ 445.088058][ T8992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.114262][ T4803] hid (null): report_id 0 is invalid [ 445.135759][ T4803] hid (null): report_id 2838798905 is invalid [ 445.141881][ T4803] hid (null): unknown global tag 0xc [ 445.195559][ T4803] hid (null): unknown global tag 0xa5 [ 445.200994][ T4803] hid (null): unknown global tag 0xd [ 445.230559][ T4803] hid (null): unknown global tag 0xc [ 445.290921][ T4803] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 445.348617][ T9006] loop1: detected capacity change from 0 to 512 [ 445.360541][ T4803] hid-generic 0003:0158:0100.0008: unexpected long global item [ 445.388957][ T4803] hid-generic: probe of 0003:0158:0100.0008 failed with error -22 [ 445.428698][ T9006] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1028: casefold flag without casefold feature [ 445.481704][ T9006] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 445.515884][ T3612] usb 3-1: USB disconnect, device number 21 [ 445.586695][ T9006] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.630685][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 445.642851][ T9011] loop3: detected capacity change from 0 to 4096 [ 445.662829][ T9014] batman_adv: Cannot find parent device [ 445.681252][ T9014] device erspan1 entered promiscuous mode [ 445.693860][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 445.745831][ T3616] usb 1-1: USB disconnect, device number 20 [ 446.396644][ T9023] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.693798][ T3614] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 447.153655][ T3614] usb 3-1: Using ep0 maxpacket: 32 [ 447.216415][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 447.420458][ T9026] loop1: detected capacity change from 0 to 2048 [ 447.463497][ T9030] loop4: detected capacity change from 0 to 16 [ 447.485632][ T3614] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 447.499958][ T9028] syz.0.1034[9028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.500020][ T9028] syz.0.1034[9028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.514212][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.539623][ T9030] erofs: (device loop4): mounted with root inode @ nid 36. [ 447.592941][ T9030] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 447.641837][ T9030] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 447.714429][ T9030] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 447.760267][ T3614] usb 3-1: config 0 descriptor?? [ 447.784619][ T9035] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 447.805524][ T3614] gspca_main: sunplus-2.14.0 probing 041e:400b [ 447.828177][ T9030] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 448.393674][ T3614] gspca_sunplus: reg_w_riv err -110 [ 448.398947][ T3614] sunplus: probe of 3-1:0.0 failed with error -110 [ 448.507045][ T9035] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 448.543053][ T9030] xt_hashlimit: size too large, truncated to 1048576 [ 448.557441][ T9043] loop1: detected capacity change from 0 to 512 [ 448.565310][ T9030] xt_hashlimit: Unknown mode mask 312, kernel too old? [ 448.571574][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 448.623288][ T9043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 448.653106][ T9041] loop0: detected capacity change from 0 to 2048 [ 448.825398][ T9043] EXT4-fs (loop1): 1 orphan inode deleted [ 448.846461][ T9043] EXT4-fs (loop1): 1 truncate cleaned up [ 449.077542][ T9054] overlayfs: failed to get inode (-116) [ 449.084040][ T9054] overlayfs: failed to get inode (-116) [ 449.090483][ T9054] overlayfs: failed to get inode (-116) [ 449.096928][ T9054] overlayfs: failed to get inode (-116) [ 449.651415][ T9043] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 449.675263][ T9041] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 449.711960][ T26] audit: type=1800 audit(1724963109.306:511): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 449.784053][ T9041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 449.907061][ T9060] EXT4-fs (loop0): Unrecognized mount option "ÿÿ0xffffffffffffffff00000000000000000000000ñ¼Þ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 449.907061][ T9060] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 450.075181][ T9063] loop3: detected capacity change from 0 to 1764 [ 450.124370][ T9041] EXT4-fs (loop0): Remounting filesystem read-only [ 450.279415][ T9043] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.1038: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 450.653220][ T5557] usb 3-1: USB disconnect, device number 22 [ 450.691318][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1038'. [ 450.713081][ T9043] EXT4-fs (loop1): Remounting filesystem read-only [ 450.997305][ T9072] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.097381][ T9076] loop4: detected capacity change from 0 to 4096 [ 451.129864][ T9079] loop0: detected capacity change from 0 to 164 [ 451.129866][ T9072] loop3: detected capacity change from 0 to 128 [ 451.176017][ T9080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.268236][ T5557] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 451.274029][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 451.919208][ T5557] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 451.962186][ T5557] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 451.984295][ T5557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.023891][ T23] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 452.318786][ T9084] ubi: mtd0 is already attached to ubi0 [ 452.370826][ T9084] program syz.0.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.385808][ T5557] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.670952][ T5557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.708922][ T5557] usb 3-1: Product: syz [ 452.729607][ T5557] usb 3-1: Manufacturer: syz [ 452.746052][ T5557] usb 3-1: SerialNumber: syz [ 452.973888][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 452.993844][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.020097][ T23] usb 2-1: config 0 descriptor?? [ 453.133773][ T5553] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 453.275548][ T9089] loop0: detected capacity change from 0 to 16 [ 453.372965][ T9089] erofs: (device loop0): mounted with root inode @ nid 36. [ 453.595318][ T5557] usb 3-1: 0:2 : does not exist [ 453.650278][ T26] audit: type=1326 audit(1724963113.246:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 453.868255][ T26] audit: type=1326 audit(1724963113.286:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 453.979209][ T26] audit: type=1326 audit(1724963113.336:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.013808][ T5553] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 454.022856][ T5553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.082745][ T5553] usb 5-1: Product: syz [ 454.103052][ T5553] usb 5-1: Manufacturer: syz [ 454.103659][ T26] audit: type=1326 audit(1724963113.336:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.123332][ T5553] usb 5-1: SerialNumber: syz [ 454.174286][ T5553] usb 5-1: config 0 descriptor?? [ 454.198692][ T26] audit: type=1326 audit(1724963113.336:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.237727][ T5553] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 454.299540][ T26] audit: type=1326 audit(1724963113.336:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.333737][ T23] usb 2-1: Cannot read MAC address [ 454.339137][ T23] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 454.356263][ T23] usb 2-1: USB disconnect, device number 30 [ 454.414775][ T9056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.437585][ T26] audit: type=1326 audit(1724963113.336:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.451589][ T5552] usb 3-1: USB disconnect, device number 23 [ 454.512791][ T9056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.531714][ T26] audit: type=1326 audit(1724963113.336:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.540618][ T5553] usb 5-1: USB disconnect, device number 17 [ 454.618010][ T26] audit: type=1326 audit(1724963113.336:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f73be7a8ef9 code=0x7ffc0000 [ 454.992039][ T9106] hub 9-0:1.0: USB hub found [ 455.031597][ T9106] hub 9-0:1.0: 8 ports detected [ 455.881039][ T9056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.922866][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 455.987265][ T9056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.121729][ T9115] input: syz1 as /devices/virtual/input/input25 [ 456.749336][ T3612] Bluetooth: hci5: command 0x0409 tx timeout [ 457.006823][ T9133] loop1: detected capacity change from 0 to 4096 [ 457.110867][ T9136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.187143][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 459.199132][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 459.270619][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 459.381339][ T9135] netlink: 'syz.4.1058': attribute type 21 has an invalid length. [ 459.401457][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.426965][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.489725][ T9093] device bridge_slave_0 entered promiscuous mode [ 459.559404][ T9147] sp0: Synchronizing with TNC [ 459.698621][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.707724][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.724364][ T9093] device bridge_slave_1 entered promiscuous mode [ 460.364740][ T9152] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 461.263894][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 461.403080][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.443432][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 461.502761][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.568124][ T9181] loop4: detected capacity change from 0 to 128 [ 461.593264][ T9180] fuse: Unknown parameter '½Zƒ0x0000000000000008' [ 461.662306][ T9093] team0: Port device team_slave_0 added [ 461.713278][ T9093] team0: Port device team_slave_1 added [ 461.720375][ T9180] netdevsim netdevsim1: Direct firmware load for e 028d 012b 0000 0000 0000 [ 461.720375][ T9180] failed with error -2 [ 461.806945][ T9180] netdevsim netdevsim1: Falling back to sysfs fallback for: e 028d 012b 0000 0000 0000 [ 461.806945][ T9180] [ 461.820058][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.845276][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.932891][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.970837][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.000605][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.027132][ T3612] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 462.072467][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.123733][ T9205] 9pnet_rdma: rdma_create_trans (9205): problem binding to privport: 13 [ 462.189903][ T9209] loop2: detected capacity change from 0 to 164 [ 462.262981][ T9093] device hsr_slave_0 entered promiscuous mode [ 462.371479][ T9093] device hsr_slave_1 entered promiscuous mode [ 462.461061][ T9093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.482412][ T9093] Cannot create hsr debugfs directory [ 462.555353][ T9217] ubi: mtd0 is already attached to ubi0 [ 462.610662][ T9217] program syz.2.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.754309][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1072'. [ 462.993889][ T5557] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 463.253898][ T3612] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=7b.a3 [ 463.273419][ T3612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.283757][ T3612] usb 2-1: Product: syz [ 463.311698][ T3612] usb 2-1: Manufacturer: syz [ 463.335143][ T3612] usb 2-1: SerialNumber: syz [ 463.343936][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 463.367603][ T9226] ALSA: mixer_oss: invalid OSS volume 'D£ n*@\%΂`.%å½p€lÄ/¡á²“Î' [ 463.377836][ T3612] usb 2-1: config 0 descriptor?? [ 463.382897][ T9225] PKCS8: Unsupported PKCS#8 version [ 463.417334][ T3612] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found [ 463.452647][ T3612] usb 2-1: selecting invalid altsetting 1 [ 463.468811][ T3612] snd_usb_variax 2-1:0.0: set_interface failed [ 463.493781][ T3612] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected [ 463.504637][ T3612] snd_usb_variax: probe of 2-1:0.0 failed with error -22 [ 463.563971][ T5557] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 463.572151][ T5557] usb 5-1: config 0 has no interface number 1 [ 463.578720][ T5557] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 463.589408][ T5557] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 463.683837][ T5557] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 463.698344][ T5557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.729664][ T5557] usb 5-1: SerialNumber: syz [ 463.768870][ T5557] usb 5-1: config 0 descriptor?? [ 463.827495][ T5557] usb 5-1: Found UVC 0.00 device (0002:0000) [ 463.835673][ T5557] usb 5-1: No valid video chain found. [ 463.959116][ T9056] device hsr_slave_0 left promiscuous mode [ 463.972326][ T9056] device hsr_slave_1 left promiscuous mode [ 463.983281][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.995895][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.012018][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.023327][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.076824][ T9056] device bridge_slave_1 left promiscuous mode [ 464.103219][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.120879][ T9212] vivid-001: ================= START STATUS ================= [ 464.141123][ T9212] vivid-001: Generate PTS: true [ 464.183492][ T9212] vivid-001: Generate SCR: true [ 464.277466][ T9212] tpg source WxH: 640x360 (Y'CbCr) [ 464.286014][ T9056] device bridge_slave_0 left promiscuous mode [ 464.292240][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.292266][ T9212] tpg field: 1 [ 464.303438][ T9212] tpg crop: 640x360@0x0 [ 464.308097][ T9212] tpg compose: 640x360@0x0 [ 464.312519][ T9212] tpg colorspace: 8 [ 464.320173][ T9212] tpg transfer function: 0/2 [ 464.327824][ T9212] tpg Y'CbCr encoding: 0/1 [ 464.332311][ T9212] tpg quantization: 0/2 [ 464.343417][ T9212] tpg RGB range: 0/2 [ 464.402328][ T9056] device veth1_macvtap left promiscuous mode [ 464.408935][ T9212] vivid-001: ================== END STATUS ================== [ 464.443639][ T9056] device veth0_macvtap left promiscuous mode [ 464.453942][ T9056] device veth1_vlan left promiscuous mode [ 464.459740][ T9056] device veth0_vlan left promiscuous mode [ 464.602448][ T6742] usb 5-1: USB disconnect, device number 18 [ 464.998735][ T9263] loop2: detected capacity change from 0 to 256 [ 465.207871][ T9056] team0 (unregistering): Port device team_slave_1 removed [ 465.280969][ T9056] team0 (unregistering): Port device team_slave_0 removed [ 466.390914][ T9056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.579408][ T9056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.377788][ T9056] bond0 (unregistering): Released all slaves [ 467.521855][ T6742] usb 2-1: USB disconnect, device number 31 [ 467.625271][ T9287] loop1: detected capacity change from 0 to 164 [ 467.974108][ T9295] Bluetooth: hci6: Frame reassembly failed (-84) [ 469.514485][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 469.911178][ T9295] loop4: detected capacity change from 0 to 65536 [ 470.003209][ T1074] XFS (loop4): Superblock earlier than Version 5 has XFS_{P|G}QUOTA_{ENFD|CHKD} bits. [ 470.150068][ T9293] loop2: detected capacity change from 0 to 4096 [ 470.172467][ T1074] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb block 0x0 [ 470.237024][ T9306] ubi: mtd0 is already attached to ubi0 [ 470.319233][ T9306] program syz.1.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.774937][ T1074] XFS (loop4): Unmount and run xfs_repair [ 470.780705][ T1074] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 470.788245][ T1074] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 01 00 00 XFSB............ [ 470.793358][ T9093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.799946][ T1074] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 470.812984][ T1074] 00000020: 5e 62 73 b8 21 67 42 bb 91 1b 41 8a a1 4a 12 61 ^bs.!gB...A..J.a [ 470.836735][ T1074] 00000030: 00 00 00 00 00 00 80 40 00 00 00 00 00 00 00 20 .......@....... [ 470.871015][ T9309] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.890535][ T1074] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 470.906937][ T1074] 00000050: 00 00 00 08 00 00 80 00 00 00 00 02 00 00 00 00 ................ [ 470.915904][ T1074] 00000060: 00 00 0b 40 b4 b4 02 00 01 00 00 02 00 00 00 00 ...@............ [ 470.924863][ T1074] 00000070: 00 00 00 00 00 00 00 00 09 09 08 01 0f 00 00 19 ................ [ 470.934289][ T9295] XFS (loop4): SB validate failed with error -117. [ 471.010609][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 471.320538][ T9093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.504281][ T23] Bluetooth: hci6: command 0x1003 tx timeout [ 471.516487][ T2680] Bluetooth: hci6: Frame reassembly failed (-84) [ 471.741387][ T2680] Bluetooth: hci6: Frame reassembly failed (-84) [ 471.816195][ T9093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.883889][ T9093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.703644][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 473.150630][ T9346] loop1: detected capacity change from 0 to 1764 [ 473.197935][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.324879][ T5557] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 473.562111][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.584166][ T23] Bluetooth: hci6: command 0x1001 tx timeout [ 473.585188][ T9350] loop0: detected capacity change from 0 to 256 [ 473.590328][ T3579] Bluetooth: hci6: sending frame failed (-49) [ 473.598131][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.665448][ T9093] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.774119][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.794546][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.833820][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.840966][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.883936][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.900617][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.984305][ T9352] fuse: Unknown parameter 'ý:  ªømî‡Ìÿ|÷ŠYtÛà ¨–.ª ŸVÜ~Ézdßêê`À“‚„9UÄêçÎÑvoF §á¨öa Q6<-:›‘_ÿscä|{ÇÃË…éµÓÏ5Ô†ÔƒÎü¾c° ²bÏã]ÑIÝŠ¶~œ¹ò00000000000000000000003' [ 474.093376][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.100516][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.344800][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.369369][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 474.388615][ T9355] input: syz0 as /devices/virtual/input/input26 [ 474.425330][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.454975][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.493891][ T5557] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 474.541703][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.549834][ T5557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.573969][ T5557] usb 3-1: Product: syz [ 474.578168][ T5557] usb 3-1: Manufacturer: syz [ 474.584809][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.606979][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.611712][ T9362] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 474.624807][ T5557] usb 3-1: SerialNumber: syz [ 474.631794][ T5557] usb 3-1: config 0 descriptor?? [ 474.641179][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.683330][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.692426][ T5557] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 474.726786][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.798295][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.849393][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.891329][ T9093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.902389][ T9345] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 474.911677][ T9345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 474.997075][ T3612] usb 3-1: USB disconnect, device number 24 [ 475.220982][ T9383] loop1: detected capacity change from 0 to 1024 [ 475.224888][ T9385] 9pnet: Insufficient options for proto=fd [ 475.259040][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 475.287467][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.333038][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.402717][ T9383] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 475.418280][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.432753][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.516009][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.533691][ T3612] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 475.549820][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.602324][ T9391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 475.617223][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.652569][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.668636][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 475.689400][ T9093] device veth0_vlan entered promiscuous mode [ 475.766158][ T9093] device veth1_vlan entered promiscuous mode [ 475.803665][ T3612] usb 1-1: Using ep0 maxpacket: 16 [ 475.858154][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 475.875895][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 475.905990][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.923862][ T3612] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 475.931414][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.947947][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 475.988094][ T9093] device veth0_macvtap entered promiscuous mode [ 475.997619][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 476.027465][ T9093] device veth1_macvtap entered promiscuous mode [ 476.095161][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.128365][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.159328][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.193811][ T3612] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 476.193976][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.231337][ T3612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.234397][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.274037][ T3612] usb 1-1: Product: syz [ 476.274194][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.278266][ T3612] usb 1-1: Manufacturer: syz [ 476.310695][ T3612] usb 1-1: SerialNumber: syz [ 476.312226][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.350054][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.359309][ T3612] usb 1-1: config 0 descriptor?? [ 476.382288][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.439713][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.475252][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.504715][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.513234][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.556187][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.586590][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.622354][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.651359][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.690314][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.726679][ T21] usb 1-1: USB disconnect, device number 21 [ 476.729656][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.792545][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.845968][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.874907][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.911307][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.933073][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.956560][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.986301][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.009409][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.020326][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.048484][ T9093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.080236][ T9093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.132552][ T9093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.154341][ T9093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.894205][ T9401] loop2: detected capacity change from 0 to 256 [ 477.939489][ T2680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.978163][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.994251][ T2680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.007446][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.072357][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.132837][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.975726][ T9409] loop0: detected capacity change from 0 to 1024 [ 479.051356][ T9410] atomic_op ffff88807893c998 conn xmit_atomic 0000000000000000 [ 479.253361][ T9409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.597916][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 479.597929][ T26] audit: type=1326 audit(1724963139.196:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.3.1051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff532025ef9 code=0x0 [ 479.654310][ T9422] IPv6: sit1: Disabled Multicast RS [ 479.744388][ T9430] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 479.957079][ T9435] loop3: detected capacity change from 0 to 2048 [ 480.444377][ T5557] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 480.883941][ T5557] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 480.912829][ T5557] usb 1-1: New USB device found, idVendor=1546, idProduct=1343, bcdDevice=d9.6b [ 480.966058][ T5557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.065070][ T5557] usb 1-1: config 0 descriptor?? [ 481.106214][ T5557] usb 1-1: bad CDC descriptors [ 481.155094][ T5557] option 1-1:0.0: GSM modem (1-port) converter detected [ 481.370991][ T9447] loop3: detected capacity change from 0 to 164 [ 481.417042][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 481.678910][ T9056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.764522][ T9449] ubi: mtd0 is already attached to ubi0 [ 481.887726][ T9449] program syz.3.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.440110][ T9056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.441911][ T5557] Bluetooth: hci0: command 0x0409 tx timeout [ 482.610840][ T9056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.645049][ T9455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.813817][ T5549] usb 1-1: USB disconnect, device number 22 [ 482.872459][ T5549] option 1-1:0.0: device disconnected [ 482.934768][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.942314][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.485993][ T9418] device bridge_slave_0 entered promiscuous mode [ 483.509466][ T9462] netlink: 'syz.1.1120': attribute type 4 has an invalid length. [ 483.517387][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 483.537565][ T9056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.550176][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.561478][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.723505][ T9418] device bridge_slave_1 entered promiscuous mode [ 483.772521][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 483.881170][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.927403][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.092362][ T9418] team0: Port device team_slave_0 added [ 484.112582][ T9476] batadv0: mtu less than device minimum [ 484.156063][ T9418] team0: Port device team_slave_1 added [ 484.242853][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.278726][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.380289][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.473835][ T5557] Bluetooth: hci0: command 0x041b tx timeout [ 484.481600][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.507855][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.603864][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.783835][ T9418] device hsr_slave_0 entered promiscuous mode [ 484.818212][ T9496] fuse: Unknown parameter 'use00000000000000000000' [ 484.825509][ T9418] device hsr_slave_1 entered promiscuous mode [ 484.842869][ T9418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.856370][ T9496] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1128'. [ 484.936820][ T3612] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 485.064302][ T26] audit: type=1326 audit(1724963144.536:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff532025ef9 code=0x0 [ 486.144994][ T9418] Cannot create hsr debugfs directory [ 486.363616][ T3612] usb 3-1: Using ep0 maxpacket: 16 [ 486.386312][ T9503] hub 6-0:1.0: USB hub found [ 486.391120][ T9503] hub 6-0:1.0: 1 port detected [ 486.483883][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.515412][ T3612] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.546269][ T3612] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.554481][ T5557] Bluetooth: hci0: command 0x040f tx timeout [ 486.567706][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.590005][ T3612] usb 3-1: config 0 descriptor?? [ 486.625182][ T6742] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 486.657756][ T6742] Bluetooth: hci2: Injecting HCI hardware error event [ 486.676823][ T3579] Bluetooth: hci2: hardware error 0x00 [ 486.702436][ T9512] loop1: detected capacity change from 0 to 512 [ 486.775901][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1131'. [ 487.201153][ T9418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.213834][ T3612] usbhid 3-1:0.0: can't add hid device: -71 [ 487.213898][ T5549] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 487.220860][ T3612] usbhid: probe of 3-1:0.0 failed with error -71 [ 487.257426][ T3612] usb 3-1: USB disconnect, device number 25 [ 487.286844][ T9418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.377109][ T9056] device hsr_slave_0 left promiscuous mode [ 487.390737][ T9056] device hsr_slave_1 left promiscuous mode [ 487.402560][ T9535] misc userio: Invalid payload size [ 487.408332][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.416063][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.428326][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.436408][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.454472][ T9056] device team0 left promiscuous mode [ 487.463642][ T9056] device team_slave_0 left promiscuous mode [ 487.479156][ T9056] device team_slave_1 left promiscuous mode [ 487.487863][ T9056] bridge0: port 3(team0) entered disabled state [ 487.499500][ T9056] device bridge_slave_1 left promiscuous mode [ 487.507013][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.513702][ T5549] usb 1-1: Using ep0 maxpacket: 16 [ 487.521046][ T9056] device bridge_slave_0 left promiscuous mode [ 487.532612][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.561074][ T9056] device veth1_macvtap left promiscuous mode [ 487.568419][ T9056] device veth0_macvtap left promiscuous mode [ 487.582326][ T9056] device veth1_vlan left promiscuous mode [ 487.592939][ T9056] device veth0_vlan left promiscuous mode [ 487.653831][ T5549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.674275][ T5549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.765348][ C1] eth0: bad gso: type: 1, size: 1408 [ 487.774074][ T5549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.790168][ T5549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 487.945370][ T5549] usb 1-1: SerialNumber: syz [ 488.014690][ T5549] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 488.040243][ T5549] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 488.169487][ T5549] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 488.709971][ T5549] Bluetooth: hci0: command 0x0419 tx timeout [ 488.819322][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1137'. [ 488.834842][ T9550] loop3: detected capacity change from 0 to 512 [ 488.853658][ T4364] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 488.907225][ T9056] team0 (unregistering): Port device team_slave_1 removed [ 488.940802][ T9056] team0 (unregistering): Port device team_slave_0 removed [ 488.981436][ T9550] Invalid option length (398) for dns_resolver key [ 488.989163][ T9056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.032053][ T9056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.042475][ T9517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.126072][ T5549] usb 1-1: USB disconnect, device number 23 [ 489.209783][ T9550] could not allocate digest TFM handle sha256-arm64-neon [ 489.217417][ T4364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.247016][ T4364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.291919][ T9560] futex_wake_op: syz.3.1138 tries to shift op by -1; fix this program [ 489.295139][ T9056] bond0 (unregistering): Released all slaves [ 489.452343][ T9418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 489.477664][ T9418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 489.564000][ T4364] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.585107][ T9563] loop3: detected capacity change from 0 to 16 [ 489.635753][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.782678][ T9563] erofs: (device loop3): mounted with root inode @ nid 36. [ 489.953645][ T26] audit: type=1800 audit(1724963149.526:578): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 489.986545][ T3584] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 490.042918][ T4364] usb 3-1: Product: syz [ 490.076634][ T4364] usb 3-1: Manufacturer: syz [ 490.081254][ T4364] usb 3-1: SerialNumber: syz [ 490.092383][ T9564] loop1: detected capacity change from 0 to 2048 [ 490.259382][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.349825][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.368387][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.382002][ T9564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 490.408508][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.536075][ T4364] usb 3-1: USB disconnect, device number 26 [ 490.572875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.601688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.612945][ T8403] udevd[8403]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.668234][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.675383][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.740336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.855341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.896055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.917690][ T9564] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.1139: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 490.931649][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.942448][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.167149][ T9587] loop2: detected capacity change from 0 to 40427 [ 491.241948][ T9587] F2FS-fs (loop2): invalid crc value [ 491.289019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.326182][ T9587] F2FS-fs (loop2): Found nat_bits in checkpoint [ 491.375770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.408067][ T9587] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 491.628931][ T9418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.086107][ T9418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.105235][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1144'. [ 492.146815][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.187010][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.199367][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.211041][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.228492][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.315810][ T8707] attempt to access beyond end of device [ 492.315810][ T8707] loop2: rw=524288, want=45072, limit=40427 [ 492.341430][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.360868][ T8707] attempt to access beyond end of device [ 492.360868][ T8707] loop2: rw=0, want=45072, limit=40427 [ 492.389666][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.410783][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.451700][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.488738][ T9618] loop3: detected capacity change from 0 to 16 [ 492.508020][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.540104][ T9618] erofs: (device loop3): mounted with root inode @ nid 36. [ 492.821617][ T3584] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[9000] [ 492.884516][ T9618] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 492.906355][ T26] audit: type=1800 audit(1724963152.506:579): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1147" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 492.996243][ T3724] attempt to access beyond end of device [ 492.996243][ T3724] loop2: rw=2049, want=41104, limit=40427 [ 493.226275][ T9632] loop1: detected capacity change from 0 to 128 [ 494.238782][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.284064][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.327716][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.333075][ T9639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.411659][ T9639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.555741][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 495.131149][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.150099][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.210931][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.236311][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.281517][ T9418] device veth0_vlan entered promiscuous mode [ 495.293633][ T21] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 495.301537][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.326477][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.368912][ T9418] device veth1_vlan entered promiscuous mode [ 495.474348][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.506850][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.536237][ T9418] device veth0_macvtap entered promiscuous mode [ 495.629021][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 495.804480][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.854587][ T9418] device veth1_macvtap entered promiscuous mode [ 495.924493][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.214072][ T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 496.223141][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.249548][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.269905][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.282482][ T21] usb 4-1: config 0 descriptor?? [ 496.299668][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.331942][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.377553][ T9671] loop1: detected capacity change from 0 to 128 [ 496.391678][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.465565][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.506327][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.558621][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.573064][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.580226][ T9655] loop3: detected capacity change from 0 to 512 [ 496.591252][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.603098][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.614325][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.626639][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.635142][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.651267][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.675887][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.708855][ T9671] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 496.750608][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.762220][ T9655] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,grpquota,,errors=continue. Quota mode: writeback. [ 496.784346][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.801081][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.804156][ T9655] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 496.811823][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.838431][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.849609][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.863739][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.933647][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.945364][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.958238][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.971375][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.989684][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.019795][ T9418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.033030][ T9418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.070024][ T9418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.099117][ T9418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.469587][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.496810][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.607178][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 497.632577][ T3726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.706143][ T9675] chnl_net:caif_netlink_parms(): no params data found [ 497.716716][ T3726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.877342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.556918][ T4803] Bluetooth: hci1: command 0x0409 tx timeout [ 498.733782][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 498.740670][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 498.770410][ T21] usb 4-1: USB disconnect, device number 22 [ 499.000685][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.048214][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.109098][ T9675] device bridge_slave_0 entered promiscuous mode [ 499.302674][ T9710] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 499.595183][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.631096][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.887771][ T9675] device bridge_slave_1 entered promiscuous mode [ 500.076728][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.128249][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.322564][ T9675] team0: Port device team_slave_0 added [ 500.357076][ T9722] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 500.363092][ T9675] team0: Port device team_slave_1 added [ 500.375925][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.502491][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.541857][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.571312][ T9723] tmpfs: Unknown parameter 'fd' [ 500.581951][ T9723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 500.598846][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.625033][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 500.655264][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.678716][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.749358][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.794668][ T9675] device hsr_slave_0 entered promiscuous mode [ 500.801656][ T9675] device hsr_slave_1 entered promiscuous mode [ 500.815199][ T9675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.841691][ T9675] Cannot create hsr debugfs directory [ 501.239653][ T9732] loop0: detected capacity change from 0 to 2048 [ 501.364327][ T9732] loop0: p1 p2 p3 [ 501.848652][ T3028] loop0: p1 p2 p3 [ 502.012640][ T9675] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.683848][ T4364] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 502.834562][ T3612] Bluetooth: hci1: command 0x040f tx timeout [ 502.845413][ T3612] Bluetooth: hci5: command 0x0409 tx timeout [ 502.850424][ T8403] udevd[8403]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 502.866180][ T8031] udevd[8031]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 502.879978][ T7898] udevd[7898]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 502.894408][ T9056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.962521][ T9675] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.063690][ T4364] usb 1-1: Using ep0 maxpacket: 32 [ 503.069160][ T9056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.116292][ T9753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.123570][ T9753] IPv6: NLM_F_CREATE should be set when creating new route [ 503.179916][ T9675] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.215478][ T9056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.268293][ T9675] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.294678][ T9056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.343870][ T4364] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 503.367746][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.403496][ T4364] usb 1-1: Product: syz [ 503.408588][ T4364] usb 1-1: Manufacturer: syz [ 503.434822][ T9725] chnl_net:caif_netlink_parms(): no params data found [ 503.461317][ T4364] usb 1-1: SerialNumber: syz [ 503.490687][ T4364] usb 1-1: config 0 descriptor?? [ 503.552766][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.595903][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.603128][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.612106][ T9725] device bridge_slave_0 entered promiscuous mode [ 503.622632][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.630425][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.639161][ T9725] device bridge_slave_1 entered promiscuous mode [ 503.647207][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.685970][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.710517][ T9725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.765637][ T9725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.843752][ T4364] snd-usb-audio: probe of 1-1:0.0 failed with error -71 [ 503.884648][ T4364] usb 1-1: USB disconnect, device number 24 [ 503.931154][ T9725] team0: Port device team_slave_0 added [ 504.011536][ T9725] team0: Port device team_slave_1 added [ 504.138799][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.169142][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.276723][ T9725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.282792][ T9786] loop4: detected capacity change from 0 to 256 [ 504.429303][ T9786] FAT-fs (loop4): Directory bread(block 64) failed [ 504.444711][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.451395][ T9791] devpts: called with bogus options [ 504.473077][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.484297][ T9786] FAT-fs (loop4): Directory bread(block 65) failed [ 504.510980][ T9791] loop0: detected capacity change from 0 to 764 [ 504.527834][ T9786] FAT-fs (loop4): Directory bread(block 66) failed [ 504.534683][ T9786] FAT-fs (loop4): Directory bread(block 67) failed [ 504.541389][ T9786] FAT-fs (loop4): Directory bread(block 68) failed [ 504.542879][ T9725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.548850][ T9786] FAT-fs (loop4): Directory bread(block 69) failed [ 504.581633][ T9786] FAT-fs (loop4): Directory bread(block 70) failed [ 504.602103][ T9786] FAT-fs (loop4): Directory bread(block 71) failed [ 504.629485][ T9786] FAT-fs (loop4): Directory bread(block 72) failed [ 504.658042][ T9786] FAT-fs (loop4): Directory bread(block 73) failed [ 504.785828][ T9675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.832109][ T9725] device hsr_slave_0 entered promiscuous mode [ 504.853320][ T9725] device hsr_slave_1 entered promiscuous mode [ 504.869996][ T9725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.878449][ T5549] Bluetooth: hci5: command 0x041b tx timeout [ 504.885709][ T5549] Bluetooth: hci1: command 0x0419 tx timeout [ 504.900529][ T9725] Cannot create hsr debugfs directory [ 504.938521][ T9675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.984391][ T9675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 505.778511][ T9675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 505.938523][ T9802] loop0: detected capacity change from 0 to 32768 [ 505.994098][ T9802] XFS: attr2 mount option is deprecated. [ 506.000165][ T9802] XFS: noikeep mount option is deprecated. [ 506.104214][ T9802] XFS (loop0): Mounting V5 Filesystem [ 506.196227][ T9802] XFS (loop0): Ending clean mount [ 506.218104][ T9802] XFS (loop0): Quotacheck needed: Please wait. [ 506.220179][ T9825] netlink: 'syz.4.1181': attribute type 3 has an invalid length. [ 506.239291][ T9825] netlink: 'syz.4.1181': attribute type 3 has an invalid length. [ 506.331443][ T9802] XFS (loop0): Quotacheck: Done. [ 506.414081][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.644018][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.970970][ T5557] Bluetooth: hci5: command 0x040f tx timeout [ 507.307007][ T7897] XFS (loop0): Unmounting Filesystem [ 508.434225][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.479430][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.820269][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.892653][ T9850] bridge0: port 3(erspan0) entered blocking state [ 508.899219][ T9850] bridge0: port 3(erspan0) entered disabled state [ 508.906788][ T9850] device erspan0 entered promiscuous mode [ 508.912916][ T9850] bridge0: port 3(erspan0) entered blocking state [ 508.919403][ T9850] bridge0: port 3(erspan0) entered forwarding state [ 509.026540][ T9857] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1188'. [ 509.036167][ T1074] Bluetooth: hci5: command 0x0419 tx timeout [ 509.077349][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.104548][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.123940][ T9853] loop4: detected capacity change from 0 to 132 [ 509.128012][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.137335][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.182270][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.198200][ T9859] bond0: option mode: unable to set because the bond device has slaves [ 509.219380][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.271243][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.311773][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.318897][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.456828][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.143837][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.153322][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.247665][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.451018][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.822358][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.003501][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.013503][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.022537][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.117151][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.133974][ T9891] kvm [9890]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 511.135935][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.210285][ T9675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.573748][ T9774] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 511.607423][ T9725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.642496][ T9725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.925021][ T9725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.103565][ T9725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.140101][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.185602][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.232297][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.252931][ T9927] device syz_tun entered promiscuous mode [ 512.268309][ T9926] device syz_tun left promiscuous mode [ 512.360450][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.389195][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.393968][ T9774] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 512.481827][ T9056] device hsr_slave_0 left promiscuous mode [ 512.495279][ T9056] device hsr_slave_1 left promiscuous mode [ 512.516352][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.540655][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.587056][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.617944][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.642630][ T9056] device bridge_slave_1 left promiscuous mode [ 512.664018][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.684520][ T9056] device bridge_slave_0 left promiscuous mode [ 512.690741][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.739273][ T9056] device hsr_slave_0 left promiscuous mode [ 512.758797][ T9056] device hsr_slave_1 left promiscuous mode [ 512.770039][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.782164][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.795419][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.803043][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.819639][ T9056] device bridge_slave_1 left promiscuous mode [ 512.830754][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.849261][ T9056] device bridge_slave_0 left promiscuous mode [ 512.861012][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.881349][ T9056] device veth1_macvtap left promiscuous mode [ 512.896756][ T9056] device veth0_macvtap left promiscuous mode [ 512.903009][ T9056] device veth1_vlan left promiscuous mode [ 512.915076][ T9056] device veth0_vlan left promiscuous mode [ 512.922375][ T9056] device veth1_macvtap left promiscuous mode [ 512.936811][ T9056] device veth0_macvtap left promiscuous mode [ 512.945247][ T9056] device veth1_vlan left promiscuous mode [ 512.951274][ T9056] device veth0_vlan left promiscuous mode [ 513.044596][ T9774] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 513.066076][ T9774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.135503][ T9774] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 513.150374][ T9774] usb 1-1: No valid video chain found. [ 513.264251][ T9965] loop1: detected capacity change from 0 to 64 [ 513.432515][ T9965] overlayfs: upper fs needs to support d_type. [ 513.490556][ T9965] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 513.516738][ T9965] overlayfs: failed to set xattr on upper [ 513.528887][ T9965] overlayfs: ...falling back to index=off,metacopy=off. [ 513.692207][ T9056] team0 (unregistering): Port device team_slave_1 removed [ 513.732353][ T9056] team0 (unregistering): Port device team_slave_0 removed [ 513.764817][ T9056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.797207][ T9056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.967352][ T9056] bond0 (unregistering): Released all slaves [ 514.214229][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 514.290795][ T9056] team0 (unregistering): Port device team_slave_1 removed [ 514.296927][ T7907] Trying to free block not in datazone [ 514.305634][ T7907] Trying to free block not in datazone [ 514.311162][ T7907] Trying to free block not in datazone [ 514.317623][ T7907] Trying to free block not in datazone [ 514.323137][ T7907] Trying to free block not in datazone [ 514.329076][ T7907] minix_free_block (loop1:6): bit already cleared [ 514.338998][ T7907] Trying to free block not in datazone [ 514.340595][ T9056] team0 (unregistering): Port device team_slave_0 removed [ 514.344591][ T7907] Trying to free block not in datazone [ 514.408629][ T9056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.418725][ T9774] usb 1-1: USB disconnect, device number 25 [ 514.503905][ T9056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.630754][ T9056] bond0 (unregistering): Released all slaves [ 514.700266][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.714961][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.733114][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.741642][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.762120][ T9675] device veth0_vlan entered promiscuous mode [ 514.807155][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.836461][ T9675] device veth1_vlan entered promiscuous mode [ 514.857456][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.866673][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.878407][ T9725] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.910368][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.920447][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.955458][ T9675] device veth0_macvtap entered promiscuous mode [ 514.970235][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.981882][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.999766][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.017750][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.024835][ T3732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.046497][ T9675] device veth1_macvtap entered promiscuous mode [ 515.079630][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.088080][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 515.108274][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.117629][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.126478][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.133565][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.147262][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.170507][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.190937][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.212560][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.233027][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.254962][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.282005][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.303005][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.325643][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.343255][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.361256][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.371684][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.394774][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.410897][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.431552][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.452506][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.472239][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.493275][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.506137][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.517258][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.529235][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.545716][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.560805][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.586293][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.601670][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.612614][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.632803][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.652549][ T9675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.669928][ T9675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.679761][ T9675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.696131][ T9675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.720277][ T9725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.741529][ T9725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.762152][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.772404][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.788697][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.799790][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.816281][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.831544][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.842440][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.973146][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.010999][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.059822][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.080863][ T3936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.102342][ T3936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.138054][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 516.176294][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.184186][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.191676][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.252588][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.262473][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.282664][ T9977] loop1: detected capacity change from 0 to 128 [ 516.297171][ T9725] device veth0_vlan entered promiscuous mode [ 516.312610][ T9981] loop2: detected capacity change from 0 to 512 [ 516.327517][ T9725] device veth1_vlan entered promiscuous mode [ 516.398482][ T9725] device veth0_macvtap entered promiscuous mode [ 516.418961][ T9725] device veth1_macvtap entered promiscuous mode [ 516.444469][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.486511][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.497938][ T9981] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.629621][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 517.043748][ T9987] x_tables: unsorted underflow at hook 3 [ 517.592253][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 517.679282][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.683082][ T9981] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 517.688938][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.719554][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 517.762521][ T9981] EXT4-fs (loop2): 1 truncate cleaned up [ 517.811331][ T9981] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 517.840916][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 517.855058][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 517.887933][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.897894][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.948648][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.962107][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.977177][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.991950][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.006417][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.041566][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.052289][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.062168][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.073439][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.085083][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.793450][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.824557][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.861204][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.889567][T10000] loop0: detected capacity change from 0 to 512 [ 518.908598][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.935895][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.955130][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.966468][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.977282][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.987465][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.998397][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.009153][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.027132][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.042778][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.059792][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.070714][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.084492][ T9725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.093458][ T9725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.112458][T10000] EXT4-fs (loop0): Ignoring removed oldalloc option [ 519.127038][ T9725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.132518][T10000] EXT4-fs (loop0): error: journal path ./file0 is not a block device [ 519.167477][ T9725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.273939][ T5553] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 519.369802][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.369823][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.388427][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.858854][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.135963][T10000] loop0: detected capacity change from 0 to 512 [ 520.157104][ T5553] usb 5-1: Using ep0 maxpacket: 32 [ 520.206011][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.234803][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.307420][T10013] loop1: detected capacity change from 0 to 1024 [ 520.354477][T10000] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.1215: invalid block [ 520.407322][T10000] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1215: couldn't read orphan inode 11 (err -117) [ 520.449859][T10013] EXT4-fs (loop1): Ignoring removed oldalloc option [ 520.456696][ T5553] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 520.486928][ T5553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.525888][T10000] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,data_err=abort,inode_readahead_blks=0x0000000000400000,auto_da_alloc=0x0000000000000009,acl,,errors=continue. Quota mode: writeback. [ 520.555126][T10013] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 520.589984][ T5553] usb 5-1: Product: syz [ 520.612807][ T5553] usb 5-1: Manufacturer: syz [ 520.649081][ T5553] usb 5-1: SerialNumber: syz [ 520.682857][ T5553] usb 5-1: config 0 descriptor?? [ 520.708387][T10000] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1215: Directory hole found for htree leaf block 0 [ 521.135483][ T5553] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 521.167317][ T5553] usb 5-1: USB disconnect, device number 19 [ 521.205378][T10029] binder: 10028:10029 ioctl c0306201 200003c0 returned -14 [ 522.406824][T10042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 523.271983][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 523.352435][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 523.433040][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 523.461944][T10057] device bridge_slave_1 left promiscuous mode [ 523.499158][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.552012][T10057] device bridge_slave_0 left promiscuous mode [ 523.579214][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.783646][ T5553] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 523.859276][T10068] TCP: TCP_TX_DELAY enabled [ 524.043769][ T5553] usb 3-1: Using ep0 maxpacket: 8 [ 524.137350][T10075] loop1: detected capacity change from 0 to 1024 [ 524.173866][ T5553] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.182171][T10075] hfsplus: invalid uid specified [ 524.202547][ T5553] usb 3-1: config 179 has no interface number 0 [ 524.233615][ T5553] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.234217][T10075] hfsplus: unable to parse mount options [ 524.297648][ T5553] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 524.361602][T10080] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1229'. [ 524.363689][ T5553] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.518995][ T5553] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 524.592597][ T5553] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.676390][T10082] loop1: detected capacity change from 0 to 1024 [ 524.690426][ T5553] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 524.745667][ T5553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.760310][T10082] EXT4-fs (loop1): Ignoring removed orlov option [ 524.778323][T10082] EXT4-fs (loop1): filesystem is read-only [ 524.814214][T10082] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 38698 [ 524.873883][T10062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 524.983081][ T5553] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input28 [ 525.075580][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 525.094421][T10075] loop1: detected capacity change from 0 to 2048 [ 525.354260][ T5553] usb 3-1: USB disconnect, device number 27 [ 525.373593][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 525.403868][ T5553] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 525.461405][T10075] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 525.610725][T10075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.754548][T10091] loop0: detected capacity change from 0 to 2048 [ 525.891462][T10091] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1232: bad orphan inode 8192 [ 525.973149][T10091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.225594][T10101] loop1: detected capacity change from 0 to 22 [ 526.794288][T10101] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 526.810428][T10101] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 527.599536][T10117] loop3: detected capacity change from 0 to 40427 [ 527.637175][T10127] qrtr: Invalid version 0 [ 527.671391][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 527.687524][T10117] F2FS-fs (loop3): invalid crc value [ 527.715139][T10124] block nbd2: NBD_DISCONNECT [ 527.765730][T10117] F2FS-fs (loop3): Found nat_bits in checkpoint [ 527.827199][T10117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 528.646165][ T9725] attempt to access beyond end of device [ 528.646165][ T9725] loop3: rw=524288, want=45072, limit=40427 [ 528.695771][ T9725] attempt to access beyond end of device [ 528.695771][ T9725] loop3: rw=0, want=45072, limit=40427 [ 529.587103][T10150] loop0: detected capacity change from 0 to 8 [ 529.788849][ T26] audit: type=1326 audit(1724963189.386:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc032acdef9 code=0x7ffc0000 [ 529.811192][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.826072][ T3634] attempt to access beyond end of device [ 529.826072][ T3634] loop3: rw=2049, want=41104, limit=40427 [ 529.877447][T10150] SQUASHFS error: Failed to read block 0x63a: -5 [ 529.969972][ T26] audit: type=1326 audit(1724963189.436:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc032acdef9 code=0x7ffc0000 [ 530.032313][T10150] SQUASHFS error: Unable to read metadata cache entry [638] [ 530.082180][T10150] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 530.464852][T10153] SQUASHFS error: Unable to read metadata cache entry [638] [ 530.476756][T10153] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 530.659462][T10160] [ 530.661815][T10160] ====================================================== [ 530.668824][T10160] WARNING: possible circular locking dependency detected [ 530.675832][T10160] 5.15.165-syzkaller #0 Not tainted [ 530.681019][T10160] ------------------------------------------------------ [ 530.688022][T10160] syz.4.1249/10160 is trying to acquire lock: [ 530.694078][T10160] ffffffff8cef7b68 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x2f/0x1a0 [ 530.703665][T10160] [ 530.703665][T10160] but task is already holding lock: [ 530.711023][T10160] ffffffff8c7d8708 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3c0 [ 530.721126][T10160] [ 530.721126][T10160] which lock already depends on the new lock. [ 530.721126][T10160] [ 530.731516][T10160] [ 530.731516][T10160] the existing dependency chain (in reverse order) is: [ 530.740503][T10160] [ 530.740503][T10160] -> #8 (system_transition_mutex/1){+.+.}-{3:3}: [ 530.748987][T10160] lock_acquire+0x1db/0x4f0 [ 530.754018][T10160] __mutex_lock_common+0x1da/0x25a0 [ 530.759714][T10160] mutex_lock_nested+0x17/0x20 [ 530.765320][T10160] software_resume+0x7c/0x3c0 [ 530.770517][T10160] resume_store+0xe3/0x130 [ 530.775438][T10160] kernfs_fop_write_iter+0x3a2/0x4f0 [ 530.781241][T10160] vfs_write+0xacd/0xe50 [ 530.785986][T10160] ksys_write+0x1a2/0x2c0 [ 530.790811][T10160] do_syscall_64+0x3b/0xb0 [ 530.795722][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.802111][T10160] [ 530.802111][T10160] -> #7 (&of->mutex){+.+.}-{3:3}: [ 530.809288][T10160] lock_acquire+0x1db/0x4f0 [ 530.814284][T10160] __mutex_lock_common+0x1da/0x25a0 [ 530.819975][T10160] mutex_lock_nested+0x17/0x20 [ 530.825235][T10160] kernfs_seq_start+0x50/0x3b0 [ 530.830512][T10160] seq_read_iter+0x3d0/0xd10 [ 530.835596][T10160] vfs_read+0xa93/0xe10 [ 530.840246][T10160] ksys_read+0x1a2/0x2c0 [ 530.844980][T10160] do_syscall_64+0x3b/0xb0 [ 530.849888][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.856273][T10160] [ 530.856273][T10160] -> #6 (&p->lock){+.+.}-{3:3}: [ 530.863276][T10160] lock_acquire+0x1db/0x4f0 [ 530.868273][T10160] __mutex_lock_common+0x1da/0x25a0 [ 530.873968][T10160] mutex_lock_nested+0x17/0x20 [ 530.879240][T10160] seq_read_iter+0xae/0xd10 [ 530.884238][T10160] generic_file_splice_read+0x4ad/0x790 [ 530.890281][T10160] splice_direct_to_actor+0x448/0xc10 [ 530.896146][T10160] do_splice_direct+0x285/0x3d0 [ 530.901489][T10160] do_sendfile+0x622/0x1000 [ 530.906485][T10160] __se_sys_sendfile64+0x178/0x1e0 [ 530.912090][T10160] do_syscall_64+0x3b/0xb0 [ 530.917000][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.923387][T10160] [ 530.923387][T10160] -> #5 (sb_writers#3){.+.+}-{0:0}: [ 530.930741][T10160] lock_acquire+0x1db/0x4f0 [ 530.935743][T10160] lo_write_bvec+0x1a3/0x740 [ 530.940829][T10160] loop_process_work+0x2309/0x2af0 [ 530.946432][T10160] process_one_work+0x8a1/0x10c0 [ 530.951862][T10160] worker_thread+0xaca/0x1280 [ 530.957030][T10160] kthread+0x3f6/0x4f0 [ 530.961590][T10160] ret_from_fork+0x1f/0x30 [ 530.966500][T10160] [ 530.966500][T10160] -> #4 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 530.975847][T10160] lock_acquire+0x1db/0x4f0 [ 530.980845][T10160] process_one_work+0x7f1/0x10c0 [ 530.986277][T10160] worker_thread+0xaca/0x1280 [ 530.991450][T10160] kthread+0x3f6/0x4f0 [ 530.996022][T10160] ret_from_fork+0x1f/0x30 [ 531.000935][T10160] [ 531.000935][T10160] -> #3 ((null)){+.+.}-{0:0}: [ 531.007764][T10160] lock_acquire+0x1db/0x4f0 [ 531.012759][T10160] flush_workqueue+0x170/0x1610 [ 531.018103][T10160] drain_workqueue+0xc5/0x390 [ 531.023271][T10160] destroy_workqueue+0x7b/0xae0 [ 531.028612][T10160] __loop_clr_fd+0x241/0xbe0 [ 531.033698][T10160] blkdev_put+0x455/0x790 [ 531.038519][T10160] deactivate_locked_super+0xa0/0x110 [ 531.044384][T10160] cleanup_mnt+0x44e/0x500 [ 531.049294][T10160] task_work_run+0x129/0x1a0 [ 531.054378][T10160] exit_to_user_mode_loop+0x106/0x130 [ 531.060242][T10160] exit_to_user_mode_prepare+0xb1/0x140 [ 531.066279][T10160] syscall_exit_to_user_mode+0x5d/0x240 [ 531.072318][T10160] do_syscall_64+0x47/0xb0 [ 531.077227][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.083616][T10160] [ 531.083616][T10160] -> #2 (&lo->lo_mutex){+.+.}-{3:3}: [ 531.091052][T10160] lock_acquire+0x1db/0x4f0 [ 531.096136][T10160] __mutex_lock_common+0x1da/0x25a0 [ 531.101827][T10160] mutex_lock_killable_nested+0x17/0x20 [ 531.107864][T10160] lo_open+0x68/0x100 [ 531.112341][T10160] blkdev_get_whole+0x94/0x390 [ 531.117595][T10160] blkdev_get_by_dev+0x2bc/0xa50 [ 531.123020][T10160] blkdev_open+0x138/0x2d0 [ 531.127930][T10160] do_dentry_open+0x807/0xfb0 [ 531.133102][T10160] path_openat+0x2705/0x2f20 [ 531.138206][T10160] do_filp_open+0x21c/0x460 [ 531.143218][T10160] do_sys_openat2+0x13b/0x4f0 [ 531.148386][T10160] __x64_sys_openat+0x243/0x290 [ 531.153729][T10160] do_syscall_64+0x3b/0xb0 [ 531.158643][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.165028][T10160] [ 531.165028][T10160] -> #1 (&disk->open_mutex){+.+.}-{3:3}: [ 531.172811][T10160] lock_acquire+0x1db/0x4f0 [ 531.177807][T10160] __mutex_lock_common+0x1da/0x25a0 [ 531.183498][T10160] mutex_lock_nested+0x17/0x20 [ 531.188766][T10160] bd_register_pending_holders+0x33/0x320 [ 531.194977][T10160] device_add_disk+0x5b9/0xd60 [ 531.200233][T10160] loop_add+0x5f2/0x880 [ 531.204878][T10160] blk_request_module+0x181/0x1a0 [ 531.210393][T10160] blkdev_get_no_open+0x39/0x190 [ 531.215822][T10160] blkdev_get_by_dev+0x89/0xa50 [ 531.221163][T10160] blkdev_open+0x138/0x2d0 [ 531.226072][T10160] do_dentry_open+0x807/0xfb0 [ 531.231241][T10160] path_openat+0x2705/0x2f20 [ 531.236321][T10160] do_filp_open+0x21c/0x460 [ 531.241316][T10160] do_sys_openat2+0x13b/0x4f0 [ 531.246482][T10160] __x64_sys_creat+0x11f/0x160 [ 531.251737][T10160] do_syscall_64+0x3b/0xb0 [ 531.256646][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.263032][T10160] [ 531.263032][T10160] -> #0 (major_names_lock){+.+.}-{3:3}: [ 531.270730][T10160] validate_chain+0x1649/0x5930 [ 531.276074][T10160] __lock_acquire+0x1295/0x1ff0 [ 531.281417][T10160] lock_acquire+0x1db/0x4f0 [ 531.286410][T10160] __mutex_lock_common+0x1da/0x25a0 [ 531.292102][T10160] mutex_lock_nested+0x17/0x20 [ 531.297360][T10160] blk_request_module+0x2f/0x1a0 [ 531.302791][T10160] blkdev_get_no_open+0x39/0x190 [ 531.308217][T10160] blkdev_get_by_dev+0x89/0xa50 [ 531.313560][T10160] swsusp_check+0xb1/0x2c0 [ 531.318467][T10160] software_resume+0xc6/0x3c0 [ 531.323635][T10160] resume_store+0xe3/0x130 [ 531.328544][T10160] kernfs_fop_write_iter+0x3a2/0x4f0 [ 531.334319][T10160] vfs_write+0xacd/0xe50 [ 531.339054][T10160] ksys_write+0x1a2/0x2c0 [ 531.343875][T10160] do_syscall_64+0x3b/0xb0 [ 531.348783][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.355169][T10160] [ 531.355169][T10160] other info that might help us debug this: [ 531.355169][T10160] [ 531.365364][T10160] Chain exists of: [ 531.365364][T10160] major_names_lock --> &of->mutex --> system_transition_mutex/1 [ 531.365364][T10160] [ 531.378973][T10160] Possible unsafe locking scenario: [ 531.378973][T10160] [ 531.386396][T10160] CPU0 CPU1 [ 531.391733][T10160] ---- ---- [ 531.397069][T10160] lock(system_transition_mutex/1); [ 531.402327][T10160] lock(&of->mutex); [ 531.408883][T10160] lock(system_transition_mutex/1); [ 531.416660][T10160] lock(major_names_lock); [ 531.421131][T10160] [ 531.421131][T10160] *** DEADLOCK *** [ 531.421131][T10160] [ 531.429242][T10160] 5 locks held by syz.4.1249/10160: [ 531.434407][T10160] #0: ffff88807e565270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 531.443593][T10160] #1: ffff88807e856460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 531.452434][T10160] #2: ffff888065ef5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 531.462137][T10160] #3: ffff888144bfd830 (kn->active#886){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 531.472192][T10160] #4: ffffffff8c7d8708 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3c0 [ 531.482598][T10160] [ 531.482598][T10160] stack backtrace: [ 531.488461][T10160] CPU: 1 PID: 10160 Comm: syz.4.1249 Not tainted 5.15.165-syzkaller #0 [ 531.496676][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 531.506712][T10160] Call Trace: [ 531.509973][T10160] [ 531.512879][T10160] dump_stack_lvl+0x1e3/0x2d0 [ 531.517532][T10160] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 531.523140][T10160] ? print_circular_bug+0x12b/0x1a0 [ 531.528312][T10160] check_noncircular+0x2f8/0x3b0 [ 531.533226][T10160] ? add_chain_block+0x850/0x850 [ 531.538142][T10160] ? lockdep_lock+0x11f/0x2a0 [ 531.542808][T10160] ? _find_first_zero_bit+0xcf/0xf0 [ 531.547991][T10160] validate_chain+0x1649/0x5930 [ 531.552830][T10160] ? lockdep_lock+0x2a0/0x2a0 [ 531.557484][T10160] ? reacquire_held_locks+0x660/0x660 [ 531.562831][T10160] ? validate_chain+0x13bd/0x5930 [ 531.567833][T10160] ? mark_lock+0x98/0x340 [ 531.572139][T10160] __lock_acquire+0x1295/0x1ff0 [ 531.576968][T10160] lock_acquire+0x1db/0x4f0 [ 531.581450][T10160] ? blk_request_module+0x2f/0x1a0 [ 531.586541][T10160] ? read_lock_is_recursive+0x10/0x10 [ 531.591902][T10160] ? __might_sleep+0xc0/0xc0 [ 531.596470][T10160] __mutex_lock_common+0x1da/0x25a0 [ 531.601647][T10160] ? blk_request_module+0x2f/0x1a0 [ 531.606747][T10160] ? read_lock_is_recursive+0x10/0x10 [ 531.612104][T10160] ? ilookup+0x9b/0x210 [ 531.616237][T10160] ? blk_request_module+0x2f/0x1a0 [ 531.621328][T10160] ? __lock_acquire+0x1ff0/0x1ff0 [ 531.626330][T10160] ? mutex_lock_io_nested+0x60/0x60 [ 531.631506][T10160] ? do_raw_spin_unlock+0x137/0x8b0 [ 531.636682][T10160] mutex_lock_nested+0x17/0x20 [ 531.641422][T10160] blk_request_module+0x2f/0x1a0 [ 531.646337][T10160] blkdev_get_no_open+0x39/0x190 [ 531.651246][T10160] blkdev_get_by_dev+0x89/0xa50 [ 531.656067][T10160] ? __pm_pr_dbg+0xc5/0x1b0 [ 531.660544][T10160] ? software_resume+0x7c/0x3c0 [ 531.665370][T10160] ? __pm_pr_dbg+0xc5/0x1b0 [ 531.669844][T10160] ? __pm_pr_dbg+0xbc/0x1b0 [ 531.674322][T10160] swsusp_check+0xb1/0x2c0 [ 531.678718][T10160] ? swap_read_page+0x320/0x320 [ 531.683544][T10160] ? resume_store+0xa1/0x130 [ 531.688113][T10160] software_resume+0xc6/0x3c0 [ 531.692786][T10160] resume_store+0xe3/0x130 [ 531.697175][T10160] ? sysfs_kf_read+0x300/0x300 [ 531.701936][T10160] kernfs_fop_write_iter+0x3a2/0x4f0 [ 531.707198][T10160] vfs_write+0xacd/0xe50 [ 531.711416][T10160] ? file_end_write+0x250/0x250 [ 531.716242][T10160] ? __fget_files+0x413/0x480 [ 531.720894][T10160] ? mutex_lock_nested+0x17/0x20 [ 531.725812][T10160] ? __fdget_pos+0x2cb/0x380 [ 531.730387][T10160] ? ksys_write+0x77/0x2c0 [ 531.734786][T10160] ksys_write+0x1a2/0x2c0 [ 531.739102][T10160] ? print_irqtrace_events+0x210/0x210 [ 531.744555][T10160] ? __ia32_sys_read+0x80/0x80 [ 531.749295][T10160] ? syscall_enter_from_user_mode+0x2e/0x240 [ 531.755250][T10160] ? lockdep_hardirqs_on+0x94/0x130 [ 531.760424][T10160] ? syscall_enter_from_user_mode+0x2e/0x240 [ 531.766379][T10160] do_syscall_64+0x3b/0xb0 [ 531.770769][T10160] ? clear_bhb_loop+0x15/0x70 [ 531.773636][ T6742] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 531.775421][T10160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.789596][T10160] RIP: 0033:0x7f6387529ef9 [ 531.794003][T10160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.813584][T10160] RSP: 002b:00007f63859a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.821980][T10160] RAX: ffffffffffffffda RBX: 00007f63876c5f80 RCX: 00007f6387529ef9 [ 531.829926][T10160] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 000000000000000e [ 531.837873][T10160] RBP: 00007f638759793e R08: 0000000000000000 R09: 0000000000000000 [ 531.845818][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.853763][T10160] R13: 0000000000000000 R14: 00007f63876c5f80 R15: 00007fff2d191e98 [ 531.861715][T10160] [ 531.879504][T10162] binder: BINDER_SET_CONTEXT_MGR already set [ 531.890202][ T6742] Bluetooth: hci0: Injecting HCI hardware error event [ 531.912996][T10162] binder: 10161:10162 ioctl 4018620d 200001c0 returned -16 [ 531.922098][ T3732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.924985][ T3580] Bluetooth: hci0: hardware error 0x00 [ 531.977099][T10160] PM: Image not found (code -22) [ 532.066375][ T3732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.157681][ T3732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.237528][ T3732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.101775][ T3732] device hsr_slave_0 left promiscuous mode [ 533.110875][ T3732] device hsr_slave_1 left promiscuous mode [ 533.120402][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.128864][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.139887][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.147819][ T3732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.158359][ T3732] device bridge_slave_1 left promiscuous mode [ 533.165300][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.173491][ T3732] device bridge_slave_0 left promiscuous mode [ 533.180605][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.205922][ T3732] device veth1_macvtap left promiscuous mode [ 533.211964][ T3732] device veth0_macvtap left promiscuous mode [ 533.218586][ T3732] device veth1_vlan left promiscuous mode [ 533.225506][ T3732] device veth0_vlan left promiscuous mode [ 533.548508][ T3732] team0 (unregistering): Port device team_slave_1 removed [ 533.574141][ T3732] team0 (unregistering): Port device team_slave_0 removed [ 533.660043][ T3732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.701325][ T3732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.955404][ T3732] bond0 (unregistering): Released all slaves