Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. 2024/04/05 17:02:04 fuzzer started 2024/04/05 17:02:04 dialing manager at 10.128.0.163:30008 [ 50.528063][ T3504] cgroup: Unknown subsys name 'net' [ 50.634646][ T3504] cgroup: Unknown subsys name 'rlimit' 2024/04/05 17:02:06 syscalls: 3846 2024/04/05 17:02:06 code coverage: enabled 2024/04/05 17:02:06 comparison tracing: enabled 2024/04/05 17:02:06 extra coverage: enabled 2024/04/05 17:02:06 delay kcov mmap: mmap returned an invalid pointer 2024/04/05 17:02:06 setuid sandbox: enabled 2024/04/05 17:02:06 namespace sandbox: enabled 2024/04/05 17:02:06 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/05 17:02:06 fault injection: enabled 2024/04/05 17:02:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/05 17:02:06 net packet injection: enabled 2024/04/05 17:02:06 net device setup: enabled 2024/04/05 17:02:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/05 17:02:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/05 17:02:06 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/05 17:02:06 USB emulation: enabled 2024/04/05 17:02:06 hci packet injection: enabled 2024/04/05 17:02:06 wifi device emulation: enabled 2024/04/05 17:02:06 802.15.4 emulation: enabled 2024/04/05 17:02:06 swap file: enabled [ 52.161603][ T3504] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS 2024/04/05 17:02:06 starting 5 executor processes [ 53.225141][ T3521] chnl_net:caif_netlink_parms(): no params data found [ 53.236611][ T3525] chnl_net:caif_netlink_parms(): no params data found [ 53.329456][ T3517] chnl_net:caif_netlink_parms(): no params data found [ 53.381622][ T3526] chnl_net:caif_netlink_parms(): no params data found [ 53.462090][ T3529] chnl_net:caif_netlink_parms(): no params data found [ 53.490332][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.498077][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.506258][ T3525] device bridge_slave_0 entered promiscuous mode [ 53.514701][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.521847][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.529923][ T3521] device bridge_slave_0 entered promiscuous mode [ 53.545581][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.552726][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.560927][ T3517] device bridge_slave_0 entered promiscuous mode [ 53.569555][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.576623][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.585044][ T3525] device bridge_slave_1 entered promiscuous mode [ 53.593107][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.600218][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.608526][ T3521] device bridge_slave_1 entered promiscuous mode [ 53.635520][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.642680][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.654659][ T3517] device bridge_slave_1 entered promiscuous mode [ 53.716307][ T3521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.725522][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.732911][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.741417][ T3526] device bridge_slave_0 entered promiscuous mode [ 53.751251][ T3517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.763206][ T3517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.775173][ T3525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.791457][ T3521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.800964][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.808252][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.816148][ T3526] device bridge_slave_1 entered promiscuous mode [ 53.838961][ T3525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.911318][ T3517] team0: Port device team_slave_0 added [ 53.919653][ T3526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.936677][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.943911][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.952006][ T3529] device bridge_slave_0 entered promiscuous mode [ 53.961405][ T3521] team0: Port device team_slave_0 added [ 53.969877][ T3517] team0: Port device team_slave_1 added [ 53.977419][ T3526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.996523][ T3525] team0: Port device team_slave_0 added [ 54.002757][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.010999][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.019223][ T3529] device bridge_slave_1 entered promiscuous mode [ 54.027567][ T3521] team0: Port device team_slave_1 added [ 54.049211][ T3525] team0: Port device team_slave_1 added [ 54.079248][ T3526] team0: Port device team_slave_0 added [ 54.109533][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.116718][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.143139][ T3517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.156390][ T3526] team0: Port device team_slave_1 added [ 54.172604][ T3529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.182196][ T3521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.189284][ T3521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.215581][ T3521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.236138][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.243443][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.269809][ T3517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.289323][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.296488][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.323830][ T3525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.337101][ T3529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.346518][ T3521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.353711][ T3521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.380276][ T3521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.403554][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.410567][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.437233][ T3525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.469100][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.476079][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.502532][ T3526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.540001][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.547852][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.574238][ T3526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.592526][ T3529] team0: Port device team_slave_0 added [ 54.601111][ T3529] team0: Port device team_slave_1 added [ 54.618596][ T3517] device hsr_slave_0 entered promiscuous mode [ 54.625309][ T3517] device hsr_slave_1 entered promiscuous mode [ 54.653952][ T3521] device hsr_slave_0 entered promiscuous mode [ 54.660964][ T3521] device hsr_slave_1 entered promiscuous mode [ 54.667913][ T3521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.675724][ T3521] Cannot create hsr debugfs directory [ 54.738602][ T3525] device hsr_slave_0 entered promiscuous mode [ 54.745388][ T3525] device hsr_slave_1 entered promiscuous mode [ 54.751984][ T3525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.759683][ T3525] Cannot create hsr debugfs directory [ 54.765639][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.772903][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.799349][ T3529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.814099][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.821534][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.847783][ T3529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.859303][ T1065] Bluetooth: hci1: command 0x0409 tx timeout [ 54.867129][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 54.909743][ T3526] device hsr_slave_0 entered promiscuous mode [ 54.916726][ T3526] device hsr_slave_1 entered promiscuous mode [ 54.924137][ T3526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.932057][ T3526] Cannot create hsr debugfs directory [ 54.937003][ T3249] Bluetooth: hci4: command 0x0409 tx timeout [ 54.937883][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 54.988191][ T3529] device hsr_slave_0 entered promiscuous mode [ 54.994973][ T3529] device hsr_slave_1 entered promiscuous mode [ 55.002377][ T3529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.010239][ T3529] Cannot create hsr debugfs directory [ 55.017306][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 55.269323][ T3517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.281538][ T3517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.295425][ T3517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.305194][ T3517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.376691][ T3521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.389738][ T3521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.400326][ T3521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.409767][ T3521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.457557][ T3526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.469666][ T3526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.487799][ T3526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.500181][ T3526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.516260][ T3517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.554222][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.564512][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.583030][ T3517] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.591664][ T3525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.605936][ T3525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.639849][ T3525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.649005][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.658927][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.669039][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.676256][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.684865][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.694035][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.702922][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.710068][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.722021][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.743744][ T3525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.777074][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.786054][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.819321][ T3521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.835231][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.847769][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.856260][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.865236][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.874153][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.882961][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.912481][ T3517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.923972][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.933376][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.943220][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.953411][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.962531][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.971159][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.982475][ T3529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.994699][ T3529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.006175][ T3521] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.028296][ T3529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.045308][ T3529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.058642][ T3526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.077407][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.086749][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.101912][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.109049][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.137808][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.145851][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.155346][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.164341][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.171450][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.179528][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.188644][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.197844][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.207220][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.215676][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.224991][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.235339][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.263899][ T3526] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.271503][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.281678][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.302552][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.311028][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.348513][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.358172][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.367713][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.374872][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.383170][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.393076][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.402204][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.409462][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.417648][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.426300][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.435396][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.443861][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.452313][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.460137][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.474922][ T3525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.505470][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.514121][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.522220][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.533074][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.541806][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.550626][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.559616][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.568170][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.576378][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.585197][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.594252][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.605508][ T3526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.619111][ T3517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.654152][ T3525] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.680106][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.689505][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.705616][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.714643][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.748879][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.768343][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.787628][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.794806][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.804861][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.831240][ T3529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.846261][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.855577][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.864305][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.871382][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.880272][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.890368][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.899357][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.907961][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.917250][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.925065][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.948424][ T3517] device veth0_vlan entered promiscuous mode [ 56.957106][ T3567] Bluetooth: hci0: command 0x041b tx timeout [ 56.964010][ T3567] Bluetooth: hci1: command 0x041b tx timeout [ 56.964774][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.979847][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.989292][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.001107][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.010041][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.017914][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.025438][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.027244][ T3560] Bluetooth: hci3: command 0x041b tx timeout [ 57.034695][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.045591][ T3560] Bluetooth: hci4: command 0x041b tx timeout [ 57.048773][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.060828][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.073728][ T3521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.091406][ T3525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.102812][ T3560] Bluetooth: hci2: command 0x041b tx timeout [ 57.110353][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.152006][ T3526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.164136][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.181935][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.191500][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.205297][ T3529] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.216915][ T3517] device veth1_vlan entered promiscuous mode [ 57.231378][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.240416][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.258094][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.303899][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.313740][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.322899][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.330035][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.338567][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.347651][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.356195][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.363778][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.371861][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.381022][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.393675][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.437166][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.446614][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.462985][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.472380][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.487467][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.502414][ T3517] device veth0_macvtap entered promiscuous mode [ 57.516114][ T3517] device veth1_macvtap entered promiscuous mode [ 57.534810][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.544434][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.553705][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.562532][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.571582][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.579921][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.588775][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.597061][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.604506][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.621349][ T3525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.638489][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.646612][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.655738][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.665094][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.673900][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.683106][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.691294][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.710607][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.718680][ T3526] device veth0_vlan entered promiscuous mode [ 57.749772][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.758661][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.768515][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.777386][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.792807][ T3521] device veth0_vlan entered promiscuous mode [ 57.802750][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.815303][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.836690][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.846403][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.862068][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.871349][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.880583][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.889472][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.902889][ T3526] device veth1_vlan entered promiscuous mode [ 57.917499][ T3521] device veth1_vlan entered promiscuous mode [ 57.925437][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.934059][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.942925][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.951588][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.962734][ T3517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.976159][ T3517] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.987057][ T3517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.995778][ T3517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.035829][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.044758][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.053729][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.062581][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.071661][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.080114][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.104463][ T3526] device veth0_macvtap entered promiscuous mode [ 58.117730][ T3525] device veth0_vlan entered promiscuous mode [ 58.124245][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.134004][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.144505][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.153044][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.161672][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.183280][ T3529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.194280][ T3526] device veth1_macvtap entered promiscuous mode [ 58.212230][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.221319][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.230075][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.241019][ T3525] device veth1_vlan entered promiscuous mode [ 58.264505][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.276025][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.290361][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.312585][ T3521] device veth0_macvtap entered promiscuous mode [ 58.331714][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.340250][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.348941][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.357995][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.369548][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.382543][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.395331][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.408169][ T3526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.417320][ T3526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.426217][ T3526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.435824][ T3526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.455574][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.464929][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.488022][ T3521] device veth1_macvtap entered promiscuous mode [ 58.510919][ T2611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.520639][ T2611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.526561][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.538515][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.549866][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.566151][ T3525] device veth0_macvtap entered promiscuous mode [ 58.603444][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.612265][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.622538][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.633861][ T3525] device veth1_macvtap entered promiscuous mode [ 58.656403][ T3521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.667554][ T3521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.677648][ T3521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.688406][ T3521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.700494][ T3521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.716360][ T3529] device veth0_vlan entered promiscuous mode [ 58.725818][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.741287][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.741625][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.761810][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.771047][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.780670][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.789596][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.798213][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.807398][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.815108][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.825102][ T3521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.838923][ T3521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.848990][ T3521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.860364][ T3521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.871945][ T3521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.885800][ T3529] device veth1_vlan entered promiscuous mode [ 58.900867][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.913906][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.923287][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.938113][ T3521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.949779][ T3521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.959424][ T3521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.968403][ T3521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:02:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) [ 59.007982][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.016096][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.027106][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.035510][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.037160][ T3559] Bluetooth: hci1: command 0x040f tx timeout [ 59.067297][ T3559] Bluetooth: hci0: command 0x040f tx timeout [ 59.092705][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.107713][ T3560] Bluetooth: hci4: command 0x040f tx timeout 17:02:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 59.114726][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120263][ T3560] Bluetooth: hci3: command 0x040f tx timeout [ 59.125876][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.177634][ T3560] Bluetooth: hci2: command 0x040f tx timeout [ 59.183917][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.207100][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 17:02:13 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) [ 59.227953][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.245705][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.259294][ T3529] device veth0_macvtap entered promiscuous mode [ 59.277529][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.286205][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.299333][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.308653][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.317984][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.332001][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.346607][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.358334][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.369014][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.379320][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.390544][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.402502][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_1 17:02:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0f021889b8b4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) [ 59.428502][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.428876][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.442577][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.466423][ T3529] device veth1_macvtap entered promiscuous mode [ 59.489412][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.495366][ T3525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.517370][ T3525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.526131][ T3525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 17:02:13 executing program 1: syz_clone(0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x5, 0x3, 0x7f, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 59.535417][ T3525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.557768][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:02:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 59.660634][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.677340][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:13 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 59.719599][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.731492][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.748055][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.785075][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806938][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.820980][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.833127][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_0 17:02:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) 17:02:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000e0850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000800000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 59.858250][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.875851][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.909985][ T2611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.924692][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.946889][ T2611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.957501][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.996905][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 17:02:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) [ 60.012685][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.023067][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 17:02:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) [ 60.057304][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.078232][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.089123][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.103261][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.120966][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.139162][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.177704][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.208508][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:02:14 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 17:02:14 executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014005700b7030000020000008500000083000000bf090000000000005509010000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000500)={@cgroup, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xa207, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=""/190, 0x0, 0xbe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x400, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 17:02:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='consume_skb\x00', r0}, 0x10) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 60.401113][ T3624] syz-executor.0[3624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 17:02:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17:02:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc116}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) 17:02:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_pid(r1, &(0x7f0000000000)=r0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x5, 0x3, 0x7f, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 60.401225][ T3624] syz-executor.0[3624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.692472][ T3628] ªªªªªª: renamed from vlan0 [ 60.729134][ T3525] syz-executor.2 (3525) used greatest stack depth: 18208 bytes left 17:02:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 17:02:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) 17:02:14 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 17:02:14 executing program 4: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:15 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@random="0f19aa744363", @random="2f5885f716f5", @val, {@ipv6}}, 0x0) 17:02:15 executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014005700b7030000020000008500000083000000bf090000000000005509010000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000500)={@cgroup, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xa207, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=""/190, 0x0, 0xbe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x400, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 17:02:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000003c0)="03", 0x1, 0x0, &(0x7f0000000380)={0x10, 0x2}, 0x10) [ 61.107820][ T1750] Bluetooth: hci0: command 0x0419 tx timeout 17:02:15 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) [ 61.178291][ T3635] syz-executor.0[3635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.178396][ T3635] syz-executor.0[3635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.192149][ T1750] Bluetooth: hci3: command 0x0419 tx timeout 17:02:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 17:02:15 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 17:02:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='consume_skb\x00', r0}, 0x10) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) 17:02:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 17:02:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000001680), &(0x7f00000016c0)=0x18) 17:02:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 17:02:15 executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014005700b7030000020000008500000083000000bf090000000000005509010000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000500)={@cgroup, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xa207, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=""/190, 0x0, 0xbe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x400, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 17:02:15 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00']}) [ 61.944313][ T3660] syz-executor.0[3660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 17:02:16 executing program 1: syz_emit_ethernet(0xe2, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60f21f0000ac2c00fe8000000000000000000000000000bbff02000000000000000000000000000133"], 0x0) 17:02:16 executing program 0: open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 17:02:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 17:02:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x8006, &(0x7f0000000080), &(0x7f0000000000)=0x8) [ 61.944419][ T3660] syz-executor.0[3660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.293943][ T3676] tipc: Started in network mode 17:02:16 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) [ 62.367066][ T3676] tipc: Node identity 000000000000000001, cluster identity 4711 17:02:16 executing program 0: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) 17:02:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001a00)={&(0x7f0000000380)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 17:02:16 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014005700b7030000020000008500000083000000bf090000000000005509010000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000500)={@cgroup, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xa207, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=""/190, 0x0, 0xbe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x400, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 17:02:16 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r3, r2, 0x0, 0x77) [ 62.842013][ T3701] syz-executor.1[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 17:02:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), 0x8) connect$inet(r0, &(0x7f0000000580)={0x10, 0x2}, 0x10) 17:02:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) listen(r0, 0x5) 17:02:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 62.842119][ T3701] syz-executor.1[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.990007][ T9] device hsr_slave_0 left promiscuous mode [ 63.050169][ T9] device hsr_slave_1 left promiscuous mode [ 63.067442][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.075086][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.110747][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.137361][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.149343][ T9] device bridge_slave_1 left promiscuous mode 17:02:17 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 63.156742][ T9] bridge0: port 2(bridge_slave_1) entered disabled state 17:02:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x90) [ 63.206204][ T9] device bridge_slave_0 left promiscuous mode [ 63.231401][ T9] bridge0: port 1(bridge_slave_0) entered disabled state 17:02:17 executing program 1: open(0x0, 0xc5828cd10a1c7e39, 0x0) 17:02:17 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r3, r2, 0x0, 0x77) [ 63.285341][ T9] device veth1_macvtap left promiscuous mode [ 63.292529][ T9] device veth0_macvtap left promiscuous mode [ 63.306952][ T9] device veth1_vlan left promiscuous mode [ 63.313046][ T9] device veth0_vlan left promiscuous mode 17:02:17 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x15, &(0x7f0000000040)={@cgroup=r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00'}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x5, 0x18, 0x7, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:02:17 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000140)={0x19}, 0x8) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) dup2(r1, r0) 17:02:17 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd605f000000383a0029c50000000000000000000000000000ff02"], 0x0) 17:02:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) link(&(0x7f0000000680)='./file0\x00', 0x0) 17:02:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 17:02:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="80", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000001680)='f', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="fd", 0xffbc, 0x0, 0x0, 0x0) 17:02:17 executing program 0: symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 17:02:17 executing program 0: open(0xfffffffffffffffe, 0x0, 0x0) [ 63.786256][ T3737] loop1: detected capacity change from 0 to 2048 17:02:17 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto(r0, &(0x7f0000000380)='0', 0x1, 0x0, 0x0, 0x0) [ 63.872024][ T3737] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 17:02:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='0-0'], 0x31) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x92, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) syz_clone(0x1089000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 63.981911][ T9] team0 (unregistering): Port device team_slave_1 removed [ 64.003256][ T3737] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,block_validity,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 64.007845][ T9] team0 (unregistering): Port device team_slave_0 removed [ 64.042537][ T3737] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #12: block 9: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 17:02:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385fea04220423"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855055aa57dd856862078721e05ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) [ 64.090425][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.146251][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.160397][ T3747] cgroup: fork rejected by pids controller in /syz0 17:02:18 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:18 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x7, 0x9}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) [ 64.437388][ T9] bond0 (unregistering): Released all slaves [ 64.584246][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 64.698164][ T3557] Bluetooth: hci2: command 0x0409 tx timeout [ 64.713548][ T3559] Bluetooth: hci4: command 0x0409 tx timeout [ 64.833983][ T3689] chnl_net:caif_netlink_parms(): no params data found 17:02:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 17:02:19 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 64.984695][ T3681] chnl_net:caif_netlink_parms(): no params data found 17:02:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f00000003c0)={[0x9]}, 0x8, 0x40800) r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5451, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) fallocate(0xffffffffffffffff, 0x22, 0x9, 0xd7e7) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x185a00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40441, 0x0) 17:02:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000001000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000180)='6', 0x1}], 0x1, 0x0) tee(r2, r1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 65.213810][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.223025][ T3785] syz-executor.1[3785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.223131][ T3785] syz-executor.1[3785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.244410][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state 17:02:19 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socketpair(0x21, 0x6, 0xb0, 0x0) r0 = mq_open(&(0x7f0000000940)='trusted.overlay.nlink\x00', 0x40, 0x0, &(0x7f0000000980)={0x8, 0x7, 0x6, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x5452, &(0x7f0000000040)) [ 65.274959][ T3689] device bridge_slave_0 entered promiscuous mode [ 65.309403][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state 17:02:19 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) rt_sigreturn() write$P9_RLERROR(r1, 0x0, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03"], 0xe5, 0x0) [ 65.354354][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.363670][ T3689] device bridge_slave_1 entered promiscuous mode [ 65.430282][ T3687] chnl_net:caif_netlink_parms(): no params data found 17:02:19 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x10d042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0x7fffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000003c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r1, 0x0, 0x0) close(r1) rt_sigreturn() mknodat$loop(r0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) utimes(&(0x7f0000000140)='./bus\x00', 0x0) getdents(r0, &(0x7f0000000400)=""/206, 0xce) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 65.570799][ T3689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.624124][ T26] audit: type=1800 audit(1712336539.573:2): pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1938 res=0 errno=0 [ 65.624189][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state 17:02:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) fallocate(r2, 0x10, 0x0, 0x2c2) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) [ 65.702655][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.711353][ T3681] device bridge_slave_0 entered promiscuous mode [ 65.763925][ T3689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.828612][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.835704][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.868648][ T3681] device bridge_slave_1 entered promiscuous mode [ 65.963457][ T3689] team0: Port device team_slave_0 added [ 65.979431][ T3681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.022973][ T3689] team0: Port device team_slave_1 added [ 66.036463][ T3681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.277502][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.284638][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.304083][ T3687] device bridge_slave_0 entered promiscuous mode [ 66.315729][ T3689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.332365][ T3689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.371899][ T3689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.396786][ T3681] team0: Port device team_slave_0 added [ 66.405186][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.413108][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.428680][ T3687] device bridge_slave_1 entered promiscuous mode [ 66.487846][ T3689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.494831][ T3689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.567085][ T3689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.592422][ T3681] team0: Port device team_slave_1 added [ 66.617163][ T3557] Bluetooth: hci1: command 0x041b tx timeout [ 66.649578][ T3687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.704419][ T3687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.783169][ T3590] Bluetooth: hci4: command 0x041b tx timeout [ 66.792086][ T3590] Bluetooth: hci2: command 0x041b tx timeout 17:02:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) recvmsg$unix(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002a00)=""/200, 0xc8}], 0x1}, 0x0) rt_sigreturn() write$P9_RSETATTR(r3, &(0x7f0000000240)={0x7}, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 66.887482][ T3681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.894638][ T3681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.960140][ T3681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.992977][ T3689] device hsr_slave_0 entered promiscuous mode 17:02:21 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{}]}}}]}}]}}, 0x0) [ 67.009213][ T3689] device hsr_slave_1 entered promiscuous mode [ 67.030007][ T3689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.050920][ T3689] Cannot create hsr debugfs directory [ 67.094425][ T3681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.104586][ T3681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.132214][ T3681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.148551][ T3687] team0: Port device team_slave_0 added [ 67.191120][ T3687] team0: Port device team_slave_1 added [ 67.308369][ T3681] device hsr_slave_0 entered promiscuous mode [ 67.325042][ T3681] device hsr_slave_1 entered promiscuous mode [ 67.336193][ T3681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.353261][ T3681] Cannot create hsr debugfs directory [ 67.376923][ T3559] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.473489][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.481217][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.536586][ T3687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.606629][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.616154][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.643319][ T3687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.677068][ T3559] usb 2-1: Using ep0 maxpacket: 16 [ 67.790176][ T3689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.817445][ T3559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.835654][ T3559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.857364][ T3559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.870375][ T3559] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.880860][ T3559] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.890993][ T3559] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 67.907355][ T3687] device hsr_slave_0 entered promiscuous mode [ 67.914440][ T3687] device hsr_slave_1 entered promiscuous mode [ 67.921763][ T3687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.930045][ T3687] Cannot create hsr debugfs directory [ 67.938927][ T3814] chnl_net:caif_netlink_parms(): no params data found [ 67.982125][ T3559] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.001951][ T3559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.010403][ T3559] usb 2-1: SerialNumber: syz [ 68.020793][ T3689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.060706][ T3559] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 68.087801][ T3559] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 68.121566][ T3689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.251888][ T3689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.264040][ T25] usb 2-1: USB disconnect, device number 2 [ 68.277895][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.284981][ T3814] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.297652][ T3590] Bluetooth: hci3: command 0x0409 tx timeout [ 68.311421][ T3814] device bridge_slave_0 entered promiscuous mode [ 68.334434][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.341729][ T3814] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.350321][ T3814] device bridge_slave_1 entered promiscuous mode [ 68.370640][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.429828][ T3814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.447299][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.466248][ T3814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.529107][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.558986][ T3814] team0: Port device team_slave_0 added [ 68.567987][ T3814] team0: Port device team_slave_1 added [ 68.604615][ T3814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.611728][ T3814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.642645][ T3814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.673343][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.697583][ T3249] Bluetooth: hci1: command 0x040f tx timeout [ 68.709594][ T3814] batman_adv: batadv0: Adding interface: batadv_slave_1 17:02:22 executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0xfffffffe}}}]}, 0x78}}, 0x0) [ 68.718988][ T3814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.746099][ T3814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.831215][ T3814] device hsr_slave_0 entered promiscuous mode [ 68.838768][ T3814] device hsr_slave_1 entered promiscuous mode [ 68.845518][ T3814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.854032][ T3814] Cannot create hsr debugfs directory [ 68.872884][ T3249] Bluetooth: hci2: command 0x040f tx timeout [ 68.883437][ T3249] Bluetooth: hci4: command 0x040f tx timeout [ 68.912990][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:02:22 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x15, 0x3f, 0x10, 0x413c, 0x81d7, 0x428a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0xf2, 0xfb}}]}}]}}, 0x0) [ 69.044660][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.136609][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.193072][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.265739][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.357269][ T3559] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.507378][ T9] tipc: Left network mode [ 69.646949][ T3559] usb 2-1: Using ep0 maxpacket: 16 [ 69.947029][ T3559] usb 2-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=42.8a [ 69.956305][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.990732][ T3559] usb 2-1: Product: syz [ 69.994948][ T3559] usb 2-1: Manufacturer: syz [ 70.001151][ T3681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.016946][ T3559] usb 2-1: SerialNumber: syz [ 70.026598][ T3559] usb 2-1: config 0 descriptor?? [ 70.033550][ T3681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.050033][ T3681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.164425][ T3681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.292391][ T3559] usb 2-1: USB disconnect, device number 3 [ 70.377257][ T3557] Bluetooth: hci3: command 0x041b tx timeout [ 70.441433][ T3681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.475045][ T3681] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.493564][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.502011][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.513365][ T3689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.573796][ T3689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.584184][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.603242][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.616716][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.623963][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.643625][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.654827][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.673363][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.680507][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.735212][ T3689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.755672][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.764955][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.774413][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.777084][ T3557] Bluetooth: hci1: command 0x0419 tx timeout 17:02:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c000000eaffffff0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) [ 70.805667][ T3689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.828764][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.840637][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.876733][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.897821][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.906458][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.916114][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 17:02:24 executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@user_xattr}, {@nombcache}, {@discard}, {@norecovery}, {@nouid32}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGApCpYcYjfQ5NBceimhUEoDpR+g9x5Dv0A/RaANhBJMe+hFZeWVo8SSrThKrFS/H6w9s7vy7Gj2P57RSCiAkTWZ/ShEvBIR3yQRhzuOFSM/OLl+3trD63PZlkSz+emfSST5vvb5Sf77YDtTjPj1q4iThc3l1ldWF8uVSrqU56ca1StT9ZXVU5eq5YV0Ib08Mzt75u3ZmffefWdgdX3j/N/ff3L3wzNfH1/77uf7R24ncTYO5cc66/EMbnRmJmMyf07G4+wTJ04PoLBhkuz2BbAjY3mcj0fWBxyOsTzqgf++LyOiCYyoRPzDiGqPA9pz+wHNg18aDz5YnwBtrn9x/bWR2NeaGx1YSx6bGWXz3YkBlJ+V8csfd25nWwzudQiAbd24GRGni8XN/V+S9387d7qPc54sQ/8HL87dbPzzZrfxT2Fj/BNdxj8Hu8TuTmwf/4X7Ayimp2z8937X8e/GotXEWJ77X2vMN55cvFRJs77t/xFxIsb3Zvmt1nPOrN1r9jrWOf7Ltqz89lgwv477xb2PP2a+3Cg/S507PbgZ8WrX8W+y0f5Jl/bPno/zfZZxLL3zWq9j29f/+Wr+FPF61/Z/tKKVbL0+OdW6H6bad8Vmf9069luv8ne7/ln7H9i6/hNJ53pt/enL+HHfP2mvYzu9//ckn7XSe/J918qNxtJ0xJ7k4837Zx49tp1vn5/V/8Txrfu/bvf//oj4vM/63zp6q+epw9D+80/V/k+fuPfRFz/0Kr+/9n+rlTqR7+mn/+v3Ap/luQMAAAAAAIBhU4iIQ5EUShvpQqFUWn9/x9E4UKjU6o2TF2vLl+ej9VnZiRgvtFe6D3e8H2I6fz9sOz/zRH42Io5ExLdj+1v50lytMr/blQcAAAAAAAAAAAAAAAAAAIAhcbDH5/8zv4/t9tUBz52v/IbRtW38D+KbnoCh5P8/jC7xD6NL/MPoEv8wusQ/jC7xD6NL/MPoEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu25trD63NZfv7qyvJi7eqp+bS+WKouz5XmaktXSgu12kIlLc3Vqtv9vUqtdmV6JpavTTXSemOqvrJ6oVpbvty4cKlaXkgvpOMvpFYAAAAAAAAAAAAAAAAAAADwcqmvrC6WK5V0SUJiR4nicFyGxIATu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wYAAP//Gis4ow==") [ 70.927445][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.937146][ T3557] Bluetooth: hci4: command 0x0419 tx timeout [ 70.952411][ T3681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.963006][ T3557] Bluetooth: hci2: command 0x0419 tx timeout [ 70.964293][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.023612][ T3931] loop1: detected capacity change from 0 to 1024 [ 71.042116][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.051657][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.182359][ T3931] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,discard,norecovery,nouid32,lazytime,nodelalloc,usrquota,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 71.260788][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268145][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 17:02:25 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079381010c2154000fb0707830b0109021b0009000000080904000001e104550009058b37ad"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 71.403397][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.428392][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.443575][ T3681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.495708][ T3689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.523555][ T3814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.545623][ T3814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.566554][ T3814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.640285][ T3814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.672650][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.681353][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.694390][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.713223][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.748978][ T3687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.757451][ T3556] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.774532][ T3689] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.784222][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.794106][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.805544][ T3681] device veth0_vlan entered promiscuous mode [ 71.823976][ T3687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.842713][ T3687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.933966][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.944108][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.963768][ T3681] device veth1_vlan entered promiscuous mode [ 72.004172][ T3687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.017264][ T3556] usb 2-1: Using ep0 maxpacket: 16 [ 72.040124][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.060084][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.095070][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.123317][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.130611][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.166636][ T3556] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.168528][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.190964][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.197283][ T3556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.208875][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.217318][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.248518][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.339895][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.353983][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.410326][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.419550][ T3556] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 72.425361][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.441180][ T3556] usb 2-1: New USB device strings: Mfr=7, Product=131, SerialNumber=11 [ 72.446054][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.454417][ T3556] usb 2-1: Product: syz [ 72.462754][ T3556] usb 2-1: Manufacturer: syz [ 72.467953][ T3556] usb 2-1: SerialNumber: syz [ 72.474838][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.484039][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.492849][ T3556] usb 2-1: config 0 descriptor?? [ 72.493225][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.507444][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.523798][ T3558] Bluetooth: hci3: command 0x040f tx timeout [ 72.561285][ T3681] device veth0_macvtap entered promiscuous mode [ 72.574482][ T3556] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 72.634516][ T3689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.654831][ T3689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.714006][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.728205][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.746548][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.756242][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.765292][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.774311][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.808336][ T3681] device veth1_macvtap entered promiscuous mode [ 72.836717][ T3814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.895038][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.917106][ T3556] rc_core: IR keymap rc-imon-pad not found [ 72.923055][ T3556] Registered IR keymap rc-empty [ 72.939292][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.953514][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.956932][ T3556] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 72.974652][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.985610][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.992238][ T3556] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 72.996961][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.015368][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.029449][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.041528][ T3681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.056645][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.057382][ T3556] imon:send_packet: packet tx failed (-71) [ 73.077812][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.087201][ T3556] imon 2-1:0.0: remote input dev register failed [ 73.093885][ T3556] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 73.102290][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.138969][ T3556] imon 2-1:0.0: unable to initialize intf0, err 0 [ 73.141348][ T3687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.145704][ T3556] imon:imon_probe: failed to initialize context! [ 73.181671][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.195635][ T3556] imon 2-1:0.0: unable to register, err -19 [ 73.204379][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.243112][ T3556] usb 2-1: USB disconnect, device number 4 [ 73.270237][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.298457][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.308887][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.320087][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.330325][ T3681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.344512][ T3681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.370482][ T3681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.394511][ T3681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409856][ T3681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.420582][ T3681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.429997][ T3681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.444158][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 17:02:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x9}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x280) [ 73.472517][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.503676][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.537735][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.568691][ T3814] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.603911][ T3687] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.622980][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.638671][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.646321][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.662348][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.683619][ T3689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.721310][ T9] device hsr_slave_0 left promiscuous mode [ 73.730265][ T9] device hsr_slave_1 left promiscuous mode [ 73.754907][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.772961][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.794252][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.802477][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.812983][ T9] device bridge_slave_1 left promiscuous mode [ 73.824279][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.835863][ T9] device bridge_slave_0 left promiscuous mode [ 73.850675][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.883187][ T9] device hsr_slave_0 left promiscuous mode [ 73.895911][ T9] device hsr_slave_1 left promiscuous mode [ 73.912074][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.926170][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.950952][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.965895][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.988638][ T9] device bridge_slave_1 left promiscuous mode [ 73.998433][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.017659][ T9] device bridge_slave_0 left promiscuous mode [ 74.024024][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.040066][ T9] device hsr_slave_0 left promiscuous mode [ 74.048982][ T9] device hsr_slave_1 left promiscuous mode [ 74.056085][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.076079][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.086486][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.095044][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.105208][ T9] device bridge_slave_1 left promiscuous mode [ 74.112416][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.121971][ T9] device bridge_slave_0 left promiscuous mode [ 74.128690][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.156375][ T9] device veth1_macvtap left promiscuous mode [ 74.164472][ T9] device veth0_macvtap left promiscuous mode [ 74.171464][ T9] device veth1_vlan left promiscuous mode [ 74.178168][ T9] device veth0_vlan left promiscuous mode [ 74.187800][ T9] device veth1_macvtap left promiscuous mode [ 74.193940][ T9] device veth0_macvtap left promiscuous mode [ 74.200404][ T9] device veth1_vlan left promiscuous mode [ 74.206191][ T9] device veth0_vlan left promiscuous mode [ 74.214569][ T9] device veth1_macvtap left promiscuous mode [ 74.220941][ T9] device veth0_macvtap left promiscuous mode [ 74.227217][ T9] device veth1_vlan left promiscuous mode [ 74.233731][ T9] device veth0_vlan left promiscuous mode [ 74.617216][ T3558] Bluetooth: hci3: command 0x0419 tx timeout [ 74.665307][ T9] team0 (unregistering): Port device team_slave_1 removed [ 74.682729][ T9] team0 (unregistering): Port device team_slave_0 removed [ 74.696272][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.717335][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.794235][ T9] bond0 (unregistering): Released all slaves [ 74.945474][ T9] team0 (unregistering): Port device team_slave_1 removed [ 74.960097][ T9] team0 (unregistering): Port device team_slave_0 removed [ 74.973710][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.988155][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.064140][ T9] bond0 (unregistering): Released all slaves [ 75.205285][ T9] team0 (unregistering): Port device team_slave_1 removed [ 75.222575][ T9] team0 (unregistering): Port device team_slave_0 removed [ 75.238294][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.253381][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.332966][ T9] bond0 (unregistering): Released all slaves [ 75.402704][ T4002] device syzkaller0 entered promiscuous mode [ 75.418080][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.428126][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.436698][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.443798][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.453462][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.462299][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.470918][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.478035][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.485803][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.494557][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.503304][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.510442][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.518647][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.527912][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.599192][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.617624][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.636005][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.645971][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.653305][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.661375][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.670831][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.680726][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:02:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000006240), 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="c7", 0x1}], 0x1) [ 75.796310][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.810180][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.812664][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.827809][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:02:29 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) [ 75.869334][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.896240][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.928693][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.947394][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.955964][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.974171][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.985288][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.004868][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.015544][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.042065][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.061840][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.112946][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.127807][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.148401][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.166628][ T3687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.201755][ T3687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.259702][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.272494][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.291458][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.305879][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.325840][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.343031][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.366290][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.397814][ T2611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.407636][ T2611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.478100][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.486520][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.508278][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.516330][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.543851][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.558960][ T3689] device veth0_vlan entered promiscuous mode 17:02:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc116}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) [ 76.624515][ T3687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.675208][ T4043] loop1: detected capacity change from 0 to 32768 [ 76.698507][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.706209][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.721978][ T3689] device veth1_vlan entered promiscuous mode [ 76.757332][ T4043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4043) 17:02:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x308204}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 76.813435][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.826060][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.910207][ T3814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.935444][ T3689] device veth0_macvtap entered promiscuous mode [ 76.949347][ T4043] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 76.949561][ T4074] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.977924][ T4043] BTRFS info (device loop1): enabling auto defrag [ 76.988690][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.999280][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.008550][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.021916][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.027261][ T4043] BTRFS info (device loop1): doing ref verification [ 77.036935][ T4043] BTRFS info (device loop1): max_inline at 0 [ 77.078733][ T3689] device veth1_macvtap entered promiscuous mode [ 77.087031][ T4043] BTRFS info (device loop1): force clearing of disk cache [ 77.094184][ T4043] BTRFS info (device loop1): turning on sync discard [ 77.109415][ T3687] device veth0_vlan entered promiscuous mode [ 77.117495][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.126664][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.142107][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.150361][ T4043] BTRFS info (device loop1): disabling free space tree [ 77.162444][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.176364][ T4043] BTRFS info (device loop1): has skinny extents [ 77.246248][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.258277][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.267590][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.276574][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.289231][ T3687] device veth1_vlan entered promiscuous mode 17:02:31 executing program 3: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 77.304907][ T3689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.346930][ T3689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.358995][ T3689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.370169][ T3689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x130, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg\x00', 'veth1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) [ 77.399153][ T3689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.413685][ T3814] device veth0_vlan entered promiscuous mode [ 77.458089][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.469156][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.478011][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.487523][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.488727][ T4096] Cannot find del_set index 0 as target 17:02:31 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) [ 77.496541][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.510700][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.526307][ T3814] device veth1_vlan entered promiscuous mode [ 77.547175][ T3689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.567515][ T3689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.604967][ T3689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.616452][ T3689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.644130][ T4043] BTRFS info (device loop1): enabling ssd optimizations [ 77.655277][ T3689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.666474][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.677744][ T4043] BTRFS info (device loop1): clearing free space tree [ 77.685135][ T4043] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.696601][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.704636][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 17:02:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0xfffffffe}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0a000000000000000d0000000a00010062617369630000003c0002003800028008000100ffff00002c0002801000010000000200000000000000000018000200000004"], 0x6c}}, 0x0) [ 77.706983][ T4043] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.723615][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.771146][ T3689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.795180][ T3689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.824742][ T3689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.842073][ T3689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.859766][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.904527][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.925418][ T3687] device veth0_macvtap entered promiscuous mode 17:02:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0) [ 77.976251][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:02:32 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xff, 0x56, 0xde, 0x8, 0x46d, 0x8c7, 0x6fb3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1}}]}}]}}, 0x0) [ 78.117326][ T3687] device veth1_macvtap entered promiscuous mode [ 78.126309][ T3814] device veth0_macvtap entered promiscuous mode [ 78.158437][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.166610][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.193407][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.218627][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.260049][ T3814] device veth1_macvtap entered promiscuous mode [ 78.335151][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.344030][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.539245][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.575022][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:32 executing program 1: syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="10", 0x1}], 0x1) [ 78.606879][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.626860][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.636714][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.647386][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.670766][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.717061][ T3687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.724460][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.738121][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 17:02:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r2 = dup(r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 78.836195][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.878610][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.906865][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 78.913726][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 17:02:32 executing program 1: syz_usb_connect(0x0, 0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004f3b8940819f4925984b0102030109027c00010000000009040400000e010000072406"], 0x0) [ 78.930400][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.958617][ T3687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.979997][ T3687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.000546][ T3687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.024497][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.041356][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=08c7, bcdDevice=6f.b3 [ 79.061418][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.092867][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.098317][ T13] usb 4-1: config 0 descriptor?? [ 79.124663][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.144774][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.158429][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.159171][ T13] usb 4-1: Found UVC 0.00 device (046d:08c7) [ 79.172727][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.196926][ T13] usb 4-1: No valid video chain found. [ 79.210482][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.226278][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.241429][ T3814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.254343][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.263005][ T3562] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.280084][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.292226][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.304675][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.320356][ T3687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.340005][ T3687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.355619][ T3687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.364743][ T3687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.368628][ T13] usb 4-1: USB disconnect, device number 2 [ 79.391268][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.414357][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.426203][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.430643][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.436400][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.455610][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.465622][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.476234][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.486416][ T3814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.498287][ T3814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.510065][ T3814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.531298][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.541772][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.555141][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.568974][ T3814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.594041][ T3814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.606087][ T3814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.615981][ T3814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.675693][ T3667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.691247][ T3667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.699463][ T3562] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 79.708051][ T3562] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.721202][ T3562] usb 2-1: config 0 has no interface number 0 [ 79.754267][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:02:33 executing program 4: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:33 executing program 3: syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "eca41ddd2bccc4a9"}}}, 0x11) [ 79.907529][ T3562] usb 2-1: New USB device found, idVendor=9f81, idProduct=2549, bcdDevice=4b.98 [ 79.916625][ T3562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.925414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.935205][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:02:33 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) [ 79.973427][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.991569][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.003046][ T3562] usb 2-1: Product: syz [ 80.034974][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.044889][ T3562] usb 2-1: Manufacturer: syz [ 80.057484][ T3562] usb 2-1: SerialNumber: syz [ 80.066595][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.078614][ T3562] usb 2-1: config 0 descriptor?? 17:02:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f00000000c0)) [ 80.095057][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.105530][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.153122][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.173769][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.212690][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:02:34 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0) [ 80.254035][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:02:34 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) [ 80.336098][ T3567] usb 2-1: USB disconnect, device number 5 17:02:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x200, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)) 17:02:34 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 17:02:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x10}, 0x18) 17:02:34 executing program 2: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:34 executing program 0: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="03011420ff05430000000800ad0001140000002f2600ac14141fe001e502808a8904bd0500000000000000061fe4fdfe4b449430ebb52997e36ec55d17c6c52353029b1e598825532ac5063ef399fd06000102c8a9202fbdcb19fe1b4d1083a3c06376"], 0xdd12}], 0x1}, 0x0) 17:02:34 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0205647, &(0x7f0000000080)) 17:02:34 executing program 1: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) tkill(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(0x0, 0x0) setxattr$security_capability(&(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x0) getgroups(0x4, &(0x7f0000000440)=[0x0, 0x0, 0xee01, 0xee00]) mount$9p_fd(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x60}}, {@afid}, {@access_user}, {@cache_mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x5}}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@seclabel}, {@subj_type={'subj_type', 0x3d, '*]\xf2'}}]}}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/105, 0x69}], 0x1, &(0x7f0000000240)=""/145, 0x91}, 0xffff}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/98, 0x62}], 0x4, &(0x7f0000001580)=""/51, 0x33}, 0x3}, {{&(0x7f00000015c0)=@ieee802154, 0x80, &(0x7f0000001740)=[{&(0x7f0000001640)=""/241, 0xf1}], 0x1, &(0x7f0000001780)=""/81, 0x51}, 0x8}, {{&(0x7f0000001800)=@x25, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)}, {&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000019c0)=""/115, 0x73}, {&(0x7f0000001a40)=""/255, 0xff}, {&(0x7f0000001b40)=""/23, 0x17}], 0x5, &(0x7f0000001c00)=""/22, 0x16}, 0x6}, {{&(0x7f0000001c40)=@xdp, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/87, 0x57}, {&(0x7f0000001d40)=""/59, 0x3b}], 0x2, &(0x7f0000001fc0)=""/49, 0x31}, 0x7}], 0x5, 0x80010020, &(0x7f0000001f40)={0x0, 0x3938700}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) 17:02:34 executing program 3: r0 = syz_io_uring_setup(0x3bda, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 17:02:34 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001100)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0) 17:02:35 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) [ 81.076471][ T26] audit: type=1804 audit(1712336555.023:3): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir169986226/syzkaller.8exPzJ/3/bus/file0" dev="sda1" ino=1967 res=1 errno=0 17:02:35 executing program 2: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8fe0}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x4, 0x0, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0xfff}}]}}}]}, 0xa4}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a080046728283d88c045f30e7e9268c67799779bffcd0", 0x22, 0x0, 0x0, 0x0) [ 81.129927][ T4185] overlayfs: './file0' not a directory 17:02:35 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x7f00, 0x4) [ 81.224782][ T4157] loop4: detected capacity change from 0 to 32768 [ 81.274568][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.297870][ T4193] sp0: Synchronizing with TNC [ 81.309018][ T4157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4157) 17:02:35 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 17:02:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{}]}) [ 81.432295][ T4157] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.462059][ T4157] BTRFS info (device loop4): enabling auto defrag 17:02:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x16}, 0x40) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) [ 81.486238][ T4157] BTRFS info (device loop4): doing ref verification [ 81.501954][ T7] cfg80211: failed to load regulatory.db 17:02:35 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0x0, 0x6}}, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:02:35 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) [ 81.552076][ T4157] BTRFS info (device loop4): max_inline at 0 [ 81.582525][ T4157] BTRFS info (device loop4): force clearing of disk cache 17:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xce}) [ 81.637335][ T4157] BTRFS info (device loop4): turning on sync discard [ 81.644204][ T4157] BTRFS info (device loop4): disabling free space tree 17:02:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0xa, [@broadcast, @empty, @random="65d32b607df6", @link_local, @random="1a880ea8ae89", @link_local, @local, @empty, @broadcast, @multicast]}) [ 81.727735][ T4157] BTRFS info (device loop4): has skinny extents 17:02:35 executing program 0: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17:02:35 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 17:02:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="16"], 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x8, &(0x7f00000000c0), 0x4) 17:02:35 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 17:02:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) [ 82.078956][ T4157] BTRFS info (device loop4): enabling ssd optimizations [ 82.169444][ T4157] BTRFS info (device loop4): clearing free space tree [ 82.193887][ T4157] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.209539][ T4157] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) 17:02:36 executing program 4: r0 = io_uring_setup(0x253d, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ftruncate(0xffffffffffffffff, 0xc17a) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x0) 17:02:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 17:02:36 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:36 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup(r0) bind$packet(r1, &(0x7f0000008400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 17:02:36 executing program 1: r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797a056e6c30000000000000000000b729964ab1b2a4e0fb34471175", @ANYRES32=0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c40)={0x0, 0x274}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x81, 0x4, 0xe, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x50, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='d\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0200000000000000000000000b0001006367726f7570000034000200300001002c0000000800010062"], 0x64}}, 0x0) 17:02:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 17:02:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) unshare(0x40020480) 17:02:36 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) [ 82.743970][ T4267] netlink: 'syz-executor.2': attribute type 17 has an invalid length. 17:02:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) io_setup(0x0, 0x0) 17:02:36 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x3a) 17:02:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) 17:02:36 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa081, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 17:02:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) [ 82.956695][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:36 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x5) 17:02:37 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 17:02:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 17:02:37 executing program 2: pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) creat(&(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=@framed={{}, [@printk={@llu}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='writeback_bdi_register\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:02:37 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 17:02:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x180d) 17:02:37 executing program 0: r0 = io_uring_setup(0x253d, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ftruncate(0xffffffffffffffff, 0xc17a) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x0) 17:02:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x300, 0x0) 17:02:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc}) 17:02:37 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='net/udplite\x00') pread64(r1, &(0x7f0000000000)=""/160, 0xa0, 0x0) 17:02:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r2, 0x0, 0x0) 17:02:37 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="16"], 0x40) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000800)={0x0}, 0x20) 17:02:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000bb2b0d56d7090209", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000280), &(0x7f0000000080)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='fsi_master_gpio_cmd_abs_addr\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = dup(r4) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) 17:02:37 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:02:37 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r1, &(0x7f0000000100)=""/54, 0x36) write$dsp(r0, &(0x7f00000001c0)="92", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) read$dsp(r1, &(0x7f0000000140)=""/119, 0x77) 17:02:37 executing program 3: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180)=0x3ff, 0x4) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x40}}, 0x0) 17:02:37 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:37 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,metacopy=on']) 17:02:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc}) 17:02:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91d", 0x93}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r2, 0x0) sendmsg$key(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020700000700000000000000000000000500"], 0x38}}, 0x0) 17:02:37 executing program 4: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0xbee, &(0x7f0000000cc0)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 17:02:37 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000140)={@default, @null}) 17:02:38 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) [ 84.180081][ T4341] loop4: detected capacity change from 0 to 2048 [ 84.214055][ T4341] ======================================================= [ 84.214055][ T4341] WARNING: The mand mount option has been deprecated and 17:02:38 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f00000005c0)={[0xffffffffffffff81]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) [ 84.214055][ T4341] and is ignored by this kernel. Remove the mand [ 84.214055][ T4341] option from the mount to silence this warning. [ 84.214055][ T4341] ======================================================= [ 84.323925][ T4341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 17:02:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc048aeca, &(0x7f0000000000)={0x1, 0x0, [{}]}) 17:02:38 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfe3a) 17:02:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc}) 17:02:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xda00) 17:02:38 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000140)={@default, @null}) 17:02:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, &(0x7f0000000480)}}, 0x40) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 17:02:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 17:02:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0xe0, 0x200, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xff, 0x8000, 0xf66}) 17:02:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0x0) 17:02:39 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfe3a) 17:02:39 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='ext4_free_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 17:02:39 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:02:39 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc}) 17:02:39 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000140)={@default, @null}) 17:02:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000000), 0x400000) 17:02:39 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x6410, 0x4) 17:02:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xe8}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 17:02:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0x0) 17:02:39 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfe3a) 17:02:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="03030006e8fe091c6202a0ffffffff00600300000000ac14143de3177f43055762cb80948864113b112543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 17:02:39 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:02:39 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="23003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) 17:02:40 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000140)={@default, @null}) 17:02:40 executing program 2: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000014c}}}}}}}, 0x0) 17:02:40 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ba06002a17006000000002000020d3"]) 17:02:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x300, 0x40406, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:02:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xc4, 0x0, 0x300}) [ 86.252795][ T4457] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 17:02:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000000)) 17:02:40 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}, 0x0) 17:02:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0x2, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x38) 17:02:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 17:02:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xd4}) 17:02:41 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007c00)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}}, {{&(0x7f0000002c00)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) 17:02:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$eJzs3D9rc1UYAPDnpmkSdUgGJxG8oINTabu6pEgLxUxKBnXQYluQJAgtFFrF2MnVxdFPIAhufgkXv4HgKrjZoXDlJveatG+aNi9N+/75/ZY+Pfc85z7n9NDSIc/nbw56+2kcnn/zZzQaSVTa0Y6LJFpRidJ3cUX7hwAAnmcXWRb/ZGOL5CUR0VheWQDAEi389//XpZcEACzZRx9/8sFWp7P9YZo2Ymfw/Uk3/88+/zp+vnUYX0Y/DmI9mnEZkf1vHO9kWTasprlWvDMYnnTzzMFnvxfrb/0dMcrfiGa0RkNX83c72xvp2FT+MK/j1eL97Tx/M5rx+oz373a2N2fkR7cW7749Vf9aNOOPL+Kr6Mf+qIhJ/rcbafp+9uO/X3+al5fnJ8OTbn00byJbeeAfDQAAAAAAAAAAAAAAAAAAAAAAL7C1ondOPUb9e/Khov/OymX+zWqkpdbV/jzj/KRc6Fp/oGEWP5X9ddbTNM2KiZP8arxRjerj7BoAAAAAAAAAAAAAAAAAAACeLcenZ729fv/g6F6CshtA+bH+p12nPTXyVsyfXJ+8q1KEc1aOlXJOEjG3jHwT93QstwWv3FTzz78sumDj9jmr887nfoLydvX2ktlnWI9ypFFekt+m59Tiju+q3fQoW+j61WY+ai6899pro2A4Z04k8wp776/xyRUjyfVd1EanOjN9tQim0q/djYXu85O/KxLdOgAAAAAAAAAAAAAAAAAAYKkmH/qd8fB8bmolqy+tLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4UMeVMjg96+31+wdHdwiGRc4dJtfi6PgRtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL4r8AAAD//zJrXpY=") [ 87.355936][ T4479] loop2: detected capacity change from 0 to 256 17:02:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:41 executing program 4: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 17:02:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045109) [ 88.135439][ T4419] ODEBUG: Out of memory. ODEBUG disabled 17:02:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010004b040000000000c3e5007a000000", @ANYRES32=r3, @ANYBLOB="0000000040200200240012800b000100627269646765000014000280080015"], 0x80}}, 0x0) 17:02:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x1b0, 0x0, 0x0, 0x410, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@dev, @empty, [], [], 'veth0_to_team\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'ip6gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x100, 0x170, 0x48000000, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@mac={{0x30}, {@local}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "cfdb32768dea0054fe32d5b420a21987f281a38b36500abf18b504b8f4870ce4dc8d4c8a056c990347d6516410a63959903c0bf3f3d87a360f31eae71e5117d5"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote}}}, {{@ipv6={@loopback, @private2, [], [], 'veth0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 17:02:42 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x7, 0xa, 0x6, "b75c1ee089e785a20c74ac8abaff15bb1844038d2cd97cc724c72e1638b5394c"}) 17:02:42 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="39020000fd"], 0x239) 17:02:42 executing program 1: openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 17:02:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 17:02:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$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") [ 88.846570][ T4495] Cannot find del_set index 0 as target [ 88.883761][ T4497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 17:02:42 executing program 4: syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@nodecompose}, {}, {@nobarrier}, {@nobarrier}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}, {@nls={'nls', 0x3d, 'ascii'}}]}, 0x1, 0x62a, &(0x7f0000000c80)="$eJzs3UtoG+kdAPD/yLJsuSXr3XV207JQs4FtqWniB97WvTR9UHxYypIeejaJEosoTrCV4oRS3Be99hB6Tg++9VTI3ZCe20vJ1cdAIZccim8qMxrJ8lt+RfLm9wuj7/vmm/nmP39pHlIwE8A7a34iihuRxPzEF6tpe3N9pra5PjOUd9ciIq0XIorNIpKliORFs/tG+vKNdGa+fHLQdp5W526+fLP5qtkqtlZOSmlt+OD1jtJccS2fYjwiBvJyr8FuR90x3q0DxztOkM1A032+2koc9Fpjj7XjrH7i4xboH0nzurnHaMRIdoVu3gdEfnYovN3ozt6xznIAAABwQb23FVtrjUaj13EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARZI//z/Jp0KrPh5J6/n/pXxe5PULbaPXAQAAAAAAAADAiTQGOlvf2oqtWI1L7d4k+z//T7PGWPb6tXgUK1GJ5bgWq7EQ9ajHckxFxGjHQKXVhXp9eaqLNaf3XXP6XHcaAAAAAAAAAL7qfh/z2///DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/SCJGGgW2TTWqo9GoRgRwxFRSpdbi/h3q36RbfQ6AAAAAHgL3tuKrViNS612I8m+83+Ufe8fjkexFPWoRj1qUYnb2W8BzW/9hc31mdrm+sz9dNo77l//18h0GUY2YjR/e9h/y1eyJcpxJ6rZnGtxKx5Erdw5ypVWPPvH9bvX6dg/ynUZ2e28TPf8L3nZH0azjAy2MzKZx5bm8f3DM/Hj16fa0lQU2r/8jJ1DzkfyMtlV9t7uTExHIct36qPDMxHx7ed//9Vibene4p2Vif7ZpRNqZqLRaGZiKGu1MvHxO5WJyWzfL7fb8/Hz+GVMxHh8GctRjV/HQtSjEuPxs6y2kH+e09fRXZkq7Bz6xo7Wl0dFUsrfl+ZZ9HgxfZqteymq8Yt4ELejEp9n/6ZjKr4fszEbcx3v8OUujvrC8Y76q9/JK+kp/c952R/SvL7fkdfOc+5o1tc5ZztLH5z9ubH4zbySbuMPEfHTM9zP09mdifQq8fzrzb4PD8/E37L7hJXa0r3lxYWHXW7vs7xMj6M/9dVVIv28fJC+WVlr56cj7ftw376prG+s3VfY03e53XfUkVrK7+H2jjSd9X28b99M1nelo2/P/Vb7fgiAPjby3ZFS+b/lf5Wflf9YXix/MfyToR8MfVKKwX8O/rA4OfBZ4ZPkH/Esfrv9/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi5lcdP7i3UapXlIytJ9vD/iK4W7qi0Hud0+MJJ/iCf44ysUqtVhqMvwjhWpfafiI45Sa/j6YfKUL99+Ht7XgLO3/X6/YfXVx4/+V71/sLdyt3K0uDs7Nzk3OznM9fvVGsDkb5WJnsdJXAeti/6vY4EAAAAAAAAAAAA6NbhfwYwmC91uj8n6PEuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfc/EQUNyKJqclrk2l7c32mlk6t+vaSxYgoRETym4jkRcSNaE4x2jFcctB2nlbnbr58s/lqe6xia/nCYet1Zy2fYjwiBvLyrMa7derxkvYepgm72koc9Nr/AwAA//+nUAeD") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) [ 88.914084][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:02:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000001c80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000002380)={0x0, 0x0, 0x1, {0xa, @raw_data="6cf04dbc45513ed1baddc91891e6fc73a1e91565abc7350336f85d2d06160d2ad132442eb944f851fa4378e3aaa75b6742cbb797632e1b39c1b1ea1c619a4e04f45c83c325f94c97189ce4f6ac9d1b64c12b6709a7ee3f4e4329e746ea97bdf77a1658a76401cf28f96c43d98768debd088796f7c4d367cee98a9c351307e5fedd9a90830b83ccd04ab1e60ea5264e7523c8c9a81bcbecef83cf6f4bfbdb29ee18eadfdb2cecdd21bceda7eaedd68a152462d5f103abb29b80a0477aedec58a938d6d7ceebc6b3eb"}}) 17:02:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0xc1}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) [ 88.998238][ T4503] loop1: detected capacity change from 0 to 256 [ 89.031991][ T4505] loop4: detected capacity change from 0 to 1024 17:02:43 executing program 3: socket$xdp(0x2c, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r1}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/nvme', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 17:02:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000e80)={0x2, {0x2, 0x8}}) 17:02:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) 17:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4040aea0, &(0x7f0000000100)={0x1, 0x0, [{}]}) [ 89.173231][ T4505] attempt to access beyond end of device [ 89.173231][ T4505] loop4: rw=0, want=201326594, limit=1024 [ 89.186588][ T4505] 17:02:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000024000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="c74424000f000000c744240272000000c7442406000000000f011c240f01cb0f01c566b835000f00d036f30f090f01c964bf0000000080e92e0f0158000f009307000000", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:02:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x1}}) 17:02:43 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) [ 89.186596][ T4505] ====================================================== [ 89.186602][ T4505] WARNING: possible circular locking dependency detected [ 89.186609][ T4505] 5.15.153-syzkaller #0 Not tainted 17:02:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a3, &(0x7f00000001c0)="$eJzs3c9qK2UUAPAzyTSNukgQN4rggC5clVu3bhrlCmJXSgR1ocF7L0gSLrQQsIKxqz6BS9/DR3DjxjcQ3Aru2kVlZDIzTULTP9SYQv39Vof55pzvZL6SrnLmq9fHwyfPkzg+/T3a7SQae7EXZ0l0oxG1HyINAODhOMvz+Cu/S2baWH83AMAmlP//S/fdCwCwGZ989vlHvf39xx9nWTte7ZxM+klEjE8m/XK99yy+iVE8jUfRifOI/EIZf/Dh/uNIs0I33hpPJ/0ic/zlr1X93p8Rs/zd6ER3df5uVlrIn076W/FiZNF7tlW32olXVue/syI/+q14+82F/neiE799Hc9jFE+iyJ3nf7+bZe/nP55+90WxTZGfNKK/PbtvLm9u8lwAAAAAAAAAAAAAAAAAAAAAAHjYdrIsKcf3zOb3FJeq+TvN89n6TlbrLs/nKfOTulA5HyiPakTPNI+f6vk6j7Isy6sb5/lpvJZ6sQAAAAAAAAAAAAAAAAAAAAAUDr89Gg5Go6cHawnqaQD1z/rvWmdv4cobcTQcNK8uuH37vRanDRS9XntzpGms6bHcFLxQ9LP2ytvzw/00yqA+mLXu9fJ7ZdGj4SCrluqHPBwkN+3Vrg/u5/lSpK34t43lsz+J83z5TNsXrS5ntdb0NFovrVz6O8/z29V594/yjKoryWzExu1236qClR+wCNqXz+KXqwte+ZXRXMsXDwAAAAAAAAAAAAAAAAAAcMn8R78rFo+vTW38Z00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIbN3/9fB+2IWL5yKZhWydfdUwWtODi8548IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8A/AQAA//8EJ08+") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x6) 17:02:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x5452, &(0x7f0000000240)={'geneve1\x00'}) [ 89.186619][ T4505] ------------------------------------------------------ [ 89.186624][ T4505] syz-executor.4/4505 is trying to acquire lock: 17:02:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$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") [ 89.186634][ T4505] ffff88801c27e368 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xae/0x1300 [ 89.186701][ T4505] [ 89.186701][ T4505] but task is already holding lock: [ 89.186706][ T4505] ffffffff8c7fbf78 ((console_sem).lock){....}-{2:2}, at: up+0x19/0x90 [ 89.186752][ T4505] [ 89.186752][ T4505] which lock already depends on the new lock. 17:02:43 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup3(r1, r0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000001c0)="d162f36ad98ce1ad996f9f42f451101347b1b84e4f5d0c318b18ced41c1390a610f7d1a427fb4929a409f0862c93a3226d8dfdbb8810a6fdae0bc18f5525a3c05bb9c3b2a9a3e39b0be2ffbb7c31822aa877b29acf118e0dc81651525f9c279bab9ea9d12aac447e7f7eb0c85c1cfb2122d3a9007d720f26539495edcc5aea0f9ad0b07408f10bceecb7fe27c358ffafe92bbc4a9d9a0b6bf4bbc47972698b00e406987609f660bcad9a43f5d925f8b1c9e0a23a9f0afea6485ec0bc13a483f8b3f536f3c712c443a59ec732969894c16dea66a9d703b7f7b2896ba7a8eb4a0be7d40640d51f0f1c1df41a4c1b709773800cc065607874c8a9cefe5dfec26ff15618c4acd5dc9282da5681f3e05c2898dd4ba24c0c4e8408070bafd98f6fe8ec829b746f144c2b87ff791493d5ad5375cb205c3fccfd0f3d18cb9e724d089e8ce8559c55303561b0ffd4a81125c90aa0ee924411d95033fa6a20ea38c254fdd204630fe53058f275e20683cf63b650b022f20daf46a960233b581bd7a90ad70882cc68b8adb1d2c3bc4aa794e0ab61d5b20f52bdd1e39734b473dfc602c63358b736061db948f640a7802e5bf5bf85a991d876898092275891c440108db3a4abbdb1a4d6e2a7235d302a154d89aadde42633693c6b2dd8b267467c5cc70bae0ce34794b0590a83c93215ff8fffb2eeb09be2babbc3b9741309f3d0481042332e3abbe7e98ff635d60bb1d4ab09f8e8b3c48c70be920c9fac20b7ff41c9a8de0a035b172c569da2af37e66387bd753cbaf46669c1c428bfbce18cdcf538d5e8ad8aa899347533221836847b7fb213eb8c399e6e2579563a0bd350561e49ad1ddb03e1fd1d9dbafecc6a0963de89d3684484bcb25f423c8a7d8eb0db9fe3f45c60a8f49635aa90d2042c2bde476b4c2d45958087f0c954af81cf7ddafdb9846bbd8f75c1fb60b57fa316b32f5cf784f0dcd06ad1d62e4855be56f8d28ef81c5b30473ba9a035c410a7d7418d9d2d88d5c67e67b22149f1ce77f2c517e2a773ba77b5d6a7722e77fbc569656d3fb4c6ba98389f91314b64767885f68f71f88ab3d3b63359c3b2237522ae4ce9a96d09f4fc0fdcf687f48e9c7d35cb6ee84f8df19ca8fb8037d1564f454be7e995da5d694bf46a05ee2f0d945539a28d0b730880248ffba63fe1d444dcb1fcd8f766cf4869ba4b0ef9ade9fbcce635e27942220441a5fd4b43010bd915625543377b7245fb27a52e096b22c206d819e3f24e72bfeadff82cc6ac6ec389f7a344b04d366a288105346333baceead0ca9e2b500ad9169a32d6b7262b05af55778fffc7c4255a50d3869a4c94b0e9c400ecf1b1f557f53fe04f012e21be38c4d9c7364449cd7e2354eaf04996e84cfff21837a804905792e61f5fd31bb58ac19a59f88d08486c8608947955c6abaf39492c6f06e81f72cf3ebd4b7a41a41df8b35285317e3345ac2cbcd955da7c06e7ee5d765d11b4b2aeb3b2d82f17eccda74a18f7922c7117cf1238ec64aa09b78bc744b0a088694c92881a5ef9b3d6c66a38318dbe61b81b0749b769f856e74ed08245e93a99fe8224a2359defe2c0067dbbe0eb722ad6c8ce15bcdd50a1b8f9cc61960cdf5a7c49563ed184a60ed2f9ec3ca1a1688a2cb45049baf0ee6b2aa516d3987d8535e4f4d01a39a99655d2056f4b4a503f3b9612b409584f0e6136d8ffac95d8ace4a0283c4df024554a611bf327df75c41939dbb1f23f923db89f4ce9a079ab2ba0a97572ba8a95811b9a1478de3a8484d54926d81ad6e9b3839c84089b98137df9c6d8e14803f52fd569c16368a524f4f7c4f0dda014eb93d0fffa15cb424ba28caf7a8056cdf29e66815347748b8aff32d8321960d4fbc9fd8edf92bf2cbf6b4ca426ee778466636070721cf807f9775b21a2ec24ba66c26f2b5bbdfaa92a1871356f4e600c6a8d6e78959ab92bb2f22e960d5f1a29292b8c60f5d2eca42f7863c67ec44f4d8d34a0e603e1b5f7706a49a571b35c2d01913b630b9c7a4714a9e8aebbb0f7899bc53347dca1efcaff4dce9e9e40de14e7929221b93a52c58c73437d3c0fff4d595be776992d42e4114af2dfc7ce6b575c4617513a34d61a2de7830319d4ddb8eb00014296f02d50c6e195c92b7aa71dbd4f4f066adf160a8a8e5debe459aed2fc14b832f2fb979b5fd7a25416ab67e35089e0be2ec24f5956194cec04d02da1430d5108c4d4dd0186946f0bd2cf6a46168886b2814660ab348e8f896a1939c0a8167e885079ecb8bac8b4b92b2e82f1da2c0e10a9bc49680de197cef1e0a96f35a7678d230f107fdaa94bb7e19b0b39624409745f84f82f89c4a7e045c011f259411859083febe3365cea7a9691fc3cb1383d5771cb266698f9d49538faceba27b56801ce44ce0706756104b605676182f1ac82175ee6d904994b51c341757c04c953989f751a3e37b7490b4b51cbdd9efb14e043fbc44fc36bc63c3606a0effe6b19113d76d57782b8143854638ecea7562ba7596988aad6fcc58a9a45b450b312225475b62a6749c6256fa0edb1fee05e4b91329e9170484377cb90649c8c389bebfbb255a1c51d6f52289df60fc0dffcac9ef1654e882d273de57e8c5900c732229b2b5f80e42f09d8b66284f022732bb30290ec110035b38f8c9a73327720af96d07312626d5c04a687ac91f5950306a762a2ef515b216758c6373768fed8c8c65dbcd310822ebb9ddafaa5950dbc56d0f7ecc86cab4e830011680e15639f12a8b0746ad21fdef41b76825db4347d97e0c4bfc9edf81f77abd0531611d1eef06a421cd18a99cb332f58b0de6b9fa8902a486b8b194ab79a7ec8d09b9e59123ee118c2f9f335b90d1138ef9233a28139cf25adb7bee9206b66cfe94bec2a94db9e0749483488f7a59a64cb78599be34534db8ec77bb6db8c43617fa03a0b59c7d4e4bf7582a2bb3b223e99fbbbf8d350ec252f8870cfaca1736cfc7baffac0e13f428e1fb6156ac2f0686025aa174f17398d7a41690b728cf5bc0f1057ed362c5ea5fd288870d8d807a53702578301006ec493c36bb886a8f0ab57da3339a2540f6c3680f1d8ef91732b96a27e7f865f7b47a31c7f4411be4507f333653e243bde2170d9802673023d2b40ebffef8fae22526dbed2df0175c30c562bcceadce52404d4cf48c8a26b2e8d6c5f507416f865cac71500135e72147419c2d1c4e0c0e93288566f50a6a1151559ccd750914f9653e3e8608b2f8da24a32be4c5b57e93b9d697cbfc45f82701dd450ac6e1c405db5663021392143f65ea540f55d6536ded350a806b36e24988fb24a7dd9066ea818e084c4460e8277584539ebb964ec622a9b0500f387c0dac7cf8a4a5650ec8999ac17ca8c112f4d8aae14765e29726baf43a4a9b3d197fc95a9c10f374b81be91448e99d0b34fa3980ad48e8f1fecfc201a34888928d9d08ea2669a13364ef300d185081eff2d76f1b7f0a246b2a9faa6a72400af4ee974a78ce355d969d73d6f0d82d9b6d9038ed79f7262209e267e9664cf2b2fe4a8fd709e4cc0cff08347c6f3252b6a30fa3266c5d55d283cdc55219ed7972fcefb4c0e1aaecf8d1bb0b7d5faf401bdd4a6b27e236f2f76623a000bbeb5073e804a0325a7e7f2caf237aefb665775de3c0b53c333e6229b5f86837a86f0caed6c509ba73c11df9dee907f4a5e6af3bd4eeced682a51a48f17e8866a12d3ba7e5320ba67ea78db6cf3331110e15aef215eee90c312bbb4de32eff3d3e1e09fc232ac94180308b05aa45e4ef976bf5b843f15f87b35e4cc68fe20667e06c631540cd68e3c94c5cc61e00c112ba98a04352b9c45cd0951615bf576918220879a72e1f096d6166207f25deb3775e8112f723c43a584b8e3d18c06c87c3b9895f2b28ee1a8c6d9f6f664210dea125ad087b2d7d453554ad2866324fff07e46e4fe1afba325c8084355e488b724f93d1d1ca8ed1303404180ecf3c8fad127af7b1b75c011d2f26a225ebf25858c6dc9909509b443575a5074d1ceaf163b82cbaf20174a6b98c022835b3893c4504a8f8703296081c5b4690dd5c05dd7c207a0ceba995e6302473501a236dfad3c6953725fe90bf66aec2537d433562fd07a8ca01e4fa4ce0b6514bf2ad11f8fa559030319c105290a3a59f866169182319fa27c72caa9d7a4abc6b3bdd3d7a7384602cb0d40d7832fd4767f7f314d4236ad31a97d8bf60663145854a8b2477e0f3d9aeb14aba22e7b44eb8dc03164c99a7b1a91c4010a38d94f45c71b1c0ec459c0ca3166a6013179b39a678615501d2d0547e259b08ba863f5bce4e5bcb11800c2034f02fe477195ddb9aa8a078e835ecb1d3ecd6a9262ba9024975a56cb0669dfa98931f4784fe87265cd42fde5a41bf03cf4bf79b1b1b3f5a71143c252f6dd2fa8f61950117cd15d9680ac9715e9e5ee2226b6d225ad90e063399bf07114adbdfca28b8e4011e225b665780570e0b9fa1f5bb1df340f1b12d31802c66a042a37d1017f5b5af8923e4c365a8957a2092c4acef18612a1d0464b389554a610cd9009953ac0b79640cefc6a42d5bc5d114b1abd49616091eb1a4c52eb73645e52180721cadc7986c976d00d32daa13a52f11d3aae475736467f4d9be7648fb2c3113a7615041602b40f3412301a3c74435f87fb86727d906d0d7867c866216249d6904b18854cd1766c471d3fda32429a21499dc2e3eedd47ac3fc09ce7f3c5f946dc4cb109ae38e77374f523611e484202759c3bbfd62116c1685c31640ad0b675c0c4a6974e0507fec72d7567c243752413a61014f43745daa1eb64344f39e2230c3fcfa4e528edd2614f2c64ea433c5d3817174c9f13044c4814249e8afd4d828ab56465238b6a6c86a5e7b1dda687f5e6f118cac6f3b8b5c2a76fed4da8ed99b34ef75108d7553a5420f9f32c69186d5ec32f9824b9de76d09ea02283f8c765be79a65557cb7e1051208542a234d9dfb926706fab85ecde35fade516a469456f537fbb47061709f77b3b278e7c151658ead40bedbbaad7ac3f2e507c175bb452a953b5df6ac64e48cf89816a9580f7a800ed60e8bb0e6cec0f0cf8759427f340d5e4964126a223339fff201b08e4013d7a14dbb4288872d3a8f11322678090c33dc433df04fd4b129ee71818137d6fd581a753240b1fbc3e3ade92680c305787416a458858915fe852bf3f2b7ae05ff61d9a96207a0b81169bca6f86a5422e6e66a0c909c878569198a110a42a6ed8a764a2f1617d781117eca673aa8bbd52feb00422a4698514f356e3f85d7339610c06a201cff98b8b973ef116a07d926140fea516fa907de94db48a411023cf2e7c06f59db6573dd522853e7f046cd6cabe03882cb673dc338158f8335f47472df24e6bd0d5540a8bbd80d075889b4525afbc86df7551c88aae506c7a264d3c0d50274f69cefe1c6b136786bfc75fb70179c4bea50955526b6dbf3cb71c1ac339d6ebba5a19b59e96fce216482b3739f7b8aeda564bdf698bc3f6aa94ea669d79007b94ec0cd5e5d4d18f25593e4ca0e6648709fc203b61e42e023881c691ae54e1636fa9336cd3654bf2213e7b8b0f4e24c12e2589aee132c078d1dc540ac5798822129e2b1b249edc64bee1cdbf81cae4f1de27e1b1ed5493ef3322a7d1de0e9d5fc1437618c72f23a9aa28fbfb956a24f8f0e0645ec6a1a08a054fcad43365f2b2737f182ad5326a900e62e0e50be7d9d25d57c67cfe064f71005c596cdc2539df90348bf1ff385e0847dd1dde20d262d1c38c5e5ab7afddcd10133c1a121b11e2a6191b03392594986284a9a2c387e4ea9c94e676df218d2bcba0e314eda293e0dba96d581335cb1b94535b8560229d46a6f15020bf8612280994b4405d92e28caab811e6b715bae25716ac361ae02254317456d3242ea45b108feebf3458f751f7f2b72e984df33b0aae25fe94ff2ad609b0dfd59006f54b223c375f9c4cc839acd24e1221c4ebc18bf433d49b98a74c65e1a32856373dc38cc7054b2f675c9c54f222f16e1b8f6281ab2ed829654007a559ac1768bf81d2e8d593dc4b9b77cf9f216a7fefed4d6af98be51d0291cca38b7d37808176db1bb0b29d5fcdb35c8cc3bec54e9e05f2e5f4aad806cfdae53df234ae1106e29f41f0a540474f2ce904d39375e9d64eeedee3c080de8b6319c6f9a0a988fc86da1ed982a878d13f9eda7852ec245bf1b6cbaac01dc9ef9bb62c0d821d399ba48eb35ef39aa2a35260f9277c456abc7d16f2ad923ff965fd5f696c2019da715566175c7d63d8437b1761cdf062734e47963b1ae7dfa5b0be1da5f70148099a05fd2fe226c8e9387bead53013666e7c9cf90b834d73714744eb929fe8b1b79de5bb8656666ac14dac144c3872c798fd37c6532cbb03a62183fe6698753d84e59c2dc7e4584ccd2d1ad8bfb0d8c67f7cb4b1a3015450a32a705ca5e528c05bb2b0562f374d86ba868ac3ef41a6885c2f6deb8a0d7e622f2ab2a52aa4a560b29321f526089c7cb6156d3ab671785d65402a9c396afc90e5a17425e9f547e24c8b76d8e41eae94c4448e259d3601db8ecb5726e881ca67a450bb11ec324ecfea2a9b62b717f43cf9ff197b465099741c71f9acd6906cd1cb851634348585c70d1a9a4a3705e9bc521487d005728723530005edd8ac062027502855b406a4773194cb7351ec0e0ccd5854aee95f54696b4f551191734dac290bc5b281c6804425f48ec502a0379dc11439d1965aa1cf68cd58c8129cf2ac85b17ff045c08f55fbc7a192d6e30b7a47ff28d5e6594f93d5d2d8c738661a46d1cc57e0d26080be5686620fd3df48a3ecefe2b9f978333ae2109e71e2236b1222433dc739c0e4deee936d21685102b98186774f0a2cc7a6dece229486d13774962b5564d0101d8fc624c20d850f0ec8ec712933c50b6fb7d229d8e1c26003bba7661121a10a6d925d05a672e79b1f1a3567ad37d5aaf78d6df01d816751f00afcc4d4577d7afeba8b0f013bad7bd0b410e86e2b07c7fb6fad4bf9692df796b847b52e4ed9b62c101fe9ea24c75b447ef166ff02de06f2c8c3334b871e11f9c7ec690e70bc7b7c9e050fce1860851df05f8b7cbee9fe1bfb00a30b7162a4e03103ce73a33db6648c40ce3370249000daeff0c8e1ce4622f294335ddcbdceb2a13b061cdedcf7a1592debc008a95f2ef37f5da72d10f5d6ff2ae38f7d932142c9fb21db8549d239fad8d7dc14c8488e3c6fce5779ffac888ddc2659b04e2364b8eb1574dde77f6a5c9c6afbea88df1df4a1a1041525b8d69cfc8ad6651ed95fa1f36ccdcf28edcbbb6a827ff8191ff6ce422239f0635792c9c1bae12070660d4e34e80cd7ec8b0baa208fe5439a03deb6105a0f9ac8e5c863faa5ab3aa69a1cb655851e48105fba37fb2424ed77cc8c6afcc5dabb84eb81badb7710c2b681c2f8dfac78db352cd6dcf36ea5f2af124ef3b705d444d145ff890ffebc94a8cd56d97565cfa1346fb519159aed32874c5132458bae7915b4d9c79c56bc1c1c3ab0383b08568ce872bd64876fb6afb8bbcb8ff98fa5062e31510c9872fd618bf6fb580f451028f3a13a0ce3b9a8822dcabf13de250361effba192c8219ffeb1cae503eddfcead3a8ef274457db930a3599dbca813fb6b372703302f752224509325ffb0f991e685a6772d236e8aaa44578d4c91e616b7475c18bdcbf8f4622b842219017ff963b15826816d2eec5981832f8ec4ac3706f4a431ea7853146c14c17864d175cedfaae6659e88ccb32049a56309278ec8d34370078c61c405f75d8b8823c10df78bc5f27deec071e9f86dd59bf8608ce45e763caa34cd10e00d549f1d4bb89b5d41cfc0007a98013a6a10897177c1d380d7793fcf52650ef41b2a1e0498e763da882f41c4f9a1767b736760a9b19f2a1b3493db4b7097d2f6c4c1b283b7e9080051719adf561c569b5de699e75ae37bf3fa170fac3aafff3b1b270e0bc2d251c831185477f260fba1c48eb2a5d504b6b18ce36d8186b7a35a66ff560ad8b2c4e2d852d880311bff7ddb737f86954d6826b2dc6c95a210a2dc1ddb8721887e6d6b60998156e185a81dccaaa9b081e768f9f90049d5f2a7b6ef3a7ce63c1aa4498a1e865f00ce45744d9d3b22c62a15e59ae498718362196f21c209a9575665f55de1b11f3b621ed1cc2f074449da560afe5ad358bc4f99a1a26a6e6b13d0d06d54c0e981e6dac4b2548a0123453da5c83626279833fb20334bd0f43d4fd70cd01ba1272377ba8699ec6bd7b688f16ec22f5f63b10c9070b24921f53a69896e180550516ab83edf3dd595e710a63abdbd4cd1a77123ef54d8fb342b4d735cb0a32d3859dc28b1c59d21b2578830414e70caede5f21c04491d17bdff3efad0dd6b33a9ffa0c218f66e430322cae5f46867cb0109a3e518b4195109d27ed785da5d811a640669895bb934f9e89a9b0fbd71cf5b5c4b241f132596cf979fbdae61a616348802be2b7050e782841a92e42e9fa4b145899f204367989e2061128723a7cc109b1faea6c09409662986e5e93c8cbca54dc9ccf76b0343e7a3296d5b4a5f6ebfb309da197e860b23ed8df9d88d177459751b6c5f2dd91e795b898826b374a7d10c9d26ccb7d353858657367765c5b36f212ebfd98e8c8139e76fea4a0f565de541e19fcd125abaa7079122ca0642767b8cfbaf755fcf4b2a25045c6ed61aff0ca1a7fbbbf09f331bcdacb53530417a9678293e9dc0b9a85bd05c2127b518f8fa3faaebbd8ac4808f2ea8f099faf89fc7853b2169ebed3314c5a672cefc68c94cabe909f17f4f774793b9c9bb01de47a82a0041197886c46c07e45d7d5175a2d7afd43d851ab4ea15823d64c25523330992099975cecac7e6e89ee345a90177f789c5cabb1fb1431c0db6f66fef4a6a987d30b1bf59acb1e4fd4b0f5456a7ed562694bb529f78dfee9163bb54c444487ef9990c71d05db0781a19989e1207260ab875e9a1d36b7659ac21a3ae0c4e593052900f302be9a56d2eddbdac6cc3b7647e5c90cebb4aab888e314a40450db1213e0e21397ec4b519021b6203376b13500d73c66427b4594c4d7a3202270c312694d5a31bef3c6027490d83c2155be291c9efd3b527ad258012595d8ff9d4786cab4c4b5c7fd3f685b998225ea1f058e1324d7a00a7b1732a256be1307c493a70cdcfc86eda7a83929507168a5e2f16a17452c206a6aa492be43825abfe2c6398c9bbd886922272d9548d0e422d98dd22aa64128fe411ddeaa1ce835bbd741271ab6eee7ec470cb158ae54cd0bd7064ceaed6ba1d688ea69a7f984accd615f339915aa3ce782648778e4f022cfada78c071b7b47cd2c7e04492acfdc73dc6c87b9447962d196bf9a6babea8d755c85ef45ff146cfd4355fcee414c6fa292969053e4b43fbd1ff325eb1fb8c949fb3bd643b18279fbf79f892970bf3ff1abbc4886b79d2f44d462da4d5d590e576cedd4dc3cb926aff42c1f68e8f74f987c8bb13c089b95241a8e71cfffca35cd647c9ba4e4b096db72a7afe16dc523891187bd5ecd1c2c9cfe2dba82e81dab74b7b55dc28b97bb8fe0d96414f4a4c56cbd8c59ecab2e082c05ef62978056fdac4f716a333b579634b22a191724517094abd60526dcbddfe6d17369381148d8fb476b0ce5ab5606dbe4bb85edf44904ebf05189eceeff032a43ceaae8edd05ac4278fda30ddedfce73524bdaa4f30167402dd41aca0b2d83479aaec8d375f296c8a5be52415f02b5ee6c78076db11e9821b050cc3501a0907c861a4d19f3791da2167f9fa9f99de374a1edc3b27d4040d8d822b6fd4789f7fd6ff202ac3f9a160640b67cfe552ba65fc3afc9c68983ad23d00f3fddc2fbbe4494aff0c44c3be1bd4f3d3960514864aced31754e3a3cf85a877907b87f7488227c338d0988ef99a3a4688959b345ea7e293f29226093f1b37ca1fab1cbd56af56e34ef4ed31c51a2be7a8f7eae78183ff5ef1872d58559bf3d53c1ef8f11f93731a86b29a493b909939ea2afd7cc85bfe0315c0f624509d8fef77e8e23143ad841de4d65f5cefe6dd5a69cf190e696dced58dee6b478f3c8a601c75ee65571e0e63b9057b3452f002d508e8eec9b01951575409766d1a00aeb2769c12fcdd726b971f2ecaa91dc08867effa2ff1f192f132099d564b04f33a54000fa5db80619cd196c12c49a4b1b41a8a46eb1c46cbfddb484afa9f6d7dccecc4ac494823502596a5a887f50d96582d45f212492cfe3946394058b36650b26446b74b45d2a53df4be360cacedcac17fba41fd01f23f21b1eda890d87fa45683cd3f32ca78330abce050eb3460ac090ca65b64436c4adb754b37ec3cc941a6dc23b193800b9b11702df0526226b9178e7920cf8ecd913b23fcf478bdd34d185798b7462a19c689b986fedda2990852edb103809dc12487e832d97b24c9ad72364714fd213b6f5d306d0d4469f3deaef59458cd859a0949287bde56ecc8fec607fce5a6ceb0828cbb9066524f68626cba9821f319d8c12ef0851478ce950d111254def9321c34619b1af66eb00f2c821485defca1c3b6855a7ce6f143bea68ff6c72bf9c450bf76ea6880a9230bf8d8b210d99c75a70a18a60c81ba7077289c65f0960d1b50f560de17d978ea8d87b7ac5ee650297d1dc3192fe60b11ba7b4decee8fba9d80c93e42dbb0a23138e4b0bd53b391ec30746d075948e826079dadfc0a838b2027b695db8290faab589e34797229c519cbda6f29c5119421e8ce31a70a01181711f45573f3958271570e94a1ec33eca5d2fb5a7c4bac081dbdd0d37298cdc0d74c1707d5dd1f0a403ef5941b2e31fb7fa43acd4eb89a669a04e6b4ea138c49ec180e24cfdb1528927d6138b032f9626e29ae86a27b868ba3ecf851e4a37a5336c75cdf12c7e47168b572677ae16dec639fea0aee8a863efeec9a8d9f8a744453bfd21a3f5ff81a4433c07c97dfb5f4a9dea216cbf3deedc424baab4f4f23d67ae712a238d5d62bd73100908c5f2088ffae4127697c6d247cddc7dcb8bb03c2d18b19ef5ada5c2fafc26f95d732daab00697ea4878cd54f10ae05d074699cfbb53c550b13b0e13ef6bc60cbf2ef1cccb81f61fcce1cdb4360fb0a027b30bd6e97bf08ce2e60d2be82eca94dece908020a5732a5421c836e0116ad9161e01efe65d8ddb83bcc37e168cac7dd7acdfd102d21288d530cca5bd482e5d1b7ccc1b1071bb6aafb3f0afd8c541c752e0be31a177e533121c353d2fbdf96b9d06878247c35b2680ca1592924ac3fe502e72317155a4e4511ec42083b1528a9ae8fdf8e28d2fd1b77fbceef31dd9a9021f758f9de5d08fa951eb6e4e343fac8787d8583a42b6a5da732452e562691744371423caf3b1603274c4da5c0e54212e56a5952a4340fdc4260ea1d34a860dc6296b8a4858811736b41cc9fee5652655c032c9efbbfdf680d0736f95b0887b7e04e0611a3bf54fc18956a52b51e59c5bb89fd381cad7f4013a794c5d1e8b3b7616181e7ecb48322fe146be378fd39963c7ba3a583d4967481f3bfb5a6e6c66be415720a2eda46e41284b5", 0x2000, &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 89.186752][ T4505] [ 89.186757][ T4505] [ 89.186757][ T4505] the existing dependency chain (in reverse order) is: [ 89.186762][ T4505] [ 89.186762][ T4505] -> #3 ((console_sem).lock){....}-{2:2}: [ 89.186789][ T4505] lock_acquire+0x1db/0x4f0 [ 89.186807][ T4505] _raw_spin_lock_irqsave+0xd1/0x120 [ 89.186827][ T4505] down_trylock+0x1c/0xa0 [ 89.186845][ T4505] __down_trylock_console_sem+0x105/0x250 [ 89.186864][ T4505] console_trylock_spinning+0x8a/0x3f0 17:02:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) [ 89.186882][ T4505] vprintk_emit+0xa6/0x150 [ 89.186898][ T4505] _printk+0xd1/0x111 [ 89.186915][ T4505] debug_objects_oom+0xb4/0x370 [ 89.186935][ T4505] debug_object_activate+0x42d/0x4e0 [ 89.186954][ T4505] kvfree_call_rcu+0xb6/0x8a0 [ 89.186972][ T4505] trie_update_elem+0x808/0xc00 [ 89.186991][ T4505] bpf_map_update_value+0x5d7/0x6c0 [ 89.187012][ T4505] generic_map_update_batch+0x54d/0x8b0 [ 89.187031][ T4505] bpf_map_do_batch+0x4d0/0x620 [ 89.187051][ T4505] __sys_bpf+0x55c/0x670 [ 89.187069][ T4505] __x64_sys_bpf+0x78/0x90 [ 89.187088][ T4505] do_syscall_64+0x3d/0xb0 [ 89.187107][ T4505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.187128][ T4505] [ 89.187128][ T4505] -> #2 (&trie->lock){....}-{2:2}: [ 89.187151][ T4505] lock_acquire+0x1db/0x4f0 [ 89.187167][ T4505] _raw_spin_lock_irqsave+0xd1/0x120 [ 89.187185][ T4505] trie_delete_elem+0x90/0x690 [ 89.187204][ T4505] 0xffffffffa0028dfd [ 89.187216][ T4505] bpf_trace_run3+0x1d1/0x380 [ 89.187232][ T4505] __traceiter_sched_switch+0x7d/0xb0 [ 89.187250][ T4505] __schedule+0x1e8d/0x45b0 [ 89.187270][ T4505] schedule+0x11b/0x1f0 [ 89.187290][ T4505] do_nanosleep+0x1bc/0x7b0 [ 89.187306][ T4505] hrtimer_nanosleep+0x24d/0x490 [ 89.187332][ T4505] __se_sys_clock_nanosleep+0x323/0x3b0 [ 89.187355][ T4505] do_syscall_64+0x3d/0xb0 [ 89.187375][ T4505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.187396][ T4505] [ 89.187396][ T4505] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 89.187422][ T4505] lock_acquire+0x1db/0x4f0 [ 89.187437][ T4505] _raw_spin_lock_nested+0x2d/0x40 [ 89.187456][ T4505] raw_spin_rq_lock_nested+0x26/0x140 [ 89.187477][ T4505] task_fork_fair+0x5d/0x350 [ 89.187494][ T4505] sched_cgroup_fork+0x2d3/0x330 [ 89.187513][ T4505] copy_process+0x224a/0x3ef0 [ 89.187531][ T4505] kernel_clone+0x210/0x960 [ 89.187547][ T4505] kernel_thread+0x168/0x1e0 17:02:43 executing program 1: syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@nodecompose}, {}, {@nobarrier}, {@nobarrier}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}, {@nls={'nls', 0x3d, 'ascii'}}]}, 0x1, 0x62a, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) [ 89.187565][ T4505] rest_init+0x21/0x330 [ 89.187582][ T4505] start_kernel+0x48c/0x535 [ 89.187601][ T4505] secondary_startup_64_no_verify+0xb1/0xbb [ 89.187623][ T4505] [ 89.187623][ T4505] -> #0 (&p->pi_lock){-.-.}-{2:2}: [ 89.187648][ T4505] validate_chain+0x1649/0x5930 [ 89.187666][ T4505] __lock_acquire+0x1295/0x1ff0 [ 89.187683][ T4505] lock_acquire+0x1db/0x4f0 [ 89.187699][ T4505] _raw_spin_lock_irqsave+0xd1/0x120 [ 89.187719][ T4505] try_to_wake_up+0xae/0x1300 [ 89.187739][ T4505] up+0x6e/0x90 [ 89.187757][ T4505] __up_console_sem+0x11a/0x1e0 [ 89.187774][ T4505] console_unlock+0x1145/0x12b0 [ 89.187792][ T4505] vprintk_emit+0xbf/0x150 [ 89.187810][ T4505] _printk+0xd1/0x111 [ 89.187827][ T4505] submit_bio_checks+0x10b1/0x1940 [ 89.187855][ T4505] __submit_bio+0x5a1/0x850 [ 89.187874][ T4505] submit_bio_noacct+0x955/0xb30 [ 89.187893][ T4505] submit_bio+0x2dd/0x560 [ 89.187911][ T4505] block_read_full_page+0x93b/0xde0 [ 89.187932][ T4505] do_read_cache_page+0x752/0x1040 [ 89.187952][ T4505] hfsplus_block_allocate+0xfa/0x8d0 [ 89.187971][ T4505] hfsplus_file_extend+0xa4c/0x1b10 [ 89.187993][ T4505] hfsplus_get_block+0x402/0x14e0 [ 89.188014][ T4505] __block_write_begin_int+0x60b/0x1650 [ 89.188035][ T4505] cont_write_begin+0x5d6/0x840 [ 89.188054][ T4505] hfsplus_write_begin+0x92/0xd0 [ 89.188074][ T4505] cont_write_begin+0x654/0x840 [ 89.188095][ T4505] hfsplus_write_begin+0x92/0xd0 [ 89.188115][ T4505] generic_cont_expand_simple+0x144/0x230 [ 89.188136][ T4505] hfsplus_setattr+0x169/0x280 [ 89.188157][ T4505] notify_change+0xc6d/0xf50 [ 89.188175][ T4505] do_truncate+0x21c/0x300 [ 89.188191][ T4505] do_sys_ftruncate+0x2eb/0x390 [ 89.188207][ T4505] do_syscall_64+0x3d/0xb0 [ 89.188228][ T4505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.188250][ T4505] [ 89.188250][ T4505] other info that might help us debug this: [ 89.188250][ T4505] [ 89.188255][ T4505] Chain exists of: [ 89.188255][ T4505] &p->pi_lock --> &trie->lock --> (console_sem).lock [ 89.188255][ T4505] [ 89.188285][ T4505] Possible unsafe locking scenario: [ 89.188285][ T4505] [ 89.188289][ T4505] CPU0 CPU1 [ 89.188294][ T4505] ---- ---- [ 89.188298][ T4505] lock((console_sem).lock); [ 89.188309][ T4505] lock(&trie->lock); [ 89.188321][ T4505] lock((console_sem).lock); [ 89.188341][ T4505] lock(&p->pi_lock); [ 89.188352][ T4505] [ 89.188352][ T4505] *** DEADLOCK *** [ 89.188352][ T4505] [ 89.188356][ T4505] 5 locks held by syz-executor.4/4505: [ 89.188368][ T4505] #0: ffff88806020a460 (sb_writers#17){.+.+}-{0:0}, at: do_sys_ftruncate+0x25a/0x390 [ 89.188419][ T4505] #1: ffff8880770809c0 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 89.188468][ T4505] #2: ffff8880770807c8 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 89.188517][ T4505] #3: ffff8880757668f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x8a/0x8d0 [ 89.188563][ T4505] #4: ffffffff8c7fbf78 ((console_sem).lock){....}-{2:2}, at: up+0x19/0x90 [ 89.188610][ T4505] [ 89.188610][ T4505] stack backtrace: [ 89.188615][ T4505] CPU: 1 PID: 4505 Comm: syz-executor.4 Not tainted 5.15.153-syzkaller #0 [ 89.188635][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 89.188646][ T4505] Call Trace: [ 89.188653][ T4505] [ 89.188659][ T4505] dump_stack_lvl+0x1e3/0x2cb [ 89.188685][ T4505] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 89.188713][ T4505] ? print_circular_bug+0x12b/0x1a0 [ 89.188735][ T4505] check_noncircular+0x2f8/0x3b0 [ 89.188755][ T4505] ? read_lock_is_recursive+0x10/0x10 [ 89.188776][ T4505] ? add_chain_block+0x850/0x850 [ 89.188796][ T4505] ? lockdep_lock+0x11f/0x2a0 [ 89.188823][ T4505] ? lockdep_unlock+0x166/0x300 [ 89.188871][ T4505] validate_chain+0x1649/0x5930 [ 89.188892][ T4505] ? hlock_conflict+0x53/0x1f0 [ 89.188913][ T4505] ? __bfs+0x359/0x6e0 [ 89.188939][ T4505] ? reacquire_held_locks+0x660/0x660 [ 89.188958][ T4505] ? validate_chain+0x112/0x5930 [ 89.188976][ T4505] ? stack_trace_snprint+0xe0/0xe0 [ 89.189001][ T4505] ? lockdep_lock+0x2a0/0x2a0 [ 89.189027][ T4505] ? mark_lock+0x98/0x340 [ 89.189046][ T4505] __lock_acquire+0x1295/0x1ff0 [ 89.189072][ T4505] lock_acquire+0x1db/0x4f0 [ 89.189090][ T4505] ? try_to_wake_up+0xae/0x1300 [ 89.189113][ T4505] ? mark_lock+0x98/0x340 [ 89.189132][ T4505] ? read_lock_is_recursive+0x10/0x10 [ 89.189150][ T4505] ? __lock_acquire+0x1295/0x1ff0 [ 89.189178][ T4505] _raw_spin_lock_irqsave+0xd1/0x120 [ 89.189199][ T4505] ? try_to_wake_up+0xae/0x1300 [ 89.189220][ T4505] ? _raw_spin_lock+0x40/0x40 [ 89.189241][ T4505] ? read_lock_is_recursive+0x10/0x10 [ 89.189260][ T4505] ? do_raw_spin_lock+0x14a/0x370 [ 89.189282][ T4505] try_to_wake_up+0xae/0x1300 [ 89.189305][ T4505] ? __rwlock_init+0x140/0x140 [ 89.189334][ T4505] ? mark_lock+0x98/0x340 [ 89.189353][ T4505] ? try_invoke_on_locked_down_task+0x450/0x450 [ 89.189379][ T4505] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 89.189401][ T4505] ? _raw_spin_lock+0x40/0x40 [ 89.189423][ T4505] ? __up+0x3c/0x150 [ 89.189441][ T4505] up+0x6e/0x90 [ 89.189462][ T4505] __up_console_sem+0x11a/0x1e0 [ 89.189483][ T4505] ? console_lock+0x70/0x70 [ 89.189501][ T4505] ? prb_final_commit+0x20/0x20 [ 89.189522][ T4505] ? console_unlock+0xe50/0x12b0 [ 89.189543][ T4505] ? vprintk_emit+0xbf/0x150 [ 89.189561][ T4505] console_unlock+0x1145/0x12b0 [ 89.189585][ T4505] ? console_trylock_spinning+0x3f0/0x3f0 [ 89.189607][ T4505] ? __down_trylock_console_sem+0x1f2/0x250 [ 89.189629][ T4505] ? vprintk_emit+0xa6/0x150 [ 89.189648][ T4505] ? printk_parse_prefix+0x2c0/0x2c0 [ 89.189667][ T4505] ? vprintk_emit+0xa6/0x150 [ 89.189685][ T4505] ? console_trylock+0x70/0x70 [ 89.189705][ T4505] ? string+0x26a/0x2b0 [ 89.189725][ T4505] ? widen_string+0x3a/0x310 [ 89.189749][ T4505] ? vprintk_emit+0x150/0x150 [ 89.189770][ T4505] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 89.189792][ T4505] ? _raw_spin_unlock+0x40/0x40 [ 89.189814][ T4505] vprintk_emit+0xbf/0x150 [ 89.189834][ T4505] _printk+0xd1/0x111 [ 89.189853][ T4505] ? vscnprintf+0x80/0x80 [ 89.189873][ T4505] ? vsnprintf+0x191/0x1c70 [ 89.189893][ T4505] ? panic+0x84d/0x84d [ 89.189915][ T4505] ? bdevname+0xfb/0x180 [ 89.189933][ T4505] submit_bio_checks+0x10b1/0x1940 [ 89.189960][ T4505] ? __submit_bio+0x850/0x850 [ 89.189979][ T4505] ? hfsplus_write_begin+0x92/0xd0 [ 89.190005][ T4505] ? blk_try_enter_queue+0x38e/0x4e0 [ 89.190028][ T4505] __submit_bio+0x5a1/0x850 [ 89.190053][ T4505] ? rcu_lock_release+0x20/0x20 [ 89.190083][ T4505] submit_bio_noacct+0x955/0xb30 [ 89.190104][ T4505] ? rcu_lock_release+0x5/0x20 [ 89.190127][ T4505] ? rcu_lock_release+0x5/0x20 [ 89.190152][ T4505] ? blk_put_request+0x20/0x20 [ 89.190176][ T4505] ? __bio_add_page+0x30f/0x510 [ 89.190203][ T4505] ? bio_add_page+0x2b3/0x450 [ 89.190226][ T4505] submit_bio+0x2dd/0x560 [ 89.190249][ T4505] ? submit_bio_noacct+0xb30/0xb30 [ 89.190275][ T4505] block_read_full_page+0x93b/0xde0 [ 89.190303][ T4505] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 89.190335][ T4505] ? block_is_partially_uptodate+0x2c0/0x2c0 [ 89.190376][ T4505] ? hfsplus_writepage+0x30/0x30 [ 89.190399][ T4505] do_read_cache_page+0x752/0x1040 [ 89.190423][ T4505] hfsplus_block_allocate+0xfa/0x8d0 [ 89.190445][ T4505] ? is_dynamic_key+0x1f0/0x1f0 [ 89.190465][ T4505] hfsplus_file_extend+0xa4c/0x1b10 [ 89.190492][ T4505] ? hfsplus_get_block+0x14e0/0x14e0 [ 89.190518][ T4505] ? lockdep_softirqs_off+0x420/0x420 [ 89.190542][ T4505] hfsplus_get_block+0x402/0x14e0 [ 89.190570][ T4505] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 89.190593][ T4505] ? do_raw_spin_unlock+0x137/0x8b0 [ 89.190612][ T4505] ? create_empty_buffers+0x5c0/0x6d0 [ 89.190637][ T4505] ? create_page_buffers+0x24b/0x330 [ 89.190660][ T4505] __block_write_begin_int+0x60b/0x1650 [ 89.190690][ T4505] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 89.190713][ T4505] ? page_zero_new_buffers+0x510/0x510 [ 89.190734][ T4505] ? validate_chain+0x13bd/0x5930 [ 89.190755][ T4505] ? wait_for_stable_page+0xe2/0x110 [ 89.190777][ T4505] cont_write_begin+0x5d6/0x840 [ 89.190804][ T4505] ? generic_cont_expand_simple+0x230/0x230 [ 89.190832][ T4505] hfsplus_write_begin+0x92/0xd0 [ 89.190853][ T4505] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 89.190879][ T4505] cont_write_begin+0x654/0x840 [ 89.190905][ T4505] ? generic_cont_expand_simple+0x230/0x230 [ 89.190928][ T4505] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 89.190949][ T4505] ? lockdep_hardirqs_on+0x94/0x130 [ 89.190969][ T4505] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 89.190992][ T4505] hfsplus_write_begin+0x92/0xd0 [ 89.191013][ T4505] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 89.191038][ T4505] generic_cont_expand_simple+0x144/0x230 [ 89.191062][ T4505] ? submit_bh+0x30/0x30 [ 89.191081][ T4505] ? setattr_prepare+0x1f7/0xe30 [ 89.191102][ T4505] ? atime_needs_update+0x7b0/0x7b0 [ 89.191123][ T4505] hfsplus_setattr+0x169/0x280 [ 89.191145][ T4505] ? hfsplus_write_failed+0x90/0x90 [ 89.191168][ T4505] notify_change+0xc6d/0xf50 [ 89.191192][ T4505] do_truncate+0x21c/0x300 [ 89.191212][ T4505] ? rcu_lock_release+0x20/0x20 [ 89.191236][ T4505] ? bpf_lsm_path_truncate+0x5/0x10 [ 89.191258][ T4505] do_sys_ftruncate+0x2eb/0x390 [ 89.191280][ T4505] do_syscall_64+0x3d/0xb0 [ 89.191302][ T4505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.191330][ T4505] RIP: 0033:0x7f4ca0504e69 [ 89.191347][ T4505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.191364][ T4505] RSP: 002b:00007f4c9ea770c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 89.191384][ T4505] RAX: ffffffffffffffda RBX: 00007f4ca0632f80 RCX: 00007f4ca0504e69 [ 89.191399][ T4505] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000004 [ 89.191410][ T4505] RBP: 00007f4ca055147a R08: 0000000000000000 R09: 0000000000000000 [ 89.191422][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.191433][ T4505] R13: 000000000000000b R14: 00007f4ca0632f80 R15: 00007ffe3378c6b8 [ 89.191452][ T4505] [ 89.246454][ T4505] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 89.246530][ T4505] attempt to access beyond end of device [ 89.246530][ T4505] loop4: rw=0, want=201326594, limit=1024 [ 89.246550][ T4505] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 89.393351][ T4530] loop1: detected capacity change from 0 to 256 [ 89.439826][ T4533] loop3: detected capacity change from 0 to 256 [ 89.453307][ T4521] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability 17:02:44 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x1098c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) 17:02:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f0000000200)='\\\xa5\xafx\xe6\x04', 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) [ 89.499766][ T4537] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 89.525439][ T4521] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 17:02:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 17:02:44 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) 17:02:44 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x0, 0x0, {r0}}, 0x20) 17:02:44 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) rt_sigreturn() utime(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000ec0)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() openat$cgroup_ro(r0, &(0x7f0000000340)='memory.numa_stat\x00', 0x26e1, 0x0) write$P9_RCLUNK(r3, &(0x7f0000000300)={0x7}, 0x7) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) rename(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00') clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000500)={{}, {r4, r5+60000000}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) dup2(r0, r3) [ 90.870316][ T4544] loop1: detected capacity change from 0 to 1024 17:02:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) 17:02:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$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") 17:02:44 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x80045113) [ 90.946304][ T26] audit: type=1800 audit(1712336564.893:4): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1944 res=0 errno=0 17:02:44 executing program 1: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 17:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000024000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="c74424000f000000c744240272000000c7442406000000000f011c240f01cb0f01c566b835000f00d036f30f090f01c964bf0000000080e92e0f0158000f009307000000", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 91.011057][ T4558] loop0: detected capacity change from 0 to 256 17:02:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) 17:02:45 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x88341, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0x5450, 0x0) 17:02:45 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) [ 91.111846][ T4553] Zero length message leads to an empty skb 17:02:45 executing program 3: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0xffffff46) r4 = dup3(r3, r2, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ec0)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000002c0)={0x30}, 0x30) sendto$inet_nvme_pdu(r4, &(0x7f0000000780)=@cmd={{}, {@auth_receive={0x7f, 0x0, 0x0, 0x6, "527ec17ea795fabaafa20b647cfded07f5878a", @sgl, 0x0, 0x0, 0x0, 0x0, 0x0, "1a0d51bd346f5b5f6c4ad0af2989a980"}}}, 0x80, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) [ 91.161345][ T4566] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.193771][ T4566] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 17:02:45 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000300)='./bus\x00', 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x1008, 0x0, 0x0) rt_sigreturn() syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2001040, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80485, 0x0) msgctl$IPC_RMID(r1, 0x0) 17:02:45 executing program 1: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 17:02:45 executing program 4: r0 = open(&(0x7f0000000240)='./bus\x00', 0x165042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xfffffffffffc0000}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000002c0)='./bus\x00', 0x0) mount$9p_rdma(0x0, &(0x7f0000001980)='./file0\x00', 0x0, 0x100000, 0x0) [ 91.259066][ T3567] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.302726][ T26] audit: type=1800 audit(1712336565.253:5): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 17:02:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000080)={0x4}) 17:02:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x3000000}) [ 91.338246][ T26] audit: type=1800 audit(1712336565.283:6): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 17:02:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 17:02:45 executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) 17:02:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x16}, 0x40) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) 17:02:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5411, 0x0) 17:02:45 executing program 1: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 17:02:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x3000000}) 17:02:45 executing program 1: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000f53b55e36f91fa29ddf8e99bb0160e2f8eb7af9a3d3266e684c0d60440c07be966894581a5da92424bf070000000d70fa94d596397f91f44d"], 0x1, 0x1b9, &(0x7f0000000280)="$eJzs2z9rE2EcB/Bv21ijHSyO6nDg4hTUV2CQCmJAiGTQyYPq0hbhupxOfT2+AN+VS6dukeZq+sd0kJIcep8PhOdHvgR+z5D7PcNzHx8d7O1+Ofx88OM4/bUiveRFTpLtrGcjjbWzdX1Wb+aiowAA/5rxuBy23QPLVVXD8n6SrT+SyfdWGgIAAAAAAAAAAODG3P8HgO5x////V1XD8uHZ+e0y9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pxMp/emCz63k/ST3ElyN8nv79vuFwC4OfMfALrH/AeA7jH/AaB73r3/8GY4Gu2Mi6Kf/DyqJ/WkWZv81evRztNiZvv8V8d1PdmY58+avLic35qdG07z5wvzzTx53OSn2cu3oyv5VnaXv30A6KRBMbdwvg8G1+VNdeF8cGV+9/Kgt7JtAAB/4fDrt71yf/9TpVAoFPOi7ScTsGznf/q2OwEAAAAAAAAAAAAAAK6ziteJ2t4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3zKwAA///UOpMu") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 17:02:45 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000400)) 17:02:45 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 17:02:45 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) 17:02:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x16}, 0x40) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) [ 91.648896][ T4611] loop1: detected capacity change from 0 to 256 [ 91.660017][ T3567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.676733][ T3567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 17:02:45 executing program 4: bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 17:02:45 executing program 1: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 17:02:45 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) [ 91.694916][ T3567] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.706008][ T3567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.718934][ T3567] usb 3-1: config 0 descriptor?? [ 91.729636][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:02:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x3000000}) 17:02:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) 17:02:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) [ 91.880329][ T4631] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 91.892662][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.016963][ T3556] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.188385][ T3567] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 92.196428][ T3567] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.209649][ T3567] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 92.276956][ T3556] usb 1-1: Using ep0 maxpacket: 16 [ 92.407207][ T3556] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.420701][ T3556] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 92.430880][ T3556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.440616][ T3556] usb 1-1: config 0 descriptor?? [ 92.458318][ T4123] usb 3-1: USB disconnect, device number 2 [ 92.478740][ T3556] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 92.680003][ T3556] usb 1-1: USB disconnect, device number 2 17:02:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) madvise(&(0x7f0000841000/0x3000)=nil, 0x3000, 0x0) write$sequencer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8105"], 0x8) 17:02:46 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f0000000100)={[{@discard}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x55}}, {@discard}, {@dmask={'dmask', 0x3d, 0x3e70ca1}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x9}}, {@namecase}, {@namecase}]}, 0x81, 0x150f, &(0x7f0000001980)="$eJzs3Au8TtXWMPAx5pyLTdKT5D7HHIsnuUySJJeEXJIkOZLklpAkSRKSW25JSELuSe4hucVO7vf7PUmOJEkOEpLM76c6r/e8vefrfOf0fd7z7fH//RZz7PWM8Yz1jL33s9b67b2/6TC4Sr2qFeswM/xL8Jf/ugNACgD0A4DrACACgBJZSmS5vD+Dxu7/2pOIP9ZD0652B+JqkvmnbTL/tE3mn7bJ/NM2mX/aJvNP22T+aZvMX4i0bOv0nNfLlna3f/z+v/vf75b7//+G5P3//1v/0FeazD9tk/mnbTL/tE3mn7bJ/NM2mX/aJvNP22T+QqRlV/v+87/B9teX6mr38Ttb9E/lXd3PPiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQacX5cIUBgL+ur3ZfQgghhBBCCCGE+OOE9Fe7AyGEEEIIIYQQQvzfhwBGg4EI0kF6SIEMkBGugUxwLWSG6yAB10MWuAGywo2QDbJDDsgJuSA35AELBA4YYsgL+SAJN0F+uBkKQEEoBIXBQxEoCrdAMbgVisNtUALmLAK4A0pBaSgDZeFOKAd3QXmoABXhbqgElaEKVIV7oBrcC9XhPqgB90NNeABqwYNQG/4EdeAhqAsPQz14BOrDo9AAGkIjaAxN/qn8F6ELvARdoRt0hx7QE16GXtAb+kBf6AevQH94FQbAazAQBsFgeB2GwBswFN6EYTAcRsBbMBJGwWgYA2NhHIyHt2ECvAMT4V2YBJNhCkyFaTAdZsB7MBNmwWx4H+bABzAX5sF8WAAL4UNYBIshFT6CJfAxLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu2FPhb3wCeyDT2E/fAYH4PP/w/xz8Lf5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jALJgFs2JWzIbZMAfmwFyYC/NgHiQkZGTMi3kxiUnMj/mxABbAQlgIPXosikWxGN6KxbE4lsASWBJLYiksjaWxLJbFclgOy2N5rHjHPACshFWwCt6D9+C9WB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3pYH+tjA2yAjbARNsEm2BSbYjNshi2wBbbEltgKW2FrbI1tsA22xbbYDtthe2yPHbADdsRO2AlfxBfxJXwJu2El1QN7Yk/shb2wD/bFvvgK9sdX8VV8DQfiIByMr+Pr+AYOxbM4DIfjCByB5dQoHI1jkNU4HI/jcQJOwIk4ESfhZJyMU3EaTscZOANn4iyche/jHPwAP8B5OA8X4EJciItwMaZiKi7Bc7gUl+FyXIErcRWuxDW4FtfgetyA63ETbsItuAW34TbcgTtwF+7CPbgHP8FP8FP8FAfiATyAB/EgHsJDeBgP4xE8gkfx6LZrAPA4HscTeAJP4ik8jafwDJ7Bs3gOz+N5vIAX8CI+n+urunsKrhsI6jKjjEqn0qkUlaIyqowqk8qkMqvMKqESKovKorKqrCqbyqZyqBwql8ql8qg8ihQpVrHKq/KqpEqq/Cq/KqAKqEKqkPLKq6KqqCqmiqniqrgqoW5XJdUdqpQqrZr7sqqsKqda+PKqgqqoKqpKqrKqoqqqqqqaqqaqq+qqhqqhaqqaqpZ6UNVWPbAPPqQuT6aeGoT11WBsoBqqRqqxegMfU03VUGymmqsW6gk1HIdhK9XUt1ZPqzZqNLZVz6ox+Jxqr8ZhB/WC6qg6qc7qRdVFNfNdVTc1CXuonmoq9lK9VR/VV83EyuryxKqo19RANUgNVq+rBfiGGqreVMPUcDVCvaVGqlFqtBqjxqpxarx6W01Q76iJ6l01SU1WU9RUNU1NVzPUe2qmmqVmq/fVHPWBmqvmqflqgVqoPlSL1GKVqj5SS9THaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr2qa2qx1qp9qldqs9aq/6RO1Tn6r96jN1QH2uDqo/q0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qE6qZOqlPqtPpOnVHfq7PqnDqvflAX1I/qovpJXVJBgUattNZGRzqdTq9TdAadUV+jM+lrdWZ9nU7o63UWfYPOqm/U2XR2nUPn1Ll0bp1HW03aadaxzqvz6aS+SefXN+sCuqAupAtrr4voovoWXUzfqovr23QJfbsuqe/QpXRpXUaX1XfqcvouXV5X0BX13bqSrqyr6Kr6Hl1N36ur6/t0DX2/rqkf0LX0g7q2/pOuox/SdfXDup5+RNfXj+oGuqFupBvrJvox3VQ/rpvp5rqFfkK31E/qVvop3Vo/rdvoZ3Rb/axup5/T7fXzuoN+QXfUnXRn/ZO+pIPuqrvp7rqH7qlf1r10b91H99X99Cu6v35VD9Cv6YF6kB6sX9dD9Bt6qH5TD9PD9Qj9lh6pR+nReoweq8fp8fptPUG/oyfqd/UkPVlP0VP1ND1d9/m10ux/IP+d/yZ/wM/PvkVv1dv0dr1D79S79G69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Qp/Up/QP+jt9Rn+vz+pz+pz+QV/QF/TFX18DMGiU0caYyKQz6U2KyWAymmtMJnOtyWyuMwlzvclibjBZzY0mm8lucpicJpfJbfIYa8g4wyY2eU0+kzQ3mfzmZlPAFDSFTGHjTRFT1NzyL+f/nf5WTPnl5MU0MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NZ9PZdDFdTFcE0910Nz3Ny6aX6W36mL6mn3nF9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDjAGAkWakGW1Gm7FmrBlvxpsJZoKZaCaaSWaSmWKmmGlmmplhZpiZZqaZbWabOWaOmWvmmvlmvlloFppFZpFJNalmiVlilpplZplZYVaYVWaVWWPWmHVmndlgNphNZpNZaraarWa72W52mp1mt9lt9pq9Zp/ZZ/ab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWaOm+PmhDlhTpqT5rQ5bc6YM+asOWvOm/PmgrlgLpqL5pK5dPm0L1KRikxkonRRuiglSokyRhmjTFGmKHOUOUpEiShLlCXKGt0YZYuyRzminFGuKHeUJ7IRRS7iKI7yRvmiZHRTlD+6OSoQFYwKRYUjHxWJika3RMWiW6Pi0W1Riej2qGR0R1QqKh2VicpGd0blorui8lGFqGJ0d1QpqhxViapG90TVonuj6tF9UY3o/qhm9EBUK3owqh39KaoTPRTVjR6O6kWPRPWjR6MGUcOoUdQ4avKH1g/hbPbHfVfbzaaHHranfdn2sr1tH9vX9rOv2P72VTvAvvZ5NzvIDrav2yH2DTvUvmmH2eF2hH3LjrSj7Gg7xo614+x4+7adYN+xE+27dpKdbKfYqXaanW5n2PfsTDvLzrbv2zn2AzvXzrPz7QK70H5oF9nFNtV+ZJfYj+1Su8wutyvsSrvKrrZr7Fq7zq63G+xGu8lutlvsVrvNbrc77E67y+62e+xe+4ndZz+1++1n9oD93B60Kb+e339pj9iv7FH7tT1mv7HH7bf2hP2LPWlP2dP2O3vGfm/P2nP2vP3BXrA/2ov2J3vJhssn95ff3smQoXSUjlIohTJSRspEmSgzZaYEJSgLZaGslJWyUTbKQTkoF+WiPJSHLmNiykt5KUlJyk/5qQAVoEJUiDx5KkpFqRgVo+JUnEpQCSpJJakUlaIyVIbupDvpLrqLKlAFupvupspUmapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qD7VpwbUgBpRI2pCTagpNaVm1IxaUAtqSS2pFbWi1tSa2lAbakttqR21o/bUnjpQB+pIHakzdaYu1IW6UlfqTt2pJ/WkXtSL+lAf6kf9qD/1pwE0gAbSQBpMg2kIDaGhNJSG0XAaQW/RSBpFo2kMjaVxNJ7G0wSaQBNpIk2iSTSFptA0mkYzaAbNpJk0m2bTHJpDc2kuzaf5tJAW0iJaRKmUSktoCS2lpbScltNKWkmraTWtpbW0ntbTRtpIm2kzbaWttJ22007aSbtpN+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2kk3SaTtMZOkNn6Sydp/N0gX6ki/QTXaJAKS6Dy+iucZnctS6zu8791ziHy+lyudwuj7Mum8v+NzE55wq4gq6QK+y8K+KKult+E5dypV0ZV9bd6cq5u1z538TV1u785QfR3f2uqrvHVXP3uuruPlfD3e9qugdcLfeIq+0edXVcQ1fXNXb13COuvnvUNXANXSPX2LV0T7pW7inX2j3t2rhnfhMvcovdWrfOrXcb3D73qTvvfnDH3DfugvvRdXXdXD/3iuvvXnUD3GtuoBv0m3iEe8uNdKPcaDfGjXXjfhNPcVPdNDfdzXDvuZlu1m/ihe5DN8elurlunpvvFvwcX+4p1X3klriP3VK3zC13K9xKt8qtdmv+o9cVbpPb7La4ve4Tt93tcDvdLrfb7fk5vnwc+91n7oD73B11X7tD7gt32B13R9xXP8eXj++4+9adcH9xJ90pd9p95864791Zd+7n47987N+5n9wlFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zi7ABbkQF2bPRbgo38LF+FYuzrdxCb6dS/IdXIpLcxkuy3dyOb6Ly3MFrsh3cyWuzFW4Kt/D1fhers73cQ2+n2vyA1yLH+Ta/Ceuww9xXX6Y6/EjXJ8f5QbckBtxY27Cj3FTfpybcXNuwU9wS36SW/FT3Jqf5jb8DLflZ7kdP8ft+XnuwC9wR+7EnflF7sIvcVfuxt25B/fkl7kX9+Y+3Jf78Svcn1/lAfwaD+RBPJhf5yH8Bg/lN3kYD+cR/BaP5FE8msfwWB7H4/ltnsDv8ER+lyfxZJ7CU3kaT+cZ/B7P5Fk8m9/nOfwBz+V5PJ8X8EL+kBfxYk7lj3gJf8xLeRkv5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G2/nHYy8i3fzHt7Ln/A+/pT382d8gD/ng/xnPsRf8GH+ko/wV3yUv+Zj/A0f52/5hAE+yaf4NH/HZ/h7Psvn+Dz/wBf4R77IP/ElDgwxxirWsYmjOF2cPk6JM8QZ42viTPG1ceb4ujgRXx9niW+Is8Y3xtni7HGOOGecK84d54ltTLGLOY7jvHG+OBnfFOePb44LxAXjQnHh2MdF4qLxLXGx+Na4eHxbXCK+PS4Z3xGXikvHj9xfNr4zLhffFZePK8QV47vjSnHluEpcNb4nrhbfG1eP74trxPfHxeMH4lrxg3Ht+E9xnfihuG78cFwvfiSuHz8aN4gbxo3ixnGT+LG4afx43CxuHreIn4hbxk/GreKn4tbx03Gb+Jnf3d897hH3jF+OX45DuE/PTy5ILkx+mFyUXJxMTX6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULV9ODRK6+98ZFP59P7FJ/BZ/TX+Ez+Wp/ZX+cT/nqfxd/gs/obfTaf3efwOX0un9vn8daTd5597PP6fD7pb/L5/c2+gC/oC/nC3vsivqhv7Jv4Jr6pf9w38819C/+Ef8I/6Z/0T/mn/NO+jX/Gt/XP+nb+Od/eP++f9y/4jr6T7+xf9F38S76r7+a7++6+p+/pe/levo/v4/v5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+ToE5fq6f6+f7+X6hX+gX+UU+1af6JX6JX+qX+uV+uV/pV/rVfrVf69f69X693+g3+s1+s9/qt/rtfrvf6Xf63X633+v3+n1+n9/v9/sD/oA/6A+eD/6QP+y/9Ef8V/6o/9of89/44/5bf8L/xZ/0p/xp/50/47/3Z/05f97/4C/4H/1F/5O/5IMfn3g7MSHxTmJi4t3EpMTkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJj5KLEl8nFiaWJZYnliRWJlYlQgh9/Y45A35QjLcFPKHm0OBUDAUCoWDD0VC0XBLKBZuDcXDbaFEuD2UDHeEUqF0KBMeDQ1Cw9AoNA5NwmOhaXg8NAvNQ4vwRGgZngytwlOhdXg6tAnPhLbh2dAuPBfah+dDh/BC6Bg6hc7hxdAlvBS6Bh26hx6hZ3g59Aq9Q5/QN/QLr4T+4dUwILwWBoZBYXB4PQwJb4Sh4c0wLAwPI8JbYWQYFUaHMWFsGBfGh7fDhPBOmBjeDZPC5DAlTA3TwvQwI7wXZoZZYXZ4P8wJH4S5YV6YHxaEheHDsCgsDqnho7AkfByWhmVheVgRIGVVWB3WhLVhXVgfNoSNYVPYHLaErWFb2B52hJ1hV9gd9oS94ZOwL3wa9ofPwoHweTgY/hwOhS/C4fBlOBK+CkfD1+FY+CYcD9+GE+Ev4WQ4FU6H78KZ8H04G86F8+GHcCH8GC6Gn8Klf+J31qI/+E66EEIIIcS/A/07+3v8TaT+41/160d6AsC1O3Ie+a81N2b7Zd1b5WqZAICnu3V46K9bpUrdu3f/9bFLNUT55gFA4kp+OrgSL4MW8CS0huZQ7L/tr7fqdIF/p37ydoCM/yknBa7EV+rf+nfqj5rzu/XnARTIdyUnA1yJr9Qv/pva0c/1szf9nfoZvhgP0Ow/5WWCK/GV+kXhcXgGWv/NI4UQQgghhBBCiF/0VmXa/d717eXr81zmSk56uBL/3vW5EEIIIYQQQgghrr7nOnV+6rHWrZu3+zuLCn9/lyzSyiLd/4w2/u0XAP8j2vjHFlf7O5MQQgghhBDij3blpP9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRd/y/+nNjVPkYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiavtfAQAA//918jFh") chmod(&(0x7f0000000040)='./file2\x00', 0x0) 17:02:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) 17:02:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 17:02:46 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) 17:02:46 executing program 1: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r2, r3, 0x0, 0x3000000}) [ 92.991613][ T4637] loop3: detected capacity change from 0 to 256 17:02:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 17:02:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,index=on,nfs_export=on']) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./bus/file0\x00') [ 93.050008][ T4637] exfat: Deprecated parameter 'namecase' [ 93.058996][ T4637] exfat: Deprecated parameter 'namecase' 17:02:47 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 93.103112][ T4637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 93.142655][ T4653] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 17:02:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) madvise(&(0x7f0000841000/0x3000)=nil, 0x3000, 0x0) write$sequencer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8105"], 0x8) 17:02:47 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f000000ba40)=@dbg, 0x18) 17:02:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x22882, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1, 0x0, 0x0) 17:02:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r1, 0x31b, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) 17:02:47 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) [ 93.169285][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:02:47 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:47 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) 17:02:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,index=on,nfs_export=on']) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./bus/file0\x00') [ 93.242051][ T4658] caif:caif_disconnect_client(): nothing to disconnect 17:02:47 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000440)={0x0, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) rt_sigreturn() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='Z'], 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000880)='.pending_reads\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:02:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 17:02:47 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 17:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebc, &(0x7f0000000040)) 17:02:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0) lseek(r0, 0x58b7b08f, 0x0) getdents64(r0, &(0x7f0000000380)=""/216, 0xd8) [ 93.359379][ T26] audit: type=1800 audit(1712336567.313:7): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 17:02:47 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) 17:02:47 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f000000ba40)=@dbg, 0x18) 17:02:47 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) madvise(&(0x7f0000841000/0x3000)=nil, 0x3000, 0x0) write$sequencer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8105"], 0x8) [ 93.428904][ T4677] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 93.466524][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:47 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r1, 0x31b, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) 17:02:47 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) 17:02:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,index=on,nfs_export=on']) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./bus/file0\x00') [ 93.518026][ T4687] caif:caif_disconnect_client(): nothing to disconnect 17:02:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GETSTATE(r1, 0x5451, 0x0) 17:02:47 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) 17:02:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xffffff46) dup3(r1, r0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RCREATE(r2, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) write$P9_RREAD(r4, 0x0, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000006c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r6, r5, 0x0) rt_sigreturn() writev(r3, 0x0, 0x0) write$FUSE_DIRENT(r4, 0x0, 0x0) write$P9_RFSYNC(r3, 0x0, 0x0) write$P9_RFLUSH(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000400)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r7, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000ec0)=ANY=[], 0x10}], 0x1}, 0x0) 17:02:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 17:02:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f050027"], 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) 17:02:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) madvise(&(0x7f0000841000/0x3000)=nil, 0x3000, 0x0) write$sequencer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8105"], 0x8) 17:02:47 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5452, &(0x7f00000002c0)={'syzkaller0\x00'}) 17:02:47 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f000000ba40)=@dbg, 0x18) 17:02:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r1, 0x31b, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) 17:02:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,index=on,nfs_export=on']) mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x0) rmdir(&(0x7f00000002c0)='./bus/file0\x00') [ 93.740810][ T4713] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 17:02:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000012c00)={0xffffffffffffffff}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x1}) 17:02:47 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="acb40dd543250df149160826003abede6d292302014a7ad25afdfa337aaa5b913a502e6943485876d21f123cac115a1d", 0x30}], 0x33, &(0x7f0000000180)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x60}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}}], 0x1, 0x40022041, 0x0) [ 93.790108][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.814951][ T4718] caif:caif_disconnect_client(): nothing to disconnect 17:02:47 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x7, &(0x7f0000000400), &(0x7f0000000280)=0x8) 17:02:47 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, 0x0, 0x0) 17:02:47 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, {{@in=@empty}, 0x0, @in6=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 17:02:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000400)={0x16, 0x0, 0x0}) 17:02:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 17:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r1, 0x31b, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) 17:02:48 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f000000ba40)=@dbg, 0x18) 17:02:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) rt_sigreturn() timer_create(0x0, 0x0, 0x0) write$P9_RREAD(r2, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 17:02:48 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000400)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) mknodat$loop(r0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1) write$P9_RREAD(r1, 0x0, 0x82) close(r1) rt_sigreturn() r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknodat$loop(r0, &(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) statx(r0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 94.015570][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:02:48 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet(0x2, 0xa, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:02:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000012c00)={0xffffffffffffffff}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x1}) [ 94.095949][ T26] audit: type=1800 audit(1712336568.043:8): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 94.116513][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.129629][ T4744] caif:caif_disconnect_client(): nothing to disconnect 17:02:48 executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79070011"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) [ 94.240408][ T26] audit: type=1326 audit(1712336568.193:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8f4f6e69 code=0x0 17:02:48 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x185442, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000340)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r1, 0x0, 0x0) close(r1) rt_sigreturn() mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000280)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) utimes(&(0x7f0000000140)='./bus\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x90080, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:02:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x5450, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) socketpair(0x21, 0x6, 0xb0, 0x0) r1 = mq_open(&(0x7f0000000940)='trusted.overlay.nlink\x00', 0x40, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBENT(r1, 0x5452, &(0x7f0000000040)) 17:02:48 executing program 2: statx(0xffffffffffffffff, &(0x7f0000002e40)='./file0\x00', 0x0, 0x0, 0x0) 17:02:48 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac0f8a00b091b26e0338ffa9182bcbe1555a4400861b35adc0896d544f0764a24a1eb533b6a5c1e545d260acfd73168132faf2ca634d22a5ec018c80d817b2324502d985e352fe202345cfc835600c5c4ea1cc2225404f6184f7d02e9b4a59e890ade4e04f465be187b138811665dd40fccce005091b4640eb91f80dc5d9b117c810b1b06501c7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x4, 0x940b, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) 17:02:48 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x55}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x6}, 0x5) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 94.363164][ T26] audit: type=1800 audit(1712336568.283:10): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 17:02:48 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 17:02:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) accept4(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, 0x0) 17:02:48 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) 17:02:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000012c00)={0xffffffffffffffff}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x1}) 17:02:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 17:02:48 executing program 1: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79070011"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:48 executing program 2: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) epoll_create1(0x0) ioctl$TIOCMIWAIT(r1, 0x5451, 0x0) 17:02:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0x5451, 0x0) 17:02:48 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}}], 0x1, 0x0) 17:02:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x0, 0x4002011, r1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 17:02:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x20) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000040)='9', 0x1}], 0x1) 17:02:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x16}, 0x40) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000), 0x4) 17:02:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 17:02:48 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) syz_clone3(&(0x7f00000002c0)={0x80000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2c}, &(0x7f0000000140)=""/82, 0x52, &(0x7f00000001c0)=""/154, &(0x7f0000000280)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) signalfd4(r0, &(0x7f0000000340)={[0x9]}, 0xfffffffffffffe58, 0xc0800) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = mq_open(&(0x7f0000000080)='!{@:\x00', 0x40, 0x35, 0x0) r4 = dup3(r2, r3, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) write$FUSE_BMAP(r4, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x0, {0x4}}, 0x18) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x11}, @val={0x0, 0x0, 0x0, 0x5, 0x7fff, 0x1}, @ipv4=@gre={{0x10, 0x4, 0x2, 0x0, 0x1183, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback, {[@noop, @generic={0x83, 0x10, "f12dff9718c68237508249d8b244"}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x9, [{@multicast1, 0x80000001}, {@empty}]}, @timestamp_addr={0x44, 0x4, 0xf}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x4a, 0x1, [], "e9d5850492ca14846311fd500153fa676d0e5958cc14839ec07a0cd86437dca5b1ba6b6608ba9fc618a30ed6f62cc40edcf2ef64094bdd6638ff977c07a28dbe8c5f7efd52e374df0a93"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xffff, 0x7, 0x2], "d90dc1f29a0f9d0d44d24b3205c7cc3daa236b41012dc9fd7e99fb20fc395a4a89ae6aa7c21dfb37e79460000f0264f222cb9e44eeca23"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "c3432a57cee53503908586420ea704369f1e951797d887b1a1c27d83c42eb7d8cbc25cc2e0beb8b0edc4feafffdba7e27005b9c5171e13471b9ab40d6fdd8e58f8647585610d21f0f4513e74fa14ba29b3c1d609c8b24d1a8b013b717c26e97f92782fa749d22dd3cae970cfb13be3a7777d9d5c944535ea"}, {0x8, 0x88be, 0x2, {{0xf, 0x1, 0x20, 0x3, 0x1, 0x3, 0x7, 0x6}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x0, 0x1, 0x0, 0x1, 0x5, 0x6}, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "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"}}}}, 0x1191) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000000), 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x40, 0x0) dup2(r7, r8) getsockname(r8, 0x0, 0x0) unlinkat(r8, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r10 = dup3(r9, r6, 0x0) r11 = accept4$inet(r10, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x5421, &(0x7f0000000040)={'veth0_to_hsr\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0x5450, 0x0) write$P9_RLOCK(r1, 0x0, 0x0) 17:02:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = mq_open(&(0x7f00000000c0)='$}}:]@\x00', 0x42, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x0, 0x5, 0x1, [{0x0, 0x5, 0x7, '\x00', 0x508}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5452, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0x8906, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x5421, &(0x7f0000000080)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x5421, &(0x7f0000000380)) write$binfmt_misc(r0, 0x0, 0x0) 17:02:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x400, 0x6, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5}) 17:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x3}]}) 17:02:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x49) 17:02:48 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) write$binfmt_elf64(r0, &(0x7f0000001c80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000002380)={0x0, 0x0, 0x1, {0xa, @raw_data="6cf04dbc45513ed1baddc91891e6fc73a1e91565abc7350336f85d2d06160d2ad132442eb944f851fa4378e3aaa75b6742cbb797632e1b39c1b1ea1c619a4e04f45c83c325f94c97189ce4f6ac9d1b64c12b6709a7ee3f4e4329e746ea97bdf77a1658a76401cf28f96c43d98768debd088796f7c4d367cee98a9c351307e5fedd9a90830b83ccd04ab1e60ea5264e7523c8c9a81bcbecef83cf6f4bfbdb29ee18eadfdb2cecdd21bceda7eaedd68a152462d5f103abb29b80a0477aedec58a938d6d7ceebc6b3eb"}}) 17:02:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000012c00)={0xffffffffffffffff}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x1}) 17:02:48 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) socket$inet6_sctp(0xa, 0x0, 0x84) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000300), 0x0, 0x0) 17:02:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = mq_open(&(0x7f00000000c0)='$}}:]@\x00', 0x42, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x0, 0x5, 0x1, [{0x0, 0x5, 0x7, '\x00', 0x508}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5452, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0x8906, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x5421, &(0x7f0000000080)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x5421, &(0x7f0000000380)) write$binfmt_misc(r0, 0x0, 0x0) 17:02:48 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79070011"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x24e, &(0x7f00000004c0)="$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") 17:02:48 executing program 2: socket$inet(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'xfrm0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = mq_open(&(0x7f0000000080)='$((^\x00', 0x40, 0x6, &(0x7f00000000c0)={0x1f, 0xffff, 0x7}) setxattr$incfs_id(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) pread64(r3, 0x0, 0x0, 0x56b4) 17:02:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x541b, 0x0) 17:02:48 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x541b, &(0x7f0000000140)={@default, @null}) 17:02:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x3}]}) [ 94.993768][ T4836] loop1: detected capacity change from 0 to 256 17:02:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 17:02:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = mq_open(&(0x7f00000000c0)='$}}:]@\x00', 0x42, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x8, 0x6, 0x0, 0x5, 0x1, [{0x0, 0x5, 0x7, '\x00', 0x508}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5452, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0x8906, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x5421, &(0x7f0000000080)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x5421, &(0x7f0000000380)) write$binfmt_misc(r0, 0x0, 0x0) 17:02:49 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x1269, 0x0) 17:02:49 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 17:02:49 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020b000002"], 0x10}}, 0x0) 17:02:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) 17:02:49 executing program 3: socket$inet(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'xfrm0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = mq_open(&(0x7f0000000080)='$((^\x00', 0x40, 0x6, &(0x7f00000000c0)={0x1f, 0xffff, 0x7}) setxattr$incfs_id(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) pread64(r3, 0x0, 0x0, 0x56b4) 17:02:49 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pread64(r1, &(0x7f0000000180)=""/225, 0xe1, 0x0) 17:02:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x3}]}) 17:02:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 17:02:49 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0