last executing test programs: 4m21.71649273s ago: executing program 0 (id=2444): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setuid(0xee01) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x1, 0x7, 0x1, 0x0, "f7dbc5598cc2099331866bbd1f122d0ecdee8682e9a81511e9bc021f9d7d7666da7de1344f3f86f694168f166d41eebc6f2c1df9678238ab72b3ab0807f9d941"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'rose0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2b, 0x6d, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x1}, {0x4, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/40, 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0) 4m21.445695926s ago: executing program 0 (id=2448): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="93"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) write$char_usb(r5, &(0x7f0000002100)="887b527fabcf7c01079f2194d40f52f050619e8db5a1d1a9dd3a2d00702e9957f77422c22618f06f6d969a2cc8810bb3e9b69f575bb8ab6d8ebbdeee2f7951d58a749c6a96b60110a2a50442f83ccd9f435a167535ff0bb8a59236f9ab77749d0b9fe77229cc48dc0f0b617eba427f4c7eaab55f0816b588905edbc93af02a543fe633a74c8e1597d267667c98f656bd91d448903db5698c22475b7f3e4a0edb3172addb1c1e2f2340b3c30524056d8bcb4d579901ed5755ac9bbbaa55f7e749ab90e875ceabbb7da53540349471f2c31d9176c44c374e79abd976748b043ebc57e954d3efe29349c4e8399759ac5ea14162c9e538f77165ea2b4adb3e2d6f1e8ce256289f55b3db6081bdd85f4a72e34986c35af9c3d9087d2dd59c5252ec369830d96f24a3c37c1e29bf827369e5855bd300ba0061cac0b298eb64ce9cd729ee8ed9a4952ce722c82ecb6a67c6e74596874ab1bc1844b90fcd69148c4539fb9a28152e0d6f443c9cb9a3abd8705569a90ba1f3d3d4350ef1683e25937e43386cf66da52bebbd9d2ee51c1407e59fb0462f21ba35971f539fb25134f5dc05cd07c702084ca322320f38fb8549170ed445c163b9a539843f59089216e8b40e86efc32577cda3955c18e826a70e97aa16943a92f36ad04a6e8ac24ab75976b9c3aaeefad9abc7578f67bd048bea367a29e6b207dbc63371ffb8b6d29ec63e237352c7f4ddac06ebfd930237a0d8d1ffa5c1f39c2f2ca9393dbd38e135e0faf909d2fb7bba01d26f635c0402a546b7f052610e6919e53c4b123e85929874a92ca915c262014598d5c8e686c2199063d6c5bbf31582dd85bbce6a9f7b6f4e8b2570c1e806f581391a4b5831623e23de36895d38b6cbd0df182277caba14d971c84cddcccec80bc344a2a58b9507a79f312def0b4ec95dd7584b580dd34c8d59bb2a25e399b87036a8c2f9a4f44a70c27c49281e3d3707575cc7c54532a6fcbeb51a742c338d85ed15934bbb874d5967018c30a5222e8e832b26baf4b1619839ebe9fcc7e1df8180681dd6f03fe2aeaf344b97f27e378e155479d7c23d43d6f812ab9c938e23faf556b1b27cbcf7a434c9efc0aa61f5ca035b97984fad8d97bf1aab36aa686bdae727de73fd6c75a6d3be179b48bfc7f1504c1a3dd3798eaa8573483cb6e259fb79850ffa781dec45d34b6e0cdfa89af9b6fdbff331620146ff8163a7121bb5d790611c4f2877dbbac16f6ff6844300b95a4197782ecdb4900f15cfba36a7da6f935b374b364c2d7dbef62420de87ce2ad684f63b90f063a47ec820bbc8b0e3f545f9217a24773a13759f51b16f9555d1b5efb88f", 0x3b9) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4m18.335587612s ago: executing program 0 (id=2464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x28000600) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 4m17.685905618s ago: executing program 0 (id=2456): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800012, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca593d94ff0175f5badbe0034e20162", @ANYRESOCT, @ANYRES16, @ANYRES8], 0x1, 0x1d2, &(0x7f0000000580)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa965}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x60040, 0x30, 0x21}, 0x18) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r11, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r13, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) 4m14.268400532s ago: executing program 0 (id=2459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) unshare(0x8000400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c23", 0xa}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000009600)=[{{&(0x7f0000007600)={0xa, 0x4e21, 0xe0b, @loopback, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000007c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}}], 0x1, 0x40000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000004c0)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/142, 0x8e}, {0x0}, {&(0x7f00000007c0)=""/198, 0xc6}], 0x3, &(0x7f00000009c0)=""/226, 0xe2}, 0x40000042) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 4m12.215754002s ago: executing program 0 (id=2466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000c00)='GPL\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x414) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) write$binfmt_misc(r4, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@const={0x0, 0x0, 0x0, 0xa, 0x200}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1, 0x1000}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000004c0)={r5, 0x0, 0x400403, 0x0, 0xa22, 0x0, &(0x7f0000000480)=0x1}) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r8, 0xb) 4m10.578120412s ago: executing program 4 (id=2469): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 4m8.925742612s ago: executing program 4 (id=2473): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 4m8.703487918s ago: executing program 4 (id=2474): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 4m7.000099999s ago: executing program 4 (id=2478): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setuid(0xee01) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x1, 0x7, 0x1, 0x0, "f7dbc5598cc2099331866bbd1f122d0ecdee8682e9a81511e9bc021f9d7d7666da7de1344f3f86f694168f166d41eebc6f2c1df9678238ab72b3ab0807f9d941"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'rose0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2b, 0x6d, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x1}, {0x4, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r3, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/40, 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0) 4m2.660338025s ago: executing program 4 (id=2483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000001bc0)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa4) creat(&(0x7f0000000080)='./cgroup/../file0\x00', 0x11) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x5, 0x5ef, &(0x7f0000000680)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 3m59.532802882s ago: executing program 4 (id=2485): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone3(0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) 3m55.689446566s ago: executing program 32 (id=2466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000c00)='GPL\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x414) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) write$binfmt_misc(r4, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@const={0x0, 0x0, 0x0, 0xa, 0x200}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1, 0x1000}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000004c0)={r5, 0x0, 0x400403, 0x0, 0xa22, 0x0, &(0x7f0000000480)=0x1}) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r8, 0xb) 3m46.187627879s ago: executing program 2 (id=2500): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') epoll_create1(0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @loopback}, 0xa5, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m40.902123568s ago: executing program 33 (id=2485): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d40)={[{@check_relaxed}, {@mode={'mode', 0x3d, 0x5}}, {@map_off}, {@map_acorn}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@hide}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uid}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x2}}]}, 0x0, 0xa21, &(0x7f0000000180)="$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") utime(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone3(0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) 3m40.901692758s ago: executing program 2 (id=2505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) unshare(0x8000400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c23", 0xa}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000009600)=[{{&(0x7f0000007600)={0xa, 0x4e21, 0xe0b, @loopback, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000007c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}}], 0x1, 0x40000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000004c0)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/142, 0x8e}, {0x0}, {&(0x7f00000007c0)=""/198, 0xc6}], 0x3, &(0x7f00000009c0)=""/226, 0xe2}, 0x40000042) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 3m35.307639085s ago: executing program 2 (id=2510): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 3m33.314974944s ago: executing program 2 (id=2512): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) clock_gettime(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESDEC=r6, @ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 3m30.59607373s ago: executing program 2 (id=2514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fcntl$getownex(r4, 0x10, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000340)) r6 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) 3m29.084746607s ago: executing program 2 (id=2517): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 3m11.652842313s ago: executing program 34 (id=2517): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 2m0.223154621s ago: executing program 1 (id=2596): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3a8, 0x1d8, 0xe8, 0xe8, 0x1d8, 0x2c0, 0x1d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6092, 0x9fe0, 0x3}}}, {{@arp={@multicast2, @private=0xa010102, 0xffffff00, 0xff, 0x5, 0x2, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x41, 0x2, 0x1, 0xfff, 0x8, 0xfc01, 'veth1\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 1m59.934865428s ago: executing program 1 (id=2598): r0 = io_uring_setup(0x79bf, &(0x7f0000000180)) fsetxattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x2) 1m59.535761778s ago: executing program 1 (id=2600): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001a00010000000000000000001c"], 0x30}}, 0x0) 1m58.912598863s ago: executing program 1 (id=2604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.769728436s ago: executing program 1 (id=2605): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) personality(0xf) 1m58.518400122s ago: executing program 1 (id=2606): syz_clone3(&(0x7f0000000180)={0x41288080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m41.957368547s ago: executing program 35 (id=2606): syz_clone3(&(0x7f0000000180)={0x41288080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.80005732s ago: executing program 5 (id=3193): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r3, 0x7) listen(r2, 0x7) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x67, 0x0, @empty, @broadcast, {[@end, @timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0xf, [{@rand_addr=0x64010100, 0x2000000}, {@multicast2}, {@private=0xa010101, 0xa}, {@broadcast, 0x9}, {@multicast2}]}]}}}}}}, 0x0) 2.984709205s ago: executing program 5 (id=3208): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@flush}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@rodir}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f00000001c0)=""/201, 0xc9) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000006080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.911204977s ago: executing program 3 (id=3209): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mq_timedreceive(0xffffffffffffffff, 0x0, 0x4000, 0x6a73, &(0x7f0000000600)) 2.682225942s ago: executing program 3 (id=3210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe75", 0x66}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671", 0x55}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f", 0x19}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.426663469s ago: executing program 5 (id=3212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_ente', 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 999999', 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 2.332276301s ago: executing program 3 (id=3213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000c00)='GPL\x00', 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x414) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) write$binfmt_misc(r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@const={0x0, 0x0, 0x0, 0xa, 0x200}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1, 0x1000}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000004c0)={r4, 0x0, 0x400403, 0x0, 0xa22, 0x0, &(0x7f0000000480)=0x1}) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r7, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.118212137s ago: executing program 8 (id=3215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x673d}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.847243814s ago: executing program 5 (id=3216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 1.625115819s ago: executing program 7 (id=3218): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) setresuid(0x0, 0xee00, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 1.491470443s ago: executing program 5 (id=3220): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x6e494, 0x16ac1}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x5}]}}}]}, 0x64}}, 0x200088c2) 1.489931723s ago: executing program 8 (id=3221): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setuid(0xee01) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x1, 0x7, 0x1, 0x0, "f7dbc5598cc2099331866bbd1f122d0ecdee8682e9a81511e9bc021f9d7d7666da7de1344f3f86f694168f166d41eebc6f2c1df9678238ab72b3ab0807f9d941"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'rose0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2b, 0x6d, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x1}, {0x4, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet6(r5, 0x0, 0x4048043) recvmmsg$unix(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/40, 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0) 1.324198507s ago: executing program 7 (id=3223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) unshare(0x8000400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e3", 0x8}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000009600)=[{{&(0x7f0000007600)={0xa, 0x4e21, 0xe0b, @loopback, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000007c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}}], 0x1, 0x40000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000004c0)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/142, 0x8e}, {0x0}, {0x0}], 0x3, &(0x7f00000009c0)=""/226, 0xe2}, 0x40000042) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 1.092642053s ago: executing program 7 (id=3224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.071382053s ago: executing program 6 (id=3225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 1.065236723s ago: executing program 8 (id=3226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x0, 0x0, 0x22, 0x0, "ffa1f819be2d45e250fd26562ce09916a27aed631363a5432fb12e08113effb5bb89cfeafda5f79a8e28471efbdc66c9a6152cedb293e5cbbef69e0b815ed1c8e7fd762d9008b749b97592e880b340e1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e1f, 0x9, @local, 0x1}}, 0x0, 0x0, 0x4d, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0140f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00001000"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x0, 0x0, 0x15, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) 1.033340444s ago: executing program 3 (id=3227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe75", 0x66}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671", 0x55}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f", 0x19}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 950.159636ms ago: executing program 5 (id=3228): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "018000f9ffffffff6792078bb952c4575308000000e7c0ce70a4ac7d", {"a851525b16cc17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 867.753538ms ago: executing program 6 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req={0x8, 0x0, 0x5}}}]}, 0x3c}}, 0x0) 844.069359ms ago: executing program 7 (id=3230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) unshare(0x28000600) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") ioctl$KVM_TDX_INIT_VCPU(0xffffffffffffffff, 0xc008aeba, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)="20b89a1d1846c611ac64297361626c65", 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0x550b, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x20000400) r6 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x3, 0x0, 0x0) unshare(0x28040200) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e24, @remote}}, 0x8, 0xfff, 0x9, 0x7, 0x41, 0x8, 0x6}, 0x9c) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x2, 0x7, 0x4, 0xffffffff, 0x4e38}]}) 790.47333ms ago: executing program 8 (id=3231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0x4}, 0x8) 764.656091ms ago: executing program 3 (id=3232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x80, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x5}}) 763.780921ms ago: executing program 6 (id=3233): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 528.555757ms ago: executing program 6 (id=3234): r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLN~\x96\x1bZ\xfe\nTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x92\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x82\x95\xc9\xf3uw\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec\x00\x00\x00\x00\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q\x92\xb1\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03', 0x42, 0x148, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x3c, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 476.179068ms ago: executing program 8 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) unshare(0x8000400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e3", 0x8}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000009600)=[{{&(0x7f0000007600)={0xa, 0x4e21, 0xe0b, @loopback, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000007c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}}], 0x1, 0x40000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000004c0)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/142, 0x8e}, {0x0}, {0x0}], 0x3, &(0x7f00000009c0)=""/226, 0xe2}, 0x40000042) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 438.322059ms ago: executing program 3 (id=3236): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x37, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0xf, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 409.634519ms ago: executing program 6 (id=3237): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setuid(0xee01) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x1, 0x7, 0x1, 0x0, "f7dbc5598cc2099331866bbd1f122d0ecdee8682e9a81511e9bc021f9d7d7666da7de1344f3f86f694168f166d41eebc6f2c1df9678238ab72b3ab0807f9d941"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'rose0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2b, 0x6d, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x1}, {0x4, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) recvmmsg$unix(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/40, 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0) 368.205331ms ago: executing program 7 (id=3238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b5000280000010000126700000000000000006a500000487bf5f833164d7d3acb1e2b52848847721dc68e029bd096c4029b3436c78f2c64365d564ef5ba5d75d6d30206ef7ffff8d6f733c1bd2399e2bf7e08015353d7cbad8cd88c67f5fbcdaca20e560d15e51f4e3225c21fce1dd4a3765249"], 0x0) 283.245193ms ago: executing program 6 (id=3239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 177.252736ms ago: executing program 8 (id=3240): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 7 (id=3241): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="ff0043ab004a", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x300, 0x0, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}}, {0x14, 0x7d, 0x0, @local}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) kernel console output (not intermixed with test programs): attributes in process `syz.2.2431'. [ 817.265066][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.271738][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.401270][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 820.929036][T13498] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13498] [ 820.945538][T13498] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2446'. [ 820.954708][T13498] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2446'. [ 820.963770][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 827.229715][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 828.154609][T13556] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13556] [ 828.927215][T13554] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2460'. [ 828.937648][T13554] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2460'. [ 828.947567][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 829.103403][T13558] jffs2: notice: (13558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 830.098552][T13572] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13572] [ 830.148621][T13572] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2463'. [ 830.159008][T13572] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2463'. [ 830.169085][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'. [ 832.917565][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2471'. [ 833.674339][T13604] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13604] [ 833.717199][T13604] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2474'. [ 833.729065][T13604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2474'. [ 833.739322][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 834.135065][ T4196] Bluetooth: Wrong link type (-22) [ 834.141031][ T4196] Bluetooth: hci1: link tx timeout [ 834.147847][ T4196] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 840.152596][T13634] lo speed is unknown, defaulting to 1000 [ 840.159269][T13634] lo speed is unknown, defaulting to 1000 [ 840.166937][T13634] lo speed is unknown, defaulting to 1000 [ 840.191194][T13634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 840.227178][T13634] lo speed is unknown, defaulting to 1000 [ 840.236090][T13634] lo speed is unknown, defaulting to 1000 [ 840.245709][T13634] lo speed is unknown, defaulting to 1000 [ 840.253878][T13634] lo speed is unknown, defaulting to 1000 [ 840.261971][T13634] lo speed is unknown, defaulting to 1000 [ 843.174671][T13657] futex_wake_op: syz.1.2489 tries to shift op by 144; fix this program [ 843.278347][T13658] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4201] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13658] [ 843.329727][T13658] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2488'. [ 843.339961][T13658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2488'. [ 843.350087][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 851.950606][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 853.005343][T13682] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 853.887657][T13683] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000008 [ 856.769247][T13687] lo speed is unknown, defaulting to 1000 [ 858.488700][T13714] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 858.580823][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 862.288656][T13687] chnl_net:caif_netlink_parms(): no params data found [ 863.376424][ T7285] Bluetooth: hci5: command 0x041b tx timeout [ 863.823750][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.906614][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.938605][T13687] device bridge_slave_0 entered promiscuous mode [ 864.295637][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.318360][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.330617][T13687] device bridge_slave_1 entered promiscuous mode [ 864.760728][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.877815][T13741] lo speed is unknown, defaulting to 1000 [ 864.893699][T13687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.940819][T13687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.076983][T13687] team0: Port device team_slave_0 added [ 865.140016][T13687] team0: Port device team_slave_1 added [ 865.308426][T13687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.326576][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.434759][T13687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.487888][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.554335][T13687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.562107][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.591394][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 865.651285][T13687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.707431][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.852007][ T144] bond0: (slave netdevsim0): Releasing backup interface [ 865.898326][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.042829][T13741] chnl_net:caif_netlink_parms(): no params data found [ 866.091093][T13687] device hsr_slave_0 entered promiscuous mode [ 866.122377][T13687] device hsr_slave_1 entered promiscuous mode [ 866.142767][T13687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.171675][T13687] Cannot create hsr debugfs directory [ 866.345229][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 868.058616][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 868.368660][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.390748][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.422205][T13741] device bridge_slave_0 entered promiscuous mode [ 868.512741][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.546370][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.602867][T13741] device bridge_slave_1 entered promiscuous mode [ 868.610260][ T7285] Bluetooth: hci0: command 0x041b tx timeout [ 871.164616][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 871.312716][T13772] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13772] [ 871.356544][T13772] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2513'. [ 871.366848][T13772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2513'. [ 871.376973][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 872.154865][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.423665][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.143971][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 874.307920][ T144] tipc: Left network mode [ 874.550726][T13741] team0: Port device team_slave_0 added [ 874.593524][T13687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 878.526221][T13741] team0: Port device team_slave_1 added [ 878.556445][T13687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 879.968493][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.976477][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.054612][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.153385][T13687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 881.080271][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.206625][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.310965][T13842] siw: device registration error -23 [ 881.381997][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.500822][T13687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 881.563335][T13842] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 883.787613][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.794688][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.119931][T13741] device hsr_slave_0 entered promiscuous mode [ 884.163471][T13741] device hsr_slave_1 entered promiscuous mode [ 884.360043][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.384507][T13741] Cannot create hsr debugfs directory [ 890.547929][T13687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.778741][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 890.809705][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 890.987097][T13687] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.289151][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 891.349779][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 891.424883][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.432774][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.517792][T13741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 894.519710][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 894.664248][ T144] device hsr_slave_0 left promiscuous mode [ 894.685740][ T144] device hsr_slave_1 left promiscuous mode [ 894.708469][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.742061][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.784608][ T144] device bridge_slave_1 left promiscuous mode [ 894.791783][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.907872][ T144] device bridge_slave_0 left promiscuous mode [ 894.924949][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.813062][T13909] --map-set only usable from mangle table [ 897.874918][ T4452] Bluetooth: hci1: command 0x041b tx timeout [ 899.515384][ T144] team0 (unregistering): Port device team_slave_1 removed [ 899.626551][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.781599][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.072915][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 900.465287][ T144] bond0 (unregistering): Released all slaves [ 900.715134][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 900.774511][T13741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 900.917340][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 901.135646][T13924] device batadv0 entered promiscuous mode [ 901.142968][T13924] device macsec1 entered promiscuous mode [ 901.329634][T13924] device batadv0 left promiscuous mode [ 901.443984][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.471548][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.531319][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.539228][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.599012][T13741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 901.711085][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.766212][T13741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 901.826756][T13893] lo speed is unknown, defaulting to 1000 [ 901.898502][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.936183][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 901.984659][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.296289][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 902.597314][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.641461][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.657511][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 902.794202][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.848321][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.450364][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.516167][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.643283][T13687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.353666][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.524604][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 904.670981][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 904.684273][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.764283][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.859184][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 904.882011][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.937303][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.945213][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.032559][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 905.075743][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.165020][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.232257][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.240172][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.391530][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.580866][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.819548][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.870510][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.926837][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 906.112791][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 907.834770][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 907.877420][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.944232][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.020223][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.076735][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.137461][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.410035][T13741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.480849][T13741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 908.525523][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 908.560574][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.649252][T13687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.998759][T13893] chnl_net:caif_netlink_parms(): no params data found [ 910.209501][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2542'. [ 913.124831][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.210596][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.297899][T13893] device bridge_slave_0 entered promiscuous mode [ 913.394531][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.467727][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.518827][T13893] device bridge_slave_1 entered promiscuous mode [ 913.780953][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.028390][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.123461][T14007] netlink: 'syz.1.2548': attribute type 2 has an invalid length. [ 916.281448][T13893] team0: Port device team_slave_0 added [ 916.343844][T14014] lo speed is unknown, defaulting to 1000 [ 916.408057][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 916.437498][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 916.449573][T13893] team0: Port device team_slave_1 added [ 916.528261][T14019] overlayfs: failed to clone upperpath [ 916.695287][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 916.923536][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.935408][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.076288][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.116807][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.233583][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.271434][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.390868][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.743105][T13893] device hsr_slave_0 entered promiscuous mode [ 917.814558][T13893] device hsr_slave_1 entered promiscuous mode [ 917.841767][T13893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.878237][T13893] Cannot create hsr debugfs directory [ 918.020003][ T4452] Bluetooth: hci4: command 0x0409 tx timeout [ 918.466094][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 918.487373][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 918.653723][T14014] chnl_net:caif_netlink_parms(): no params data found [ 918.765314][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 918.815635][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 919.310484][T13741] device veth0_vlan entered promiscuous mode [ 919.601742][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 919.611049][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 920.298347][T13741] device veth1_vlan entered promiscuous mode [ 920.351487][T13935] Bluetooth: hci4: command 0x041b tx timeout [ 920.377767][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 920.407696][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 920.465409][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.484981][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.532849][T14014] device bridge_slave_0 entered promiscuous mode [ 920.675338][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.686879][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.757618][T14014] device bridge_slave_1 entered promiscuous mode [ 920.854611][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 921.302126][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 921.947669][T13741] device veth0_macvtap entered promiscuous mode [ 922.035064][T13741] device veth1_macvtap entered promiscuous mode [ 922.502010][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 922.525701][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 922.538802][ T7291] Bluetooth: hci4: command 0x040f tx timeout [ 922.688536][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.725248][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.740629][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.772102][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2553'. [ 922.793189][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.865575][T13741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.935360][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.955707][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 923.109656][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.178338][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.219893][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.264744][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.329423][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.373279][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.407122][T13741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.423071][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.455892][T13893] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 923.537218][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 923.602310][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.737516][T13741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.770830][T13741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.819054][T13741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.871824][T13741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.031538][T14075] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14075] [ 924.054687][T14075] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2557'. [ 924.064773][T14075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2557'. [ 924.075013][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 924.161202][T13893] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 924.207335][T14014] team0: Port device team_slave_0 added [ 924.226041][T13893] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 924.288264][T14014] team0: Port device team_slave_1 added [ 924.424040][T13893] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 924.783735][T14085] Bluetooth: hci4: command 0x0419 tx timeout [ 924.993658][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.015421][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.170939][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.276847][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.324969][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.394259][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.088433][T14014] device hsr_slave_0 entered promiscuous mode [ 928.132870][T14014] device hsr_slave_1 entered promiscuous mode [ 928.195434][T14014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.215401][T14014] Cannot create hsr debugfs directory [ 930.446469][T14100] lo speed is unknown, defaulting to 1000 [ 932.167741][T13893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.176017][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 932.363136][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 932.394928][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 932.483357][T13893] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.586307][T14100] chnl_net:caif_netlink_parms(): no params data found [ 932.926649][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 932.937727][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 932.996425][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.004412][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.029072][T14127] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14127] [ 933.052111][T14127] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2567'. [ 933.062210][T14127] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2567'. [ 933.072222][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 933.091714][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 933.113703][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 933.123954][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.132165][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.142644][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 933.153512][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 933.173228][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 933.195204][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 933.238248][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 933.282318][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 933.294676][T14131] overlayfs: missing 'lowerdir' [ 933.466389][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.614988][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.333629][ T4452] Bluetooth: hci5: command 0x041b tx timeout [ 935.918832][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.947738][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 936.039294][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.104104][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.192571][T13893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 936.208554][T13893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.225706][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 936.239703][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 936.251661][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 936.262640][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 936.275885][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 936.313603][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.359235][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.425579][T14152] Option 'TXƮ' to dns_resolver key: bad/missing value [ 938.344161][T13828] Bluetooth: hci5: command 0x040f tx timeout [ 938.375064][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.407130][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.439204][T14152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2577'. [ 938.473466][T14100] device bridge_slave_0 entered promiscuous mode [ 938.613823][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.732343][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.002283][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.010201][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.069751][T14100] device bridge_slave_1 entered promiscuous mode [ 939.264016][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.288840][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.623500][T14100] team0: Port device team_slave_0 added [ 939.764701][T14100] team0: Port device team_slave_1 added [ 939.937374][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 939.978917][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.134229][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.176315][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.218286][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.366306][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.402714][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.469798][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.590690][T13952] Bluetooth: hci5: command 0x0419 tx timeout [ 940.597231][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.891926][ T144] tipc: Left network mode [ 940.966964][T14100] device hsr_slave_0 entered promiscuous mode [ 941.031380][T14100] device hsr_slave_1 entered promiscuous mode [ 941.051456][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.059938][T14100] Cannot create hsr debugfs directory [ 941.116481][T14014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 941.418922][T14014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 941.525819][T14014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 941.581673][T14014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 941.959122][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.994428][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 942.477595][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 942.514571][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.537835][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 942.569443][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 942.674244][T14100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.819521][T13893] device veth0_vlan entered promiscuous mode [ 942.951605][T13893] device veth1_vlan entered promiscuous mode [ 943.079665][T14100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.382754][T14100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.445392][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 943.468057][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 943.534317][T14100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.617847][T13893] device veth0_macvtap entered promiscuous mode [ 943.628966][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.707977][T13893] device veth1_macvtap entered promiscuous mode [ 943.861979][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.085188][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 944.107170][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 944.166655][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.181961][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.214390][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.269718][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.290067][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.343829][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.410594][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.452007][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.650920][T14014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 944.705906][T14014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.280533][T14223] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14223] [ 947.300005][T14223] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2576'. [ 947.310195][T14223] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2576'. [ 947.320179][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 947.762317][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 947.787219][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 947.856830][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 947.913410][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 947.923706][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.931595][T13801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.941278][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 947.964869][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 947.985397][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.993261][T13801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.345893][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.357436][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.368879][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.380203][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.391138][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.413840][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.438945][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.452053][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.464585][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.474597][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.702175][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.714852][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.726825][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.748411][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.776897][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.812378][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.852081][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.886316][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.923534][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.978934][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.024007][T13893] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.056720][T13893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.090417][T13893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.122411][T13893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.481753][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 949.508062][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 949.769201][ T9658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.821585][ T9658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.246483][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 950.354296][T14100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 950.377422][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.391082][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.905230][T14100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 950.919119][T14100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 950.948243][T14100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 950.956155][T13821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.964861][T13821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.360813][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.498956][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.678306][T14100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.723511][T14100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.128522][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.279811][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 952.306905][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.336566][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.382796][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.415623][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.423578][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.470590][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.515276][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.539096][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.546946][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.595998][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.611267][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.850883][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.886606][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.899146][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.930498][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.994994][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.040629][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.071177][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 953.108499][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 953.142094][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.167944][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.242641][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 953.297429][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.321586][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 953.462180][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.492621][ T144] device hsr_slave_0 left promiscuous mode [ 953.537509][ T144] device hsr_slave_1 left promiscuous mode [ 953.557789][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.582474][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.612476][ T144] device bridge_slave_1 left promiscuous mode [ 953.619582][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.679960][ T144] device bridge_slave_0 left promiscuous mode [ 953.719159][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.807674][ T144] device hsr_slave_0 left promiscuous mode [ 953.843288][ T144] device hsr_slave_1 left promiscuous mode [ 953.862328][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.892796][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.916016][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.929092][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.944826][ T144] device bridge_slave_1 left promiscuous mode [ 953.952813][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.966233][ T144] device bridge_slave_0 left promiscuous mode [ 953.973907][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.038541][ T144] device veth1_macvtap left promiscuous mode [ 954.046600][ T144] device veth0_macvtap left promiscuous mode [ 954.053464][ T144] device veth1_vlan left promiscuous mode [ 954.879668][ T144] team0 (unregistering): Port device team_slave_1 removed [ 954.921497][ T144] team0 (unregistering): Port device team_slave_0 removed [ 954.954921][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.996762][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.267273][ T144] bond0 (unregistering): Released all slaves [ 955.383689][ T144] team0 (unregistering): Port device bond1 removed [ 955.396189][ T144] bond1 (unregistering): Released all slaves [ 955.424167][ T144] team0 (unregistering): Port device vxlan0 removed [ 956.041366][ T144] team0 (unregistering): Port device team_slave_1 removed [ 956.120990][ T144] team0 (unregistering): Port device team_slave_0 removed [ 956.154807][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.192733][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.420453][ T144] team0 (unregistering): Port device bridge0 removed [ 956.455958][ T144] bond0 (unregistering): Released all slaves [ 956.785849][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 956.986973][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.046784][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 957.089782][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.383177][T13953] Bluetooth: hci0: command 0x0409 tx timeout [ 958.923458][T14014] device veth0_vlan entered promiscuous mode [ 959.075558][T14014] device veth1_vlan entered promiscuous mode [ 961.059003][T13952] Bluetooth: hci0: command 0x041b tx timeout [ 961.105810][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.144835][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.189165][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 961.280748][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.325719][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 961.381469][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.442311][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.671404][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 961.708478][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.790772][T14014] device veth0_macvtap entered promiscuous mode [ 961.859986][T14014] device veth1_macvtap entered promiscuous mode [ 961.975769][ T26] audit: type=1326 audit(1788945140.167:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.3.2597" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02086cd159 code=0x7ffc0000 [ 962.137396][T14271] chnl_net:caif_netlink_parms(): no params data found [ 962.227166][ T26] audit: type=1326 audit(1788945140.379:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.3.2597" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02086cd159 code=0x7ffc0000 [ 962.286974][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 962.304376][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 962.347811][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.443278][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.475803][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.508938][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.540833][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.573643][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.623049][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.717546][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 962.813436][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 962.854356][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.867131][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.879561][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.893448][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.904923][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.917382][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.933443][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.139424][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 963.181156][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 963.279352][T13953] Bluetooth: hci0: command 0x040f tx timeout [ 963.313129][T14014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.342951][T14014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.386638][T14014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.418745][T14014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.489591][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.505719][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.518720][T14271] device bridge_slave_0 entered promiscuous mode [ 963.612823][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.635591][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.695438][T14271] device bridge_slave_1 entered promiscuous mode [ 963.863423][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.894745][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.951136][T14364] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14364] [ 963.976061][T14364] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2607'. [ 963.986870][T14364] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2607'. [ 963.996943][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 964.180844][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.256701][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 964.288952][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.341404][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.374969][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.425419][T14100] device veth0_vlan entered promiscuous mode [ 964.455189][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.619763][T14100] device veth1_vlan entered promiscuous mode [ 964.825284][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 964.861719][T14271] team0: Port device team_slave_0 added [ 964.898229][T13821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.950751][T13821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.013691][T14271] team0: Port device team_slave_1 added [ 965.135934][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 965.210607][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.239919][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.298481][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.392726][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.398691][ T9658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.409777][ T9658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.419863][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.450148][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.523528][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 965.533443][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 965.673431][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 965.708736][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 965.769642][T14271] device hsr_slave_0 entered promiscuous mode [ 965.814994][T14271] device hsr_slave_1 entered promiscuous mode [ 965.846388][T14271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.854815][T14271] Cannot create hsr debugfs directory [ 965.971006][T14100] device veth0_macvtap entered promiscuous mode [ 966.034261][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 966.095273][T14100] device veth1_macvtap entered promiscuous mode [ 966.329199][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.453113][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.507277][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.599398][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.659031][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.714856][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.767026][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.829346][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.905206][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.973642][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 967.012041][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 967.110382][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.166101][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.244367][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.340299][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.396094][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.482702][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.547741][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.623658][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.732796][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.800589][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 967.842285][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 967.989852][T14100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.046750][T14100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.056267][T14100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.154781][T14100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.490818][T14410] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14410] [ 968.515747][T14410] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2615'. [ 968.526041][T14410] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2615'. [ 968.536378][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 968.733205][T14271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.015999][T14271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.333750][ T9658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.433077][ T9658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.742654][T14271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.791731][T14418] loop5: detected capacity change from 0 to 8 [ 969.918619][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 969.921225][T14418] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 970.049646][T13805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.073223][T14418] unable to read xattr id index table [ 970.093995][T13805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.178986][T14271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.376804][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 971.497526][T14271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 972.062872][T14271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 972.192823][T14271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.274083][T14271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 973.597944][T14434] netlink: 'syz.6.2503': attribute type 10 has an invalid length. [ 973.658670][T14435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2503'. [ 973.794051][T14448] loop5: detected capacity change from 0 to 128 [ 974.090808][T14448] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14014] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14448] [ 974.206975][T10254] Bluetooth: Wrong link type (-22) [ 974.225043][T14448] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2624'. [ 974.236482][T14448] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2624'. [ 974.246600][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2624'. [ 976.773829][T14434] team0 (unregistering): Port device team_slave_0 removed [ 976.919725][T14434] team0 (unregistering): Port device team_slave_1 removed [ 977.652348][T14474] loop6: detected capacity change from 0 to 128 [ 977.838337][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.845907][T14469] loop5: detected capacity change from 0 to 2048 [ 977.939844][T14474] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 977.956134][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 977.991580][T14469] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 978.044491][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 978.123582][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.226051][T14469] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: none. [ 978.281980][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 978.357553][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.369210][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.377229][T13805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.388629][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 978.425703][ T26] audit: type=1800 audit(1788945155.290:34): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2631" name="file2" dev="loop6" ino=95 res=0 errno=0 [ 978.852450][T14478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 979.213127][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.250450][T14478] EXT4-fs (loop5): Remounting filesystem read-only [ 979.341116][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.586312][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.594234][ T9636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.842755][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 981.386985][T14506] netlink: 'syz.5.2639': attribute type 5 has an invalid length. [ 982.287158][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 982.360077][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 982.569434][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.614047][ T26] audit: type=1326 audit(1788945159.220:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14515 comm="syz.6.2636" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1b87f3159 code=0x0 [ 982.712066][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 982.836003][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.876737][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.974341][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 983.111879][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 983.196788][T14271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.297582][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 983.363716][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 983.375283][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.606534][ T4452] Bluetooth: hci1: command 0x0409 tx timeout [ 984.876972][T14511] chnl_net:caif_netlink_parms(): no params data found [ 985.348462][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 985.376727][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 985.471664][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.740897][ T26] audit: type=1326 audit(1788945162.090:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.5.2653" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41f7454159 code=0x0 [ 986.071987][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.173601][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.312959][T14511] device bridge_slave_0 entered promiscuous mode [ 986.458844][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.543060][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.641645][T14511] device bridge_slave_1 entered promiscuous mode [ 986.860734][ T4454] Bluetooth: hci1: command 0x041b tx timeout [ 987.160863][T14511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.272764][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 987.561172][T14511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.706683][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.732216][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.879916][ T21] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 987.925164][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 987.969725][ T21] usb 7-1: SerialNumber: syz [ 987.995187][T14511] team0: Port device team_slave_0 added [ 988.158772][T14511] team0: Port device team_slave_1 added [ 988.418454][ T21] usb 7-1: 0:2 : does not exist [ 988.488103][T14511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.496725][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.655374][T14511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.669249][ T21] usb 7-1: USB disconnect, device number 2 [ 988.734738][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.761100][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.835075][T14511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.842845][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.944921][T14511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.116841][ T4452] Bluetooth: hci1: command 0x040f tx timeout [ 989.146776][T14349] udevd[14349]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.180228][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.189501][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.525860][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.539389][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.594716][T14271] device veth0_vlan entered promiscuous mode [ 989.725767][T14271] device veth1_vlan entered promiscuous mode [ 990.026115][T14511] device hsr_slave_0 entered promiscuous mode [ 990.070784][T14511] device hsr_slave_1 entered promiscuous mode [ 990.103671][T14511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.159927][T14511] Cannot create hsr debugfs directory [ 990.194307][T14617] loop5: detected capacity change from 0 to 64 [ 990.220618][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 990.275168][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.300208][T14621] ipt_REJECT: TCP_RESET invalid for non-tcp [ 990.368933][T14271] device veth0_macvtap entered promiscuous mode [ 990.574227][T14271] device veth1_macvtap entered promiscuous mode [ 990.808527][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.845916][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 990.907758][ T144] tipc: Disabling bearer [ 990.920935][ T144] tipc: Left network mode [ 991.039232][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.077479][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.125030][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.184765][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.239095][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.304094][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.336627][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.369587][ T4454] Bluetooth: hci1: command 0x0419 tx timeout [ 991.372918][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.389855][T14631] loop6: detected capacity change from 0 to 256 [ 991.398092][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.429101][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.471260][T14271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.548037][T14631] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 991.549251][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 991.642725][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 991.680336][T14631] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 991.702248][T14631] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 991.742511][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.802742][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.883618][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.965117][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.005429][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.046482][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.079898][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.116447][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.152134][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.184566][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.243554][T14271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.313280][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 993.366692][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.525086][T14271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.575719][T14271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.645120][T14271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.667427][T14271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.933256][ T4596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.953891][ T4596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.089591][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 995.193048][T14511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 995.256004][T14511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 995.264389][ T9658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.296000][ T9658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.338548][T14511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 995.619390][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 995.653267][T14511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 996.870586][T14686] net_ratelimit: 68 callbacks suppressed [ 996.870772][T14686] IPVS: rr: FWM 3 0x00000003 - no destination available [ 997.899763][T14511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.988690][T14696] loop7: detected capacity change from 0 to 256 [ 998.019054][T14693] debugfs: Directory '1^!l1*$pOcɔGt:u^' with parent 'ieee80211' already present! [ 998.635187][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.708417][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.833848][T14511] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.963487][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.993070][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2693'. [ 998.995153][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.294191][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.302164][T13805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.335277][T14710] loop5: detected capacity change from 0 to 256 [ 999.958880][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.022442][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.131586][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.191669][T14719] loop6: detected capacity change from 0 to 256 [ 1000.215035][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.222887][T13805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.378256][T14719] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1000.647817][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.687807][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.778158][T14723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2698'. [ 1000.842359][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.954126][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.032645][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.071710][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1001.243643][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1001.296097][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1001.363602][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1001.472102][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1001.516452][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1001.537484][T14735] loop6: detected capacity change from 0 to 512 [ 1001.603465][T14511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.333217][T14735] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1002.512025][T14735] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.069312][T14751] loop7: detected capacity change from 0 to 1024 [ 1003.287268][T14751] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 1003.387140][T14751] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz.7.2705: directory missing '.' [ 1003.937357][T14762] loop6: detected capacity change from 0 to 4096 [ 1004.125360][T14762] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1004.222954][T14762] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1004.439668][T14762] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1004.551643][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.581377][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1004.612870][T14762] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1004.772533][T14511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.786505][T14762] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1004.876636][T14794] loop5: detected capacity change from 0 to 128 [ 1004.906784][T14762] ntfs: volume version 3.1. [ 1004.972775][T14762] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1005.025508][T14794] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1005.110029][T14762] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1005.148838][T14797] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2717'. [ 1005.494652][ T26] audit: type=1800 audit(1788945180.138:37): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2715" name="file2" dev="loop5" ino=95 res=0 errno=0 [ 1005.635009][ T144] device hsr_slave_0 left promiscuous mode [ 1005.699427][T14762] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1005.713178][ T144] device hsr_slave_1 left promiscuous mode [ 1005.740094][T14762] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1006.761343][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.818054][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.960714][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.008408][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.439593][ T144] device bridge_slave_1 left promiscuous mode [ 1007.451665][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.595185][T14817] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1008.019038][ T144] device bridge_slave_0 left promiscuous mode [ 1008.049042][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.135032][ T144] device hsr_slave_0 left promiscuous mode [ 1008.195579][ T144] device hsr_slave_1 left promiscuous mode [ 1008.278405][ T144] device hsr_slave_0 left promiscuous mode [ 1008.299852][ T144] device hsr_slave_1 left promiscuous mode [ 1008.319771][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.328175][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.427102][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.438673][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.472812][ T144] device bridge_slave_1 left promiscuous mode [ 1008.502565][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.635220][ T144] device bridge_slave_0 left promiscuous mode [ 1008.642633][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.748287][T14823] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.2725'. [ 1008.834298][ T144] device veth1_macvtap left promiscuous mode [ 1008.880446][ T144] device veth0_macvtap left promiscuous mode [ 1008.905020][ T144] device veth1_vlan left promiscuous mode [ 1008.937466][ T144] device veth0_vlan left promiscuous mode [ 1008.958257][ T144] device veth1_macvtap left promiscuous mode [ 1008.981610][ T144] device veth0_macvtap left promiscuous mode [ 1009.002898][ T144] device veth1_vlan left promiscuous mode [ 1009.009603][ T144] device veth0_vlan left promiscuous mode [ 1010.027236][T14835] loop7: detected capacity change from 0 to 128 [ 1010.101244][T14835] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1010.220961][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1010.221068][ T26] audit: type=1800 audit(1788945184.687:38): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2730" name="file2" dev="loop7" ino=95 res=0 errno=0 [ 1011.922876][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1012.018792][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1012.120332][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.284699][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.347673][T14841] kernel read not supported for file / 7âW)s!QfsrX%)rO2:"T+͟v|ղDvc֠6xc: (pid: 14841 comm: syz.7.2732) [ 1013.373233][ T26] audit: type=1800 audit(1788945187.603:39): pid=14841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2732" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=63961 res=0 errno=0 [ 1013.750157][ T144] bond0 (unregistering): Released all slaves [ 1014.106183][ T144] bond0 (unregistering): Released all slaves [ 1014.272348][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1014.292769][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1014.311848][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.338061][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.454764][ T144] bond0 (unregistering): Released all slaves [ 1014.886455][T14859] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2739'. [ 1015.258185][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1015.297330][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1015.352528][T14511] device veth0_vlan entered promiscuous mode [ 1015.376520][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1015.412501][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1015.490457][T14511] device veth1_vlan entered promiscuous mode [ 1015.522202][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1015.547126][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1015.568848][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1015.633955][T13805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1015.693379][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.710152][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.742997][T14511] device veth0_macvtap entered promiscuous mode [ 1015.764103][T14511] device veth1_macvtap entered promiscuous mode [ 1015.872806][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.917957][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.955419][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.997015][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.040847][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.095189][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.136296][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.198270][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.242634][T14511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.305793][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1016.350844][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1016.383106][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1016.399420][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1016.458875][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.480441][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.490417][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.545068][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.565094][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.575720][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.629220][T14511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.643356][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.682555][T14511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.708093][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.759701][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1016.863615][T14511] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.925982][T14887] loop6: detected capacity change from 0 to 8 [ 1016.930200][T14511] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.949431][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1016.955793][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1016.964918][T14511] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.973706][T14511] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.095201][T14887] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1017.141249][T14887] SQUASHFS error: Failed to read block 0x9b: -5 [ 1017.147661][T14887] SQUASHFS error: Unable to read metadata cache entry [99] [ 1017.186298][ T9658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.205403][ T9658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.206322][T14887] SQUASHFS error: Unable to read inode 0x127 [ 1017.341314][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1017.370125][ T9658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.420156][ T9658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.488230][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1017.621058][T14894] loop7: detected capacity change from 0 to 256 [ 1017.932439][T14085] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1018.275209][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2755'. [ 1018.285442][T13879] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1018.613010][T14085] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1018.640560][T14085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.675791][T14085] usb 7-1: Product: syz [ 1018.680013][T14085] usb 7-1: Manufacturer: syz [ 1018.700858][T14085] usb 7-1: SerialNumber: syz [ 1018.748719][T14085] usb 7-1: config 0 descriptor?? [ 1018.791324][T13879] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1018.853834][T13879] usb 9-1: not running at top speed; connect to a high speed hub [ 1018.981249][T13879] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1019.015078][T13879] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1019.070159][T13879] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1019.077646][T14085] peak_usb 7-1:0.0: PEAK-System PCAN-USB FD v23 fw v38.6.0 (1 channels) [ 1019.308913][T14085] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1019.317495][T13879] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1019.350241][T14085] peak_usb 7-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1019.364654][T13879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.390267][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2760'. [ 1019.411389][T13879] usb 9-1: Product: syz [ 1019.420328][T13879] usb 9-1: Manufacturer: syz [ 1019.439844][T13879] usb 9-1: SerialNumber: syz [ 1019.504295][T14905] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1019.529185][T14905] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1019.634958][T14085] peak_usb: probe of 7-1:0.0 failed with error -71 [ 1019.689087][T14085] usb 7-1: USB disconnect, device number 3 [ 1020.065763][T13879] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1020.128997][T14953] loop7: detected capacity change from 0 to 512 [ 1020.279293][T13879] usb 9-1: USB disconnect, device number 2 [ 1020.308791][T13879] usblp0: removed [ 1020.415423][T14953] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2761: inode #11: comm syz.7.2765: corrupted xattr block 95 [ 1020.544882][T14953] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1020.669027][T14953] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2765: bg 0: block 7: invalid block bitmap [ 1021.509201][T14953] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1021.573699][T14953] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2928: inode #11: comm syz.7.2765: corrupted xattr block 95 [ 1021.676354][T14953] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 1021.747597][T14953] EXT4-fs (loop7): 1 orphan inode deleted [ 1021.834010][T14953] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,dax=inode,,errors=continue. Quota mode: none. [ 1022.505763][T14998] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1022.559636][T15000] loop8: detected capacity change from 0 to 256 [ 1022.678227][T15000] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1022.759964][T15000] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1022.809624][T13953] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1022.841460][T15000] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1023.069685][T13953] usb 7-1: Using ep0 maxpacket: 32 [ 1023.222966][T13953] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1023.275707][T13953] usb 7-1: config 0 has no interface number 0 [ 1023.449752][T13953] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1023.502116][T13953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.560670][T13953] usb 7-1: Product: syz [ 1023.565537][T13953] usb 7-1: Manufacturer: syz [ 1023.617245][T13953] usb 7-1: SerialNumber: syz [ 1023.651795][T13953] usb 7-1: config 0 descriptor?? [ 1023.727195][T13953] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1023.886196][T15036] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1023.992560][T13953] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1024.109015][T13953] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1024.173541][T15044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2794'. [ 1024.561180][T13879] usb 7-1: USB disconnect, device number 4 [ 1024.577767][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1024.595783][T13879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1024.734208][T13879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1024.846117][T13879] quatech2 7-1:0.51: device disconnected [ 1024.996050][T14850] Set syz0 is full, maxelem 65536 reached [ 1025.258943][T14085] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1025.293992][T15074] netlink: 'syz.6.2805': attribute type 3 has an invalid length. [ 1025.335273][T15074] netlink: 'syz.6.2805': attribute type 304 has an invalid length. [ 1025.692403][T14085] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.735540][T14085] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.775953][T14085] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1025.829697][T14085] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.912169][T14085] usb 8-1: config 0 descriptor?? [ 1026.601163][T15111] [U]  [ 1026.605279][ T4274] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1026.700482][T14085] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 1026.717550][ T144] tipc: Disabling bearer [ 1026.724794][ T144] tipc: Left network mode [ 1026.745024][T14085] usb 8-1: USB disconnect, device number 2 [ 1027.058120][ T4274] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1027.094575][ T4274] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 1027.133771][ T4274] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.170804][ T4274] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1027.196609][ T4274] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1027.232496][ T4274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.289633][ T4274] usb 7-1: config 0 descriptor?? [ 1027.318307][T15107] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1027.592196][T15141] loop7: detected capacity change from 0 to 128 [ 1027.851010][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1027.858474][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1027.916317][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1027.945864][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1027.975390][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1028.004411][ T4274] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 1028.037088][ T4274] pantherlord 0003:0810:0001.0002: unbalanced collection at end of report description [ 1028.093902][ T4274] pantherlord 0003:0810:0001.0002: parse failed [ 1028.124571][ T4274] pantherlord: probe of 0003:0810:0001.0002 failed with error -22 [ 1028.208814][ T4274] usb 7-1: USB disconnect, device number 5 [ 1028.520853][T13935] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1028.802685][T13935] usb 9-1: Using ep0 maxpacket: 16 [ 1028.825016][T15165] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14271] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15165] [ 1028.976282][T13935] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.009794][T13935] usb 9-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 1029.082678][T13935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.118667][T13935] usb 9-1: config 0 descriptor?? [ 1029.169180][ T144] device hsr_slave_0 left promiscuous mode [ 1029.372046][ T144] device hsr_slave_1 left promiscuous mode [ 1029.606592][T15185] loop6: detected capacity change from 0 to 256 [ 1029.661263][T15185] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1029.906194][T13935] wacom 0003:056A:032F.0003: unknown main item tag 0x7 [ 1029.927933][T13935] wacom 0003:056A:032F.0003: unknown main item tag 0x0 [ 1029.956953][T13935] wacom 0003:056A:032F.0003: unknown main item tag 0x1 [ 1029.979872][T13935] wacom 0003:056A:032F.0003: unknown main item tag 0xd [ 1030.107746][T13935] wacom 0003:056A:032F.0003: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.8-1/input0 [ 1030.174002][T13935] usb 9-1: USB disconnect, device number 3 [ 1030.767249][T15194] fido_id[15194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1030.991925][ T4454] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1031.209416][ T144] bond0 (unregistering): Released all slaves [ 1031.262830][ T4454] usb 6-1: Using ep0 maxpacket: 8 [ 1031.436340][ T4454] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1031.547671][ T4454] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1031.840667][ T4454] usb 6-1: string descriptor 0 read error: -22 [ 1031.847431][ T4454] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1031.890767][ T4454] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1031.948593][ T4454] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1031.985032][ T4454] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1032.057725][T15243] loop7: detected capacity change from 0 to 16 [ 1032.068889][ T4454] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1032.088266][T15243] erofs: (device loop7): mounted with root inode @ nid 36. [ 1032.095997][ T4454] usb 6-1: media controller created [ 1032.195433][T15207] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 1032.802600][ T4454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.932274][ T4454] zl10353_read_register: readreg error (reg=127, ret==0) [ 1033.062371][ T4454] usb 6-1: USB disconnect, device number 2 [ 1033.193254][T15261] loop7: detected capacity change from 0 to 128 [ 1033.277094][T15264] tipc: Started in network mode [ 1033.282682][T15264] tipc: Node identity ac1414aa, cluster identity 4711 [ 1033.290525][T15264] tipc: New replicast peer: 172.20.20.187 [ 1033.297035][T15264] tipc: Enabled bearer , priority 10 [ 1033.789650][T15284] loop6: detected capacity change from 0 to 512 [ 1033.841138][T15284] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1033.973849][T15284] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #17: comm syz.6.2864: corrupted in-inode xattr [ 1034.033549][T15284] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.2864: couldn't read orphan inode 17 (err -117) [ 1034.072688][T15284] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,noblock_validity,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 1034.136325][T15295] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1034.168744][ T26] audit: type=1800 audit(1788945206.795:40): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2864" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1034.169798][T15284] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1034.349785][T15284] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2864: invalid indirect mapped block 32768 (level 2) [ 1034.476319][T15255] loop5: detected capacity change from 0 to 32768 [ 1034.488689][T15303] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14271] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15303] [ 1034.516553][ T4234] tipc: Node number set to 2886997162 [ 1034.580299][T15306] vcan0: MTU too low for tipc bearer [ 1034.585671][T15306] tipc: Enabling of bearer rejected, failed to enable media [ 1034.689100][T10254] Bluetooth: Wrong link type (-22) [ 1034.731918][T15303] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2855'. [ 1034.797092][T15303] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2855'. [ 1034.816807][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2855'. [ 1034.856970][T15312] loop6: detected capacity change from 0 to 128 [ 1034.983772][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1036.546143][T15329] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14100] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15329] [ 1036.728309][T15307] loop8: detected capacity change from 0 to 32768 [ 1036.884471][T15307] JBD2: Ignoring recovery information on journal [ 1037.022805][T15307] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1037.071599][ T26] audit: type=1800 audit(1788945209.461:41): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2869" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 1037.291675][T14511] ocfs2: Unmounting device (7,8) on (node local) [ 1039.183878][T15370] loop5: detected capacity change from 0 to 256 [ 1039.316475][T15370] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1040.694513][T15402] loop6: detected capacity change from 0 to 128 [ 1040.972986][T15421] loop7: detected capacity change from 0 to 256 [ 1040.996064][T15419] tipc: Enabling of bearer rejected, failed to enable media [ 1041.169066][T15421] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1041.214093][T15429] device bridge0 entered promiscuous mode [ 1041.390149][T15429] team0: Port device bridge0 added [ 1042.514537][T15459] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14100] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15459] [ 1042.669785][T15462] loop8: detected capacity change from 0 to 2048 [ 1042.767265][T15462] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1042.838945][T15473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1042.852691][T14349] udevd[14349]: incorrect nilfs2 checksum on /dev/loop8 [ 1042.921413][T15477] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1044.504226][T15510] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15510] [ 1045.142976][T15527] loop7: detected capacity change from 0 to 1024 [ 1045.335581][T15527] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1045.376385][T15527] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.529296][T15527] EXT4-fs warning (device loop7): ext4_empty_dir:3156: inode #12: comm syz.7.2935: directory missing '..' [ 1046.381616][T13828] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1046.820321][T15569] loop5: detected capacity change from 0 to 1024 [ 1046.988613][T13828] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1046.997777][T13828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.039387][T13828] usb 7-1: Product: syz [ 1047.046532][T13805] hfsplus: bad catalog file entry [ 1047.064290][T13828] usb 7-1: Manufacturer: syz [ 1047.079699][T13828] usb 7-1: SerialNumber: syz [ 1047.566450][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1047.584575][T15594] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1047.848691][T13953] usb 7-1: USB disconnect, device number 6 [ 1047.849421][T15607] loop7: detected capacity change from 0 to 64 [ 1047.932535][T15607] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1047.956014][T15607] hfs: filesystem is marked locked, mounting read-only. [ 1047.968130][T15587] loop8: detected capacity change from 0 to 32768 [ 1047.974813][T15607] hfs: inconsistency in B*Tree (3,2,0,3,0) [ 1047.997101][T15607] hfs: get root inode failed [ 1048.661777][T15616] device ipvlan2 entered promiscuous mode [ 1048.929943][T15587] ERROR: (device loop8): diWrite: ixpxd invalid [ 1048.929943][T15587] [ 1049.028900][T15587] ERROR: (device loop8): remounting filesystem as read-only [ 1049.049244][T15587] ERROR: (device loop8): txCommit: [ 1049.049244][T15587] [ 1049.513608][T13828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1049.860446][T13828] usb 6-1: Using ep0 maxpacket: 16 [ 1050.015951][T13828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.095837][T13828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.348161][T13828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.390595][T13828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.445375][T13828] usb 6-1: Product: syz [ 1050.450024][T13828] usb 6-1: Manufacturer: syz [ 1050.694746][T13828] usb 6-1: SerialNumber: syz [ 1051.653076][ T4454] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1051.703535][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 1051.800538][T13828] usb 6-1: 0:2 : does not exist [ 1051.876257][T13828] usb 6-1: USB disconnect, device number 3 [ 1052.061077][ T4454] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1052.080785][ T4454] usb 9-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 1052.114262][ T4454] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 1052.130790][T14349] udevd[14349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.136238][ T4454] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1052.201100][ T4454] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1052.210206][ T4454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.299902][ T4454] usbtmc 9-1:16.0: bulk endpoints not found [ 1052.377485][T15696] device bridge1 entered promiscuous mode [ 1052.413321][T15696] team0: Port device bridge1 added [ 1052.504538][T13828] Bluetooth: hci4: command 0x0406 tx timeout [ 1052.602883][ T4454] usb 9-1: USB disconnect, device number 4 [ 1053.241644][T14085] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1053.610215][T15715] loop5: detected capacity change from 0 to 40427 [ 1053.663757][T15715] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1053.686037][T14085] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1053.708865][T15715] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1053.724157][T14085] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.751454][T15715] F2FS-fs (loop5): invalid crc value [ 1053.781022][T14085] usb 8-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 1053.812026][T15715] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1053.834627][T14085] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.885799][T14085] usb 8-1: config 0 descriptor?? [ 1054.009264][T15715] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1054.035469][T15715] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1054.397024][T14014] handle_bad_sector: 2 callbacks suppressed [ 1054.397053][T14014] attempt to access beyond end of device [ 1054.397053][T14014] loop5: rw=2049, want=45104, limit=40427 [ 1054.439656][T14085] input: HID 044f:b300 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:044F:B300.0004/input/input10 [ 1054.549841][T14085] thrustmaster 0003:044F:B300.0004: input,hidraw0: USB HID v0.04 Joystick [HID 044f:b300] on usb-dummy_hcd.7-1/input0 [ 1054.585498][T14085] thrustmaster 0003:044F:B300.0004: can't find FF field in output reports [ 1054.704766][T14085] usb 8-1: USB disconnect, device number 3 [ 1054.877260][T15771] fido_id[15771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1055.150107][T15777] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15777] [ 1055.704474][T14085] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1056.058594][ T4454] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1056.149388][T14085] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.171034][T14085] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 1056.203076][T14085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.370553][T15795] loop7: detected capacity change from 0 to 32768 [ 1056.412131][T15664] Set syz0 is full, maxelem 65536 reached [ 1056.475566][ T4454] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.494069][T14085] dvb_ttusb_budget: ttusb_init_controller: error [ 1056.507798][ T4454] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.520333][T14085] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1056.564757][ T4454] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1056.570794][T15795] JBD2: Ignoring recovery information on journal [ 1056.590779][ T4454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.620238][ T4454] usb 9-1: config 0 descriptor?? [ 1056.754996][T14085] DVB: Unable to find symbol stv0299_attach() [ 1056.814274][T15795] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1056.827384][T15823] device ipvlan2 entered promiscuous mode [ 1056.870288][T14085] DVB: Unable to find symbol tda8083_attach() [ 1056.872944][T15823] bridge0: port 3(ipvlan2) entered blocking state [ 1056.879243][T14085] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1056.897047][T15823] bridge0: port 3(ipvlan2) entered disabled state [ 1056.940413][T14085] usb 6-1: USB disconnect, device number 4 [ 1057.044788][ T26] audit: type=1800 audit(2000000008.221:42): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3008" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 1057.119603][T14271] ocfs2: Unmounting device (7,7) on (node local) [ 1057.188306][ T4454] input: HID 1b1c:1b02 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:1B1C:1B02.0005/input/input11 [ 1057.310910][ T4454] corsair 0003:1B1C:1B02.0005: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 1057.390205][T15835] loop6: detected capacity change from 0 to 4096 [ 1057.427008][ T4454] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 1057.474128][ T4454] usb 9-1: USB disconnect, device number 5 [ 1057.642556][T15856] UBIFS error (pid: 15856): cannot open "ubi0:testvol", error -19 [ 1057.755942][T15849] fido_id[15849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1057.857800][T14100] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 1057.881153][T14100] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1058.063827][T15876] loop8: detected capacity change from 0 to 1024 [ 1058.215394][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1059.042861][T15916] loop6: detected capacity change from 0 to 512 [ 1059.219920][T15916] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 1059.242719][T15922] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14271] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[15922] [ 1059.288610][T15916] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1059.472469][T15916] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.3037: bad orphan inode 131083 [ 1059.483990][T15916] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 1059.486030][T15930] netlink: 'syz.3.3041': attribute type 29 has an invalid length. [ 1059.555562][T15930] netlink: 'syz.3.3041': attribute type 29 has an invalid length. [ 1059.638492][T15930] netlink: 'syz.3.3041': attribute type 29 has an invalid length. [ 1062.561640][T13935] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1062.584645][T16007] loop6: detected capacity change from 0 to 128 [ 1062.716737][T16011] netlink: 'syz.5.3062': attribute type 3 has an invalid length. [ 1062.757689][T16011] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3062'. [ 1063.005987][T13935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.049007][T13935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.091741][T13935] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1063.113663][T13935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.159132][T13935] usb 8-1: config 0 descriptor?? [ 1063.164567][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.226808][T16032] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1063.272470][T16032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.307515][T15974] loop8: detected capacity change from 0 to 40427 [ 1063.440747][T15974] F2FS-fs (loop8): invalid crc value [ 1063.525320][T16051] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14100] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[16051] [ 1063.568636][T15974] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1063.592484][T13953] Bluetooth: hci5: command 0x0406 tx timeout [ 1063.688764][ T4274] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1063.837574][T15974] F2FS-fs (loop8): Start checkpoint disabled! [ 1063.926153][T13935] hid-led: probe of 0003:1D34:000A.0006 failed with error -71 [ 1063.949028][T13935] usb 8-1: USB disconnect, device number 4 [ 1063.959902][T15974] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e7 [ 1063.991847][ T4274] usb 6-1: Using ep0 maxpacket: 32 [ 1064.132937][ T4274] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1064.141110][ T4274] usb 6-1: config 0 has no interface number 0 [ 1064.284809][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.393266][ T4274] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1064.402372][ T4274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.436143][ T4274] usb 6-1: Product: syz [ 1064.440365][ T4274] usb 6-1: Manufacturer: syz [ 1064.445240][ T4274] usb 6-1: SerialNumber: syz [ 1064.498706][ T4274] usb 6-1: config 0 descriptor?? [ 1064.565890][ T4274] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1064.813382][ T4274] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1064.834317][ T4274] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1065.303223][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1065.312025][ T7289] usb 6-1: USB disconnect, device number 5 [ 1065.354074][ T7289] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1065.386310][ T7289] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1065.441169][ T7289] quatech2 6-1:0.51: device disconnected [ 1065.492529][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.739169][T16107] loop6: detected capacity change from 0 to 1024 [ 1065.790458][T16110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1065.821463][T16107] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1065.835132][T16107] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1065.930630][T16107] EXT4-fs error (device loop6): ext4_get_journal_inode:5187: inode #32: comm syz.6.3080: iget: special inode unallocated [ 1066.036625][T16107] EXT4-fs (loop6): no journal found [ 1066.069784][T16107] EXT4-fs (loop6): can't get journal size [ 1066.081847][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.118684][T16107] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,nodelalloc,abort,,errors=continue. Quota mode: writeback. [ 1066.531497][T16127] loop6: detected capacity change from 0 to 128 [ 1066.605891][T16127] hpfs: hpfs_map_sector(): read error [ 1066.617679][T16127] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 1066.625576][ T4234] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1066.642330][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.683538][T16127] hpfs: hpfs_map_sector(): read error [ 1066.896734][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.033374][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1067.066626][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1067.112565][ T4234] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 1067.156727][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.213844][ T4234] usb 6-1: config 0 descriptor?? [ 1067.647045][T16127] loop6: detected capacity change from 0 to 32768 [ 1067.686992][T16127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3086 (16127) [ 1067.745357][ T4234] input: HID 044f:b300 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:044F:B300.0007/input/input12 [ 1067.805868][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.814924][T16127] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1067.850631][T16127] BTRFS info (device loop6): using free space tree [ 1067.882566][T16127] BTRFS info (device loop6): has skinny extents [ 1067.897959][ T4234] thrustmaster 0003:044F:B300.0007: input,hidraw0: USB HID v0.04 Joystick [HID 044f:b300] on usb-dummy_hcd.5-1/input0 [ 1067.977032][ T4234] thrustmaster 0003:044F:B300.0007: can't find FF field in output reports [ 1068.030440][ T4234] usb 6-1: USB disconnect, device number 6 [ 1068.229939][T16184] fido_id[16184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1068.305150][T16127] BTRFS info (device loop6): enabling ssd optimizations [ 1069.019433][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.277153][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.414761][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.527318][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.554678][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.581334][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.594475][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.627584][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.650246][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.659609][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.183185][T16259] loop6: detected capacity change from 0 to 4096 [ 1070.217078][T16259] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1070.262339][T16272] netem: incorrect ge model size [ 1070.277438][T16272] netem: change failed [ 1070.329157][T16259] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1070.386248][T16259] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1070.418430][T16259] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1070.441827][T14624] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1070.482318][T16259] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1070.503228][T16259] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1070.556309][T16259] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1070.615438][T16259] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1070.639703][T16259] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1070.648690][T16259] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1070.709329][T16259] ntfs: volume version 3.1. [ 1070.918962][T14624] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1071.036292][T14624] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.339675][T14624] usb 9-1: string descriptor 0 read error: -22 [ 1071.345973][T14624] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1071.385653][T14624] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.473378][T16324] netlink: 'syz.7.3135': attribute type 10 has an invalid length. [ 1071.700557][T16324] team0 (unregistering): Port device team_slave_0 removed [ 1071.763181][T16324] team0 (unregistering): Port device team_slave_1 removed [ 1071.813967][T16324] team0 (unregistering): Port device bridge1 removed [ 1072.195665][T14624] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 1072.351856][T14624] usb 9-1: USB disconnect, device number 6 [ 1072.491460][T16366] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1072.752743][T14351] udevd[14351]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.822281][T16383] netlink: 'syz.6.3150': attribute type 3 has an invalid length. [ 1072.848515][T16383] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3150'. [ 1073.133105][T16402] loop5: detected capacity change from 0 to 256 [ 1073.248313][T16402] exfat: Deprecated parameter 'utf8' [ 1073.268725][T16402] exfat: Deprecated parameter 'utf8' [ 1073.274353][T16402] exfat: Deprecated parameter 'utf8' [ 1073.353251][T16402] exfat: Deprecated parameter 'namecase' [ 1073.414171][T16402] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1074.430633][T16411] loop7: detected capacity change from 0 to 32768 [ 1074.439391][T16428] net_ratelimit: 1008 callbacks suppressed [ 1074.439411][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.473511][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.504240][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.524412][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.578773][T16411] read_mapping_page failed! [ 1074.601707][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.610430][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.631908][T16411] ERROR: (device loop7): txCommit: [ 1074.631908][T16411] [ 1074.652754][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.695474][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.695594][T16453] read_mapping_page failed! [ 1074.765045][T16453] ERROR: (device loop7): txCommit: [ 1074.765045][T16453] [ 1074.800884][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.950119][T16428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.876843][ T7289] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1076.118647][ T7289] usb 9-1: device descriptor read/64, error -71 [ 1076.439090][ T7289] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1076.703824][ T7289] usb 9-1: device descriptor read/64, error -71 [ 1076.834108][ T7289] usb usb9-port1: attempt power cycle [ 1077.300966][ T7289] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1077.448278][ T7289] usb 9-1: device descriptor read/8, error -71 [ 1077.469148][T16524] loop7: detected capacity change from 0 to 32768 [ 1077.568697][T16524] JBD2: Ignoring recovery information on journal [ 1077.656185][T16524] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1077.765937][ T7289] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1077.885320][ T7289] usb 9-1: device descriptor read/8, error -71 [ 1077.959211][T14271] ocfs2: Unmounting device (7,7) on (node local) [ 1078.026093][ T7289] usb usb9-port1: unable to enumerate USB device [ 1078.770580][T16596] loop7: detected capacity change from 0 to 4096 [ 1078.858864][T16604] loop5: detected capacity change from 0 to 256 [ 1079.044189][T16596] ntfs: volume version 3.1. [ 1079.903848][T16634] tipc: New replicast peer: 255.255.255.255 [ 1080.055079][T16634] tipc: Enabled bearer , priority 10 [ 1080.335291][T16241] net_ratelimit: 60 callbacks suppressed [ 1080.335311][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.422483][T16654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.532721][T16654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.681324][T16666] jffs2: notice: (16666) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1080.961315][T16684] loop7: detected capacity change from 0 to 256 [ 1081.045880][T16684] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1081.083653][T16684] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1081.163061][T16684] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1081.408035][T16704] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1081.450756][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.529792][T16710] tipc: Started in network mode [ 1081.557198][T16710] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1081.578022][T16710] tipc: Enabled bearer , priority 0 [ 1081.759919][T16711] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14100] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[16711] [ 1081.776608][T16714] [ 1081.778989][T16714] ====================================================== [ 1081.786028][T16714] WARNING: possible circular locking dependency detected [ 1081.793065][T16714] syzkaller #0 Not tainted [ 1081.797493][T16714] ------------------------------------------------------ [ 1081.804528][T16714] syz.8.3240/16714 is trying to acquire lock: [ 1081.810797][T16714] ffffffff8c95ffc8 (pci_rescan_remove_lock){+.+.}-{3:3}, at: dev_rescan_store+0xc2/0x150 [ 1081.821276][T16714] [ 1081.821276][T16714] but task is already holding lock: [ 1081.828664][T16714] ffff8881423bb0f0 (kn->active#430){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 1081.838542][T16714] [ 1081.838542][T16714] which lock already depends on the new lock. [ 1081.838542][T16714] [ 1081.848967][T16714] [ 1081.848967][T16714] the existing dependency chain (in reverse order) is: [ 1081.858002][T16714] [ 1081.858002][T16714] -> #1 (kn->active#430){++++}-{0:0}: [ 1081.865602][T16714] __kernfs_remove+0x5da/0xcb0 [ 1081.870923][T16714] kernfs_remove_by_name_ns+0x91/0x100 [ 1081.876934][T16714] sysfs_remove_group+0xfd/0x290 [ 1081.882420][T16714] sysfs_remove_groups+0x50/0xa0 [ 1081.887906][T16714] device_remove_attrs+0xf1/0x140 [ 1081.893464][T16714] device_del+0x637/0xa80 [ 1081.898333][T16714] pci_remove_bus_device+0x114/0x610 [ 1081.904176][T16714] pci_stop_and_remove_bus_device_locked+0x1e/0x30 [ 1081.911234][T16714] remove_store+0xe2/0x140 [ 1081.916195][T16714] kernfs_fop_write_iter+0x3a8/0x500 [ 1081.922031][T16714] vfs_write+0x748/0xd70 [ 1081.926883][T16714] ksys_write+0x153/0x260 [ 1081.931762][T16714] do_syscall_64+0x4c/0xa0 [ 1081.936727][T16714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1081.943240][T16714] [ 1081.943240][T16714] -> #0 (pci_rescan_remove_lock){+.+.}-{3:3}: [ 1081.951619][T16714] __lock_acquire+0x2c66/0x7b50 [ 1081.957037][T16714] lock_acquire+0x19e/0x400 [ 1081.962101][T16714] __mutex_lock_common+0x1e5/0x2400 [ 1081.967865][T16714] mutex_lock_nested+0x17/0x20 [ 1081.973181][T16714] dev_rescan_store+0xc2/0x150 [ 1081.978499][T16714] kernfs_fop_write_iter+0x3a8/0x500 [ 1081.984346][T16714] vfs_write+0x748/0xd70 [ 1081.989273][T16714] ksys_write+0x153/0x260 [ 1081.994159][T16714] do_syscall_64+0x4c/0xa0 [ 1081.999164][T16714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1082.005608][T16714] [ 1082.005608][T16714] other info that might help us debug this: [ 1082.005608][T16714] [ 1082.015860][T16714] Possible unsafe locking scenario: [ 1082.015860][T16714] [ 1082.023334][T16714] CPU0 CPU1 [ 1082.028730][T16714] ---- ---- [ 1082.034120][T16714] lock(kn->active#430); [ 1082.038509][T16714] lock(pci_rescan_remove_lock); [ 1082.046082][T16714] lock(kn->active#430); [ 1082.052974][T16714] lock(pci_rescan_remove_lock); [ 1082.058030][T16714] [ 1082.058030][T16714] *** DEADLOCK *** [ 1082.058030][T16714] [ 1082.066194][T16714] 4 locks held by syz.8.3240/16714: [ 1082.071412][T16714] #0: ffff888051477270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 1082.080885][T16714] #1: ffff8880667c4460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 1082.090027][T16714] #2: ffff888060705c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 1082.099822][T16714] #3: ffff8881423bb0f0 (kn->active#430){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 1082.109982][T16714] [ 1082.109982][T16714] stack backtrace: [ 1082.115889][T16714] CPU: 1 PID: 16714 Comm: syz.8.3240 Not tainted syzkaller #0 [ 1082.123390][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.133476][T16714] Call Trace: [ 1082.136778][T16714] [ 1082.139730][T16714] dump_stack_lvl+0x188/0x250 [ 1082.144446][T16714] ? load_image+0x410/0x410 [ 1082.148979][T16714] ? show_regs_print_info+0x20/0x20 [ 1082.154232][T16714] ? print_circular_bug+0x12b/0x1a0 [ 1082.159471][T16714] check_noncircular+0x296/0x330 [ 1082.164447][T16714] ? add_chain_block+0x9b0/0x9b0 [ 1082.169499][T16714] ? lockdep_lock+0xf1/0x1f0 [ 1082.174121][T16714] ? mark_lock+0x94/0x320 [ 1082.178474][T16714] ? _find_first_zero_bit+0xd1/0xf0 [ 1082.183730][T16714] __lock_acquire+0x2c66/0x7b50 [ 1082.188678][T16714] ? verify_lock_unused+0x140/0x140 [ 1082.193911][T16714] ? __lock_acquire+0x7b50/0x7b50 [ 1082.198968][T16714] ? mark_lock+0x94/0x320 [ 1082.203331][T16714] lock_acquire+0x19e/0x400 [ 1082.207858][T16714] ? dev_rescan_store+0xc2/0x150 [ 1082.212825][T16714] ? __might_sleep+0xf0/0xf0 [ 1082.217523][T16714] ? read_lock_is_recursive+0x10/0x10 [ 1082.222930][T16714] __mutex_lock_common+0x1e5/0x2400 [ 1082.228162][T16714] ? dev_rescan_store+0xc2/0x150 [ 1082.233135][T16714] ? rcu_lock_release+0x20/0x20 [ 1082.238098][T16714] ? dev_rescan_store+0xc2/0x150 [ 1082.243064][T16714] ? mutex_lock_io_nested+0x60/0x60 [ 1082.248321][T16714] ? _kstrtoull+0x3cb/0x4e0 [ 1082.252903][T16714] mutex_lock_nested+0x17/0x20 [ 1082.257704][T16714] dev_rescan_store+0xc2/0x150 [ 1082.262507][T16714] ? remove_store+0x140/0x140 [ 1082.267206][T16714] ? sysfs_kf_write+0x183/0x2a0 [ 1082.272083][T16714] ? sysfs_kf_read+0x350/0x350 [ 1082.276872][T16714] kernfs_fop_write_iter+0x3a8/0x500 [ 1082.282189][T16714] vfs_write+0x748/0xd70 [ 1082.286461][T16714] ? file_end_write+0x250/0x250 [ 1082.291349][T16714] ? mutex_lock_nested+0x17/0x20 [ 1082.296313][T16714] ? __fdget_pos+0x2bf/0x370 [ 1082.300929][T16714] ? ksys_write+0x70/0x260 [ 1082.305371][T16714] ksys_write+0x153/0x260 [ 1082.309735][T16714] ? __ia32_sys_read+0x80/0x80 [ 1082.314522][T16714] ? trace_sys_enter+0x1f/0x80 [ 1082.319368][T16714] do_syscall_64+0x4c/0xa0 [ 1082.323804][T16714] ? clear_bhb_loop+0x30/0x80 [ 1082.328500][T16714] ? clear_bhb_loop+0x30/0x80 [ 1082.333206][T16714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1082.333906][T16715] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1082.339117][T16714] RIP: 0033:0x7f743c6e1159 [ 1082.339141][T16714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.372254][T16714] RSP: 002b:00007f743a939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1082.380791][T16714] RAX: ffffffffffffffda RBX: 00007f743c968fa0 RCX: 00007f743c6e1159 [ 1082.381166][T16715] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1082.388829][T16714] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1082.388848][T16714] RBP: 00007f743c77803b R08: 0000000000000000 R09: 0000000000000000 [ 1082.388860][T16714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.388870][T16714] R13: 00007f743c969038 R14: 00007f743c968fa0 R15: 00007ffdf4711908 [ 1082.388889][T16714] [ 1082.434965][ T4200] Bluetooth: Wrong link type (-22) [ 1082.443149][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1082.517393][T16714] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1082.617092][T16751] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[14014] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[16751] [ 1082.634852][T16751] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3244'. [ 1082.644196][T16751] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3244'. [ 1082.653595][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3244'. [ 1082.668886][ T4200] Bluetooth: Wrong link type (-22) [ 1082.686937][T13935] tipc: Node number set to 43690 [ 1082.769471][T13953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.187002][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.542183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.551927][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1083.558306][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.888907][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.016285][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.132120][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.479006][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.261223][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.703967][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.386260][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.080113][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.513584][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.773706][T13935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.640470][T13828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.333838][ T4454] Bluetooth: hci0: command 0x0406 tx timeout