last executing test programs: 5m4.598563149s ago: executing program 0 (id=451): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 5m4.045026883s ago: executing program 0 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003d80)="4fe4e3da", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005480)="a433792d", 0x4}], 0x1}}], 0x2, 0x48081) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmmsg$inet(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000340)="e8", 0x1}], 0x1}}], 0x2, 0x80) 5m3.877996335s ago: executing program 0 (id=458): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) 5m3.709106295s ago: executing program 0 (id=460): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x670}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7cbc1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) brk(0x200000ffc000) 4m58.002922131s ago: executing program 0 (id=484): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) 4m57.856904063s ago: executing program 0 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) move_pages(r4, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x100000, 0x8) 4m42.495713631s ago: executing program 32 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) move_pages(r4, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x100000, 0x8) 3m8.99339074s ago: executing program 5 (id=846): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x6071, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "ba992dd543953751e83c40e11945a19c"}]}}}}}}}, 0x0) 3m8.710607962s ago: executing program 5 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/68, 0x44, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000100)='%+9llu \x00'}, 0x20) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m6.992888433s ago: executing program 5 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x9) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2e}]}]}, 0x5c}}, 0x24000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000140)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r6, 0x0, 0x4804}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x40) mount(0x0, 0x0, 0x0, 0x2236824, 0x0) 3m5.948922889s ago: executing program 5 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000680)={[{@gid}, {@force}, {@nodecompose}, {@creator={'creator', 0x3d, "60eb8bba"}}, {@nls={'nls', 0x3d, 'default'}}, {@umask}, {@uid}, {@nodecompose}]}, 0x3, 0x6a7, &(0x7f0000000740)="$eJzs3U2InHcdB/DvM7uZzURIt29pFKFLA0UbTHYz1EQQGkUkhyBBL70uyaZZMknLZitpETNRq+DJk/TgoSLx0JOICPUk1rMgePGUe8CbhxzUleeZZ2ZndyabnbzNtv184Jnn/8z/7ff88rzMS5YJ8Jl15vXs66bImaNnr5fbt2+1O7dvta/0y0nmkjSS2d4qRSspPk5Op7fk8+WT9XDFveZ59c5Hxez7H7Z7W7P1UrVv7NRvxNiW3WT/YGMmyUKv+J9dDzsyXrVU45zfHO8BFYO4y4Qd6ScOpm1jRHezsnHf7rs/b4E960bvvjliPjmQ3t21fB2Q+upw/yvD9O14beo+uTgAAADgcRn7Xn7YU3dzN9dz8MmEAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8ORe83A4t6afTLCyn6v//fHPpN/eaUw31I712sVt99atqBAAAAAAAAAMBDefFu7uZ6Dva3N4rqO/+Xqo3nqsfP5e1cy0rWcizXs5z1rGctS0nmhwZqXl9eX19bGu35y5Q9NzY2btQ9T4zteWJrXN3tgY77nwYjjQAAAAAAAADgM+tHObP5/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwFRTLTW1XLc/3yfBqzSfYnaRYLg+bNqQb7CPx52gEAAADA5GYmbN+q1weL//UKG0X1nv9Q9b5/f97O1axnNevpZCUXqs8Ceu/6G3/vtju3b7WvlMvowN/410RxVCMO4h8382LV4vlBjzP5dr6Xo1nIuaxlNd/PctazkoV8qyotp8h8/enF/O1brfRjHY339Jatc9tje3GoXMZ3uIqklYtZrWI7lvPNfuiNut3hodn+2Ey2zXizzE7xWm2XObpQr8s9+kW93hvmqz3fN8jIYp37MhtPD+d9NPcTHifbZ1pKY/AZ1HObs5Sb22d6oJwfqNdlrn/6eHM+4UdpWzPR/Xm51T/6Du2c8+TL//jLuUuNq5cvXbx2dO8cRg9o+zHRHsrEC7vKRKfMRPchMrH/YeJ/dJp1NnpX0cmuli9VfQ9mNd/Jm7mQlZzMYpZyKov5Wk6knRNDeX1+57xW51pjsnPtyJfqQnlP+tnQvemJmbtXRZnXp4fyOnylm6/qhp/ZzNIzu8hS0cz4LP1zbCizX6gL5Rw/HrrjTN/2TCwNZeLZnTPx6/9uJLnWuXp57dLyW7uc7+V6XZ627229Nv/mkezQ5OrdLY+XZ8p/rPRuG8NHR1n3bL9uW76a9Tcus/VgW+qaqc7nXt3ImTqTLWdqOdKhm+NG6tW9MHaWdlV3eKhuy6ucvJnO4FUIAHvYgVcONFt3Wn9rfdD6SetS6+z+b86dmvtiM/v+Ovunmd81ftv4evFKPsgPc3DakQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKfBtXfevbzc6ays7cFCGo94wJtjq/qp6D3T3Bv7/kktzO10RP0+yQ7dm9OIuZVkT6Qus09grrmMqTo7eKaVNAbxJLm8R37gDngcjq9feev4tXfe/crqleU3Vt5YuXri1MnXTra/unTj+MXVzspi73HaUQKPw+bLgGlHAgAAAAAAAAAAAOzWk/jzhjHTFt0p7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXTm9ezrpsjS4rHFcvv2rXanXPrlzZazSRpJih8kxcfJ6fSWzA8NV9xrnlfvfPSrl9//sL051my/fWNbvz/8e2Njwr3o1ksWkszU6/ub29V454fG604YWE8x2MMyYUf6iYNp+38AAAD//wOoB6M=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) 3m3.950701942s ago: executing program 5 (id=865): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0x8}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20080050) 3m0.016855787s ago: executing program 5 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/68, 0x44, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000100)='%+9llu \x00'}, 0x20) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m58.671542546s ago: executing program 33 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/68, 0x44, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000100)='%+9llu \x00'}, 0x20) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15.990267929s ago: executing program 6 (id=1371): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000b97000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 15.745510631s ago: executing program 6 (id=1373): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x20, 0x31, 0x2, {0x2, 0xc}}, 0x0}, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001200)={"87bdc03355472ee9167877b565743078", 0x0, 0x0, {0x8, 0xfff}, {0xc80, 0xffffff7f}, 0x8000, [0x2, 0xddab, 0x6, 0x3, 0x1, 0x0, 0x3, 0x3, 0xeaf6, 0x5, 0x800000000005, 0x8, 0xc, 0x8000800000000001, 0x10, 0x32]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0xa00080, &(0x7f0000000340)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000840)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast2, @in6=@initdev}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) getegid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a40)) syz_open_dev$loop(0x0, 0x73, 0x100) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8305a0056000100050e28006a0081000c000409030a07020000800600070206000102030001020800050100070206000702070004d20c000300000002020500020202000a04020079e80a0b020016000f1e0400050006000a00020004005ba7cc734efb118aeb8b940aa572e9555682e0682eb8d3494f36b9b00e4a631a343ab6086e28ba2ec79c28471632366de2bbfc099754291f3a37bb99a42e34f0d1cdc0bba988fc608ca42d5e80e5c22ea2c8c05ff200397a45ca2107"], 0x5f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 14.54054556s ago: executing program 6 (id=1376): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 14.355733171s ago: executing program 6 (id=1378): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000002100)=ANY=[@ANYBLOB], 0x7) getuid() mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x808, 0x0) 14.143737182s ago: executing program 6 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) fanotify_init(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 11.816090878s ago: executing program 6 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x7c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_fastopen={0xfe, 0xffffffffffffffd4}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @exp_fastopen={0xfe, 0x0, 0xf989, "5d7d0438043979a6eef50c360a169b45"}, @mss={0x2, 0x0, 0xfff}]}}}}}}}, 0x0) 10.902129585s ago: executing program 34 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x7c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_fastopen={0xfe, 0xffffffffffffffd4}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @exp_fastopen={0xfe, 0x0, 0xf989, "5d7d0438043979a6eef50c360a169b45"}, @mss={0x2, 0x0, 0xfff}]}}}}}}}, 0x0) 6.672928794s ago: executing program 2 (id=1422): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0xfe, 0x5, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r1, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0xfffff5c9}], 0x1, 0x20, 0x0) shutdown(r1, 0x1) 6.400851646s ago: executing program 2 (id=1425): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007ada2008340312e72"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b0900000000000001090224000100004000090400d1813ca40b998629fd020300000009210000000122070009058103ff03"], 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x800000, &(0x7f0000000340)={'trans=virtio,', {[{@access_uid}, {@cache_none}]}}) 5.224725174s ago: executing program 1 (id=1433): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x40200000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000840)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x10, @remote, 0xf}}}, 0x90) 4.135190252s ago: executing program 1 (id=1437): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 3.911483983s ago: executing program 1 (id=1439): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r0, 0x7f) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a12600", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x13}}}}}}}, 0x0) 3.708831945s ago: executing program 1 (id=1440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.606827715s ago: executing program 2 (id=1441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 3.499092976s ago: executing program 4 (id=1442): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.399114736s ago: executing program 1 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x0, 0x0, 0xf81, 0x0, &(0x7f00000082c0)="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"}) 3.324936257s ago: executing program 2 (id=1444): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 3.159700218s ago: executing program 4 (id=1445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x20400000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x200}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x4d, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.212030855s ago: executing program 4 (id=1446): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000002100)=ANY=[@ANYBLOB], 0x7) getuid() mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x808, 0x0) 1.395059701s ago: executing program 2 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000000)="c1188e99b95d02ff42848605", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000080822"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x10001043, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f0000000100)='./file1/file4\x00', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 824.409825ms ago: executing program 4 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0x8}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20080050) 720.846055ms ago: executing program 2 (id=1450): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007ada2008340312e72"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b0900000000000001090224000100004000090400d1813ca40b998629fd020300000009210000000122070009058103ff03"], 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x800000, &(0x7f0000000340)={'trans=virtio,', {[{@access_uid}, {@cache_none}]}}) 699.951745ms ago: executing program 3 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 576.998276ms ago: executing program 3 (id=1452): mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x1, 0x8031, 0xffffffffffffffff, 0x2a7b5000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 528.857277ms ago: executing program 4 (id=1453): unshare(0x2a020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) 467.025037ms ago: executing program 3 (id=1454): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random='c\'DGg)', @random="ed89b4ddf9e1", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @remote, @empty, @broadcast}}}}, 0x0) 405.117538ms ago: executing program 4 (id=1455): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 326.891858ms ago: executing program 3 (id=1456): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r0, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r5}, 0x8) 165.021599ms ago: executing program 3 (id=1457): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) r1 = dup(r0) write$P9_RLINK(r1, &(0x7f0000000500)={0x7, 0x47, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x30}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 35.38136ms ago: executing program 1 (id=1458): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 3 (id=1459): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000002100)=ANY=[@ANYBLOB], 0x7) getuid() mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x808, 0x0) kernel console output (not intermixed with test programs): comes ready [ 58.490311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.500452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.510431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.520722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.530186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.539419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.548542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.557383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.566099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.573822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.584201][ T4276] device veth1_macvtap entered promiscuous mode [ 58.605707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.614571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.642438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.672762][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.687548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.716121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.746409][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.768106][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.796472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.805808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.823558][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.830874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.840941][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.882483][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.898310][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.908399][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.917443][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.980106][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.992846][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.002012][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.010860][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.019530][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.028566][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.076489][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.085878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.096852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.105419][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.114142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.123472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.132004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.139778][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.148621][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.156646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.164883][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.172773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.180521][ T4267] device veth0_vlan entered promiscuous mode [ 59.203135][ T4275] device veth0_vlan entered promiscuous mode [ 59.221953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.230265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.239654][ T4266] device veth0_vlan entered promiscuous mode [ 59.251992][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.275158][ T4267] device veth1_vlan entered promiscuous mode [ 59.289611][ T4275] device veth1_vlan entered promiscuous mode [ 59.323051][ T4266] device veth1_vlan entered promiscuous mode [ 59.362572][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.373187][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.382386][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.390966][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.403459][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.412584][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.422076][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.458629][ T4267] device veth0_macvtap entered promiscuous mode [ 59.474826][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.483339][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.492875][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.501547][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.510013][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.518862][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.529656][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.540195][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.550306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.566080][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.568827][ T4267] device veth1_macvtap entered promiscuous mode [ 59.580979][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.594119][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.603664][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.614146][ T4266] device veth0_macvtap entered promiscuous mode [ 59.622211][ T4272] device veth0_vlan entered promiscuous mode [ 59.632442][ T4266] device veth1_macvtap entered promiscuous mode [ 59.659389][ T4275] device veth0_macvtap entered promiscuous mode [ 59.672941][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.688498][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.700900][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.718501][ T4272] device veth1_vlan entered promiscuous mode [ 59.730477][ T4275] device veth1_macvtap entered promiscuous mode [ 59.743006][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.755143][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.782042][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 59.785764][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.803160][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.811953][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.819892][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.829080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.840406][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.851588][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.862339][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 59.862361][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 59.868370][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 59.875643][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 59.892100][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.910904][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.922034][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.933199][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.945281][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.957881][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.978620][ T4380] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.988682][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.000329][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.011632][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.020594][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.030164][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.046316][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.064366][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.075055][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.088546][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110107][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.122594][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.133152][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.144015][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.156088][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.166607][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.179362][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.190491][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.201533][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.213052][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.225743][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.242812][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.280642][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.292181][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.302419][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.311826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.351979][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.360719][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.374178][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.389130][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.401995][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.415393][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.426179][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.436991][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.447064][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.457611][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.469401][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.478092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.487224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.539935][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.549118][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.559921][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.568718][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.634107][ T4272] device veth0_macvtap entered promiscuous mode [ 60.644165][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.654003][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.666368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.687636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.749457][ T4272] device veth1_macvtap entered promiscuous mode [ 60.758959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.768992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.786433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.845441][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.865551][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.925196][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.937981][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.950229][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.963899][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.976237][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.990584][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.005822][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.019312][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.031573][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.041942][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.053800][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064443][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.075230][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.085375][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.096090][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.106207][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.116945][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.138371][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.149503][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.166820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.180832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.195418][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.206464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.252245][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.271095][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.279847][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.300326][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.333764][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.334542][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.362537][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.380336][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.421547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.450923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.552187][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.560399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.592250][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.601509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.609481][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.653894][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.668231][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.678206][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.695219][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.788102][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.812245][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.855492][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.871199][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 61.936953][ T4393] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 61.944726][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 61.944766][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 61.944792][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 61.952879][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 62.070347][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.080371][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.105898][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.136707][ T26] audit: type=1326 audit(1762241166.738:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.159018][ T4397] device bridge_slave_0 left promiscuous mode [ 62.172788][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.211680][ T4397] device bridge_slave_1 left promiscuous mode [ 62.227120][ T4404] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.246310][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.253935][ T26] audit: type=1326 audit(1762241166.788:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.294132][ T4397] bond0: (slave bond_slave_0): Releasing backup interface [ 62.340218][ T26] audit: type=1326 audit(1762241166.788:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340254][ T26] audit: type=1326 audit(1762241166.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340280][ T26] audit: type=1326 audit(1762241166.788:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340306][ T26] audit: type=1326 audit(1762241166.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340332][ T26] audit: type=1326 audit(1762241166.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340366][ T26] audit: type=1326 audit(1762241166.788:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.340390][ T26] audit: type=1326 audit(1762241166.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 62.380390][ T4397] bond0: (slave bond_slave_1): Releasing backup interface [ 62.454387][ T4397] team0: Port device team_slave_0 removed [ 62.611539][ T4397] team0: Port device team_slave_1 removed [ 62.626932][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.638201][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.675840][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.704094][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.222271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.231138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.242974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 63.251325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 63.266592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.274992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.287869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.328339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.337005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.346188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 64.798910][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 65.402810][ T4460] loop2: detected capacity change from 0 to 128 [ 65.557210][ T4460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.590548][ T4460] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.042297][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 72.287714][ T4507] sched: RT throttling activated [ 72.313901][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.320520][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.628291][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 73.926404][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.990030][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.123007][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.397812][ T4526] device bridge_slave_0 left promiscuous mode [ 74.503998][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.974408][ T4526] device bridge_slave_1 left promiscuous mode [ 74.980626][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.621750][ T4541] loop3: detected capacity change from 0 to 128 [ 75.699279][ T4526] bond0: (slave bond_slave_0): Releasing backup interface [ 75.720033][ T4526] bond0: (slave bond_slave_1): Releasing backup interface [ 75.819810][ T4526] team0: Port device team_slave_0 removed [ 75.998396][ T4541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.024693][ T4541] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.066358][ T4526] team0: Port device team_slave_1 removed [ 76.105454][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.115258][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.141474][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.149265][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.257291][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 76.356894][ T14] cfg80211: failed to load regulatory.db [ 79.615639][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.532234][ T4606] loop3: detected capacity change from 0 to 128 [ 83.204829][ T4606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.213772][ T4606] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.450253][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 87.733489][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.756053][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.005849][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.147466][ T4632] device bridge_slave_0 left promiscuous mode [ 88.234270][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.338434][ T4632] device bridge_slave_1 left promiscuous mode [ 88.487528][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.596841][ T4632] bond0: (slave bond_slave_0): Releasing backup interface [ 88.689603][ T4632] bond0: (slave bond_slave_1): Releasing backup interface [ 90.098368][ T4658] loop4: detected capacity change from 0 to 128 [ 90.262826][ T4632] team0: Port device team_slave_0 removed [ 90.309674][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.318521][ T4658] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.377166][ T4632] team0: Port device team_slave_1 removed [ 90.431861][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.439476][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.456989][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.465750][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.782212][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 90.916745][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 96.430362][ T4717] loop3: detected capacity change from 0 to 128 [ 97.021400][ T4717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.031546][ T4717] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.423138][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 97.585514][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.644665][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.821906][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.894111][ T4721] device bridge_slave_0 left promiscuous mode [ 97.900343][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.852351][ T4721] device bridge_slave_1 left promiscuous mode [ 99.037383][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.439001][ T4721] bond0: (slave bond_slave_0): Releasing backup interface [ 99.494503][ T4721] bond0: (slave bond_slave_1): Releasing backup interface [ 100.267680][ T4721] team0: Port device team_slave_0 removed [ 100.450338][ T4721] team0: Port device team_slave_1 removed [ 100.480942][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.557555][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.628718][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.654974][ T4721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.755618][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 105.356172][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.418045][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.661671][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.547637][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 109.214989][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.320016][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.382058][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.134153][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 114.169733][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.635077][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.319133][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.626419][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.399968][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.424808][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.592832][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.238865][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 125.403061][ T5009] fuse: Bad value for 'group_id' [ 126.060169][ T5025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 126.075972][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.085738][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.095685][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.115713][ T5025] device bridge_slave_0 left promiscuous mode [ 126.125182][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.365377][ T5025] device bridge_slave_1 left promiscuous mode [ 126.402162][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.449931][ T5025] bond0: (slave bond_slave_0): Releasing backup interface [ 126.993075][ T5025] bond0: (slave bond_slave_1): Releasing backup interface [ 127.437580][ T5025] team0: Port device team_slave_0 removed [ 127.630528][ T5025] team0: Port device team_slave_1 removed [ 127.663095][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.680817][ T5025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.324021][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.367160][ T5025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.415947][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 129.908508][ T5063] fuse: Bad value for 'group_id' [ 132.730335][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736745][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.793001][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'. [ 132.916531][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.047031][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.055314][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.644152][ T5115] fuse: Bad value for 'group_id' [ 134.877487][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 137.399489][ T5152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 137.416951][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.442700][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.453200][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.135143][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 143.063492][ T5215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.224'. [ 143.268627][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.413197][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.493920][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.045100][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 146.166231][ T5281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 146.852003][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.953350][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.961092][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.163401][ T5321] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 150.625680][ T5332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 150.648133][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.687626][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.711604][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.118149][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 154.802192][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.846470][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.890835][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.554042][ T5428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 156.579472][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.609391][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.617823][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.700299][ T26] audit: type=1326 audit(1762241265.298:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 160.756468][ T26] audit: type=1326 audit(1762241265.338:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 160.872519][ T26] audit: type=1326 audit(1762241265.338:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 161.021125][ T26] audit: type=1326 audit(1762241265.338:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 161.149079][ T26] audit: type=1326 audit(1762241265.338:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 161.258561][ T26] audit: type=1326 audit(1762241265.338:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 161.281427][ T26] audit: type=1326 audit(1762241265.338:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 161.354998][ T26] audit: type=1326 audit(1762241265.338:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 162.197453][ T26] audit: type=1326 audit(1762241265.338:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 162.222180][ T26] audit: type=1326 audit(1762241265.338:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24cb8f6c9 code=0x7ffc0000 [ 166.644669][ T5532] sctp: failed to load transform for md5: -2 [ 170.607954][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 170.607969][ T26] audit: type=1326 audit(1762241275.208:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 170.691386][ T26] audit: type=1326 audit(1762241275.208:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 170.745816][ T26] audit: type=1326 audit(1762241275.208:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 170.784928][ T26] audit: type=1326 audit(1762241275.208:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 170.979394][ T26] audit: type=1326 audit(1762241275.208:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 171.003826][ T26] audit: type=1326 audit(1762241275.208:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 171.026581][ T26] audit: type=1326 audit(1762241275.208:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 171.262093][ T26] audit: type=1326 audit(1762241275.208:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 171.629685][ T26] audit: type=1326 audit(1762241275.208:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 171.665464][ T26] audit: type=1326 audit(1762241275.208:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 173.025472][ T5689] netlink: 'syz.3.376': attribute type 3 has an invalid length. [ 173.401223][ T4522] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 173.625447][ T4522] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 173.667489][ T4522] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 173.723495][ T4522] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 173.755776][ T4522] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.811111][ T4522] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 173.826714][ T4522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.904568][ T4522] usb 3-1: config 0 descriptor?? [ 174.203374][ T4522] usb 3-1: string descriptor 0 read error: -71 [ 174.240412][ T4522] usb 3-1: USB disconnect, device number 2 [ 175.564971][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 175.711287][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 175.870204][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 175.870221][ T26] audit: type=1326 audit(1762241280.468:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 175.979377][ T26] audit: type=1326 audit(1762241280.508:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.113710][ T26] audit: type=1326 audit(1762241280.508:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.210338][ T26] audit: type=1326 audit(1762241280.508:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.324196][ T26] audit: type=1326 audit(1762241280.508:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.423468][ T26] audit: type=1326 audit(1762241280.508:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.521856][ T26] audit: type=1326 audit(1762241280.518:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.585318][ T26] audit: type=1326 audit(1762241280.518:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.681603][ T26] audit: type=1326 audit(1762241280.518:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.751038][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.791067][ T26] audit: type=1326 audit(1762241280.518:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 176.993734][ T22] usb 4-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 177.018830][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 177.066004][ T22] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 177.100716][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.142177][ T22] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 177.175763][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.209291][ T22] usb 4-1: config 0 descriptor?? [ 177.415520][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 177.461327][ T22] usb 4-1: string descriptor 0 read error: -71 [ 177.499111][ T22] usb 4-1: USB disconnect, device number 2 [ 179.772032][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 180.045914][ T5838] netlink: 'syz.0.429': attribute type 49 has an invalid length. [ 180.076086][ T5838] netlink: 'syz.0.429': attribute type 49 has an invalid length. [ 181.461154][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 181.467355][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 181.473635][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 181.479755][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 182.442657][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 185.435925][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 185.437236][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 185.437250][ T26] audit: type=1326 audit(1762241290.038:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x0 [ 185.705299][ T5960] sctp: [Deprecated]: syz.2.467 (pid 5960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.705299][ T5960] Use struct sctp_sack_info instead [ 191.514551][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 192.126221][ T6048] fuse: Bad value for 'fd' [ 194.109163][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.115660][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.774552][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 202.478614][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 202.639854][ T6167] loop2: detected capacity change from 0 to 512 [ 202.675131][ T6167] ======================================================= [ 202.675131][ T6167] WARNING: The mand mount option has been deprecated and [ 202.675131][ T6167] and is ignored by this kernel. Remove the mand [ 202.675131][ T6167] option from the mount to silence this warning. [ 202.675131][ T6167] ======================================================= [ 202.978624][ T6167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.991246][ T6167] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.125440][ T6167] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz.2.534: path /90/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 204.323553][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 207.114928][ T6202] loop4: detected capacity change from 0 to 2048 [ 207.189165][ T6202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.765699][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 208.615585][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.626042][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.634624][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.643424][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.655438][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.665963][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.788478][ T6226] capability: warning: `syz.1.550' uses deprecated v2 capabilities in a way that may be insecure [ 210.196573][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 210.713997][ T6254] loop1: detected capacity change from 0 to 512 [ 210.720644][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.741122][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 210.746989][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.764031][ T6254] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 210.783327][ T6219] device bridge_slave_0 entered promiscuous mode [ 210.792386][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.799624][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.808311][ T6219] device bridge_slave_1 entered promiscuous mode [ 211.083227][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.115949][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.564090][ T6254] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.557: iget: bad i_size value: 360287970189639680 [ 211.665487][ T6254] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.557: couldn't read orphan inode 15 (err -117) [ 211.849081][ T6254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.869948][ T6219] team0: Port device team_slave_0 added [ 211.995576][ T6219] team0: Port device team_slave_1 added [ 212.263565][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.590168][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 213.635781][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.681029][ T4313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.732291][ T6288] Zero length message leads to an empty skb [ 213.837465][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.865149][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 213.908547][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.920506][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.021724][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.654053][ T6219] device hsr_slave_0 entered promiscuous mode [ 214.692346][ T6219] device hsr_slave_1 entered promiscuous mode [ 214.756594][ T6300] loop2: detected capacity change from 0 to 512 [ 214.772960][ T6219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.785350][ T6219] Cannot create hsr debugfs directory [ 214.828267][ T6300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.899548][ T6300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.922243][ T6300] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.180877][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 215.736719][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 216.417245][ T6219] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.738934][ T6219] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.791700][ T6219] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.801927][ T6219] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.971320][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 217.168968][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.190117][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.190175][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.237122][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.298039][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.344913][ T14] usb 2-1: SerialNumber: syz [ 217.375578][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.418481][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.478081][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.491363][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.528424][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.567693][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.574870][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.598129][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.624328][ T14] usb 2-1: 0:2 : does not exist [ 217.637923][ T6351] loop2: detected capacity change from 0 to 8 [ 217.671264][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.704641][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.735953][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.743172][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.751345][ T14] usb 2-1: USB disconnect, device number 3 [ 217.760368][ T6351] SQUASHFS error: zlib decompression failed, data probably corrupt [ 217.781024][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 217.800567][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.840306][ T6351] SQUASHFS error: Failed to read block 0x9b: -5 [ 217.849045][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.870408][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.899786][ T6351] SQUASHFS error: Unable to read metadata cache entry [99] [ 217.910252][ T6351] SQUASHFS error: Unable to read inode 0x127 [ 217.916878][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.948732][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.997758][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.051872][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.100686][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.157857][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.173589][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.214400][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.254326][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.304150][ T6219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.739943][ T6370] loop1: detected capacity change from 0 to 512 [ 219.105043][ T6370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 219.366596][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 220.197678][ T6386] loop4: detected capacity change from 0 to 512 [ 220.315588][ T6386] EXT4-fs: Ignoring removed bh option [ 220.412370][ T6386] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 220.559458][ T6386] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 220.827298][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.873068][ T4343] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 220.891559][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.013634][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.100064][ T4343] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.132664][ T4343] usb 5-1: config 1 has no interface number 0 [ 221.138844][ T4343] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.457606][ T4343] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 222.506524][ T4343] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 222.539448][ T4343] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 222.572828][ T4343] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 222.646312][ T4343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.674000][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.698955][ T4343] usb 5-1: Product: syz [ 222.716877][ T4343] usb 5-1: Manufacturer: syz [ 222.725284][ T4343] usb 5-1: SerialNumber: syz [ 222.790142][ T6386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.016376][ T6386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.118221][ T6417] Device name cannot be null; rc = [-22] [ 223.226257][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 223.242494][ T6386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.661823][ T6386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.684802][ T4343] cdc_ncm 5-1:1.1: bind() failure [ 223.738497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.763753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.903687][ T4321] usb 5-1: USB disconnect, device number 2 [ 223.927030][ T6219] device veth0_vlan entered promiscuous mode [ 224.039109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.075437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.169564][ T6219] device veth1_vlan entered promiscuous mode [ 224.232474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.240844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.493680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.567902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.008228][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.067625][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.256320][ T6219] device veth0_macvtap entered promiscuous mode [ 225.345531][ T6219] device veth1_macvtap entered promiscuous mode [ 225.439710][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.528051][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.542423][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.591032][ T4321] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 225.620441][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.630498][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.653129][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.660503][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.672320][ T5999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.922371][ T4321] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 226.085440][ T4321] usb 3-1: config 0 has no interface number 0 [ 226.262212][ T6219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.301744][ T4321] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 226.310839][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.311746][ T6219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.352526][ T4321] usb 3-1: Product: syz [ 226.362880][ T4321] usb 3-1: Manufacturer: syz [ 226.371424][ T6219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.384077][ T4321] usb 3-1: SerialNumber: syz [ 226.410221][ T4321] usb 3-1: config 0 descriptor?? [ 226.411093][ T6219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.454752][ T4321] hub 3-1:0.132: bad descriptor, ignoring hub [ 226.474963][ T4321] hub: probe of 3-1:0.132 failed with error -5 [ 226.544703][ T4321] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input5 [ 226.881261][ T4321] usb 3-1: USB disconnect, device number 3 [ 226.929024][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.016634][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.028164][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.073159][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.080860][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.361602][ T6465] ptrace attach of "./syz-executor exec"[6466] was attempted by "./syz-executor exec"[6465] [ 228.234873][ T4283] Bluetooth: hci5: command 0x0405 tx timeout [ 228.307850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.631048][ T4313] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 228.950129][ T6480] loop2: detected capacity change from 0 to 512 [ 231.471884][ T6480] EXT4-fs: Ignoring removed i_version option [ 231.478000][ T6480] ext4: Bad value for 'debug_want_extra_isize' [ 233.688207][ T6497] loop3: detected capacity change from 0 to 1024 [ 234.841042][ T6508] fuse: Unknown parameter 'user_i00000000000000000000' [ 235.773340][ T6504] loop5: detected capacity change from 0 to 7 [ 235.824817][ T6504] Dev loop5: unable to read RDB block 7 [ 235.831041][ T6504] loop5: unable to read partition table [ 235.836869][ T6504] loop5: partition table beyond EOD, truncated [ 235.843117][ T6504] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 236.448636][ T6525] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 236.481732][ T6532] syz.2.643 uses obsolete (PF_INET,SOCK_PACKET) [ 239.142470][ T6548] fuse: Unknown parameter 'user_i00000000000000000000' [ 240.250858][ T6562] loop3: detected capacity change from 0 to 512 [ 243.341624][ T6592] fuse: Unknown parameter 'user_i00000000000000000000' [ 248.511603][ T6625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.519550][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 248.779194][ T6628] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.674' resets device [ 248.800395][ T6629] loop5: detected capacity change from 0 to 512 [ 248.921464][ T6629] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 248.939037][ T6629] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.336935][ T6643] fuse: Unknown parameter 'user_id00000000000000000000' [ 250.373050][ T6219] EXT4-fs (loop5): unmounting filesystem. [ 250.880119][ T6651] loop1: detected capacity change from 0 to 256 [ 251.754719][ T4283] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 251.763854][ T4283] Bluetooth: hci0: Injecting HCI hardware error event [ 251.782451][ T4277] Bluetooth: hci0: hardware error 0x00 [ 254.897419][ T4277] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 255.025562][ T6681] fuse: Unknown parameter 'user_id00000000000000000000' [ 255.553962][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.560461][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.682353][ T6695] loop5: detected capacity change from 0 to 512 [ 257.292788][ T6695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.554801][ T6219] EXT4-fs (loop5): unmounting filesystem. [ 257.791054][ T4328] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 258.072357][ T4328] usb 2-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 258.141098][ T4328] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 258.179035][ T4328] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 258.242970][ T4328] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.265185][ T4328] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 258.320608][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.362677][ T4328] usb 2-1: config 0 descriptor?? [ 258.548621][ T6716] Bluetooth: MGMT ver 1.22 [ 258.585180][ T4328] usb 2-1: string descriptor 0 read error: -71 [ 258.631858][ T4328] usb 2-1: USB disconnect, device number 5 [ 260.114496][ T6725] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.170750][ T6727] loop4: detected capacity change from 0 to 512 [ 260.305387][ T6727] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 260.572977][ T6727] EXT4-fs (loop4): 1 orphan inode deleted [ 260.578804][ T6727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 260.605622][ T6727] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.711577][ T6727] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.700: iget: bad i_size value: 360287970189639690 [ 261.102746][ T6734] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.700: iget: bad i_size value: 360287970189639690 [ 262.255018][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 263.722373][ T4524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.881590][ T6769] fuse: Bad value for 'fd' [ 264.248296][ T4524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.454881][ T4524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.705681][ T6794] fuse: Bad value for 'fd' [ 266.821595][ T6796] loop5: detected capacity change from 0 to 512 [ 266.948438][ T6796] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 267.376580][ T4524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.412038][ T6219] EXT4-fs (loop5): unmounting filesystem. [ 268.084163][ T6809] loop2: detected capacity change from 0 to 512 [ 268.236103][ T6809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.397178][ T6809] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 268.631188][ T6809] EXT4-fs (loop2): 1 truncate cleaned up [ 268.636954][ T6809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 269.298107][ T6809] usb usb8: usbfs: process 6809 (syz.2.729) did not claim interface 0 before use [ 269.839094][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 270.010344][ T6848] fuse: Bad value for 'fd' [ 271.351112][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.608083][ T7] usb 6-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 271.659253][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 271.772826][ T7] usb 6-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 272.028688][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.731115][ T7] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 272.740228][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.954132][ T7] usb 6-1: config 0 descriptor?? [ 273.631297][ T6880] loop2: detected capacity change from 0 to 8 [ 274.221066][ T6883] SQUASHFS error: lzo decompression failed, data probably corrupt [ 274.229476][ T6883] SQUASHFS error: Failed to read block 0x29f: -5 [ 274.252251][ T6883] SQUASHFS error: Unable to read metadata cache entry [29d] [ 274.488593][ T6894] fuse: Unknown parameter '0x0000000000000004' [ 274.616015][ T7] usb 6-1: can't set config #0, error -71 [ 274.650262][ T7] usb 6-1: USB disconnect, device number 2 [ 274.711275][ T4328] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 276.083937][ T4328] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.139762][ T4328] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.216111][ T4328] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.250143][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.279184][ T4328] usb 5-1: SerialNumber: syz [ 276.592783][ T4328] usb 5-1: 0:2 : does not exist [ 276.634854][ T4328] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 276.805408][ T4328] usb 5-1: USB disconnect, device number 3 [ 277.051554][ T6928] loop2: detected capacity change from 0 to 128 [ 277.174409][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.232738][ T6928] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.511902][ T6938] fuse: Unknown parameter '0x0000000000000004' [ 277.627043][ T6941] loop2: detected capacity change from 0 to 256 [ 277.668842][ T4524] device hsr_slave_0 left promiscuous mode [ 277.702381][ T4524] device hsr_slave_1 left promiscuous mode [ 277.878558][ T4524] device veth1_macvtap left promiscuous mode [ 277.899473][ T4524] device veth0_macvtap left promiscuous mode [ 277.911262][ T129] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 277.944518][ T4524] device veth1_vlan left promiscuous mode [ 277.954641][ T4524] device veth0_vlan left promiscuous mode [ 278.616404][ T129] usb 2-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 278.677057][ T129] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 278.871308][ T129] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 278.885336][ T129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.892152][ T129] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 278.901718][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.923080][ T129] usb 2-1: config 0 descriptor?? [ 279.020039][ T6966] loop2: detected capacity change from 0 to 512 [ 279.298755][ T6966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.546392][ T129] usb 2-1: string descriptor 0 read error: -71 [ 279.644603][ T129] usb 2-1: USB disconnect, device number 6 [ 279.657102][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 280.241514][ T6979] loop1: detected capacity change from 0 to 512 [ 280.826507][ T6979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.776: inode #1: comm syz.1.776: iget: illegal inode # [ 280.950167][ T6989] fuse: Unknown parameter '0x0000000000000004' [ 280.960439][ T6979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.776: error while reading EA inode 1 err=-117 [ 281.054922][ T6979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.776: inode #1: comm syz.1.776: iget: illegal inode # [ 281.119568][ T6979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.776: error while reading EA inode 1 err=-117 [ 281.202142][ T6979] EXT4-fs (loop1): 1 orphan inode deleted [ 281.207978][ T6979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.317735][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 281.971993][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 282.228140][ T22] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 282.276698][ T22] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 282.351307][ T22] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 282.365374][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.380840][ T22] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 282.392424][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.417261][ T22] usb 3-1: config 0 descriptor?? [ 282.648516][ T22] usb 3-1: string descriptor 0 read error: -71 [ 282.674588][ T22] usb 3-1: USB disconnect, device number 4 [ 282.715978][ T7019] fuse: Unknown parameter '0x0000000000000004' [ 284.935142][ T7054] fuse: Unknown parameter '0x0000000000000004' [ 285.109481][ T4524] bond0 (unregistering): Released all slaves [ 285.272605][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 285.801972][ T7070] loop4: detected capacity change from 0 to 512 [ 286.082079][ T7070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.448463][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 289.578781][ T26] audit: type=1326 audit(1762241394.178:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 289.661814][ T26] audit: type=1326 audit(1762241394.238:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 289.773310][ T26] audit: type=1326 audit(1762241394.238:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 289.831122][ T26] audit: type=1326 audit(1762241394.238:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 289.929679][ T26] audit: type=1326 audit(1762241394.238:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 290.026864][ T7116] loop2: detected capacity change from 0 to 512 [ 290.079706][ T7116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.205553][ T26] audit: type=1326 audit(1762241394.238:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 290.227787][ T26] audit: type=1326 audit(1762241394.238:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 290.464103][ T26] audit: type=1326 audit(1762241394.238:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 291.681106][ T26] audit: type=1326 audit(1762241394.238:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 291.705174][ T26] audit: type=1326 audit(1762241394.238:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 291.842096][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 294.130712][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 295.448216][ T7190] loop2: detected capacity change from 0 to 256 [ 296.696889][ T7190] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 297.585207][ T7206] loop1: detected capacity change from 0 to 256 [ 300.000419][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 301.323124][ T7256] loop5: detected capacity change from 0 to 512 [ 301.435139][ T7256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 301.969074][ T6219] EXT4-fs (loop5): unmounting filesystem. [ 302.774355][ T7274] loop5: detected capacity change from 0 to 1024 [ 302.994562][ T7278] loop2: detected capacity change from 0 to 16 [ 303.127446][ T7278] erofs: (device loop2): mounted with root inode @ nid 36. [ 303.568116][ T7278] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 303.776882][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 303.981300][ T6219] hfsplus: bad catalog entry type [ 307.138196][ T7319] loop1: detected capacity change from 0 to 512 [ 307.154347][ T7319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.649931][ T7319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.658844][ T7319] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.702549][ T7319] __quota_error: 1 callbacks suppressed [ 307.702570][ T7319] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 307.720022][ T7319] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.736487][ T7319] EXT4-fs (loop1): mount failed [ 307.797295][ T4524] hfsplus: b-tree write err: -5, ino 4 [ 308.084718][ T6321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.585384][ T6321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.518936][ T6321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.253238][ T6321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.510320][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 311.020481][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.031247][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.039215][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.048510][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.056156][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 311.069849][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.584484][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 313.653043][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 314.122038][ T26] audit: type=1326 audit(1762241418.728:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 314.241932][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.249624][ T26] audit: type=1326 audit(1762241418.788:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 314.251395][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.355859][ T26] audit: type=1326 audit(1762241418.788:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 314.397843][ T7364] device bridge_slave_0 entered promiscuous mode [ 314.449632][ T26] audit: type=1326 audit(1762241418.788:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 314.459954][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.533933][ T26] audit: type=1326 audit(1762241418.788:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x7ffc0000 [ 314.538953][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.616218][ T7364] device bridge_slave_1 entered promiscuous mode [ 314.822704][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 315.621366][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 316.387211][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.419075][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.595165][ T26] audit: type=1326 audit(1762241421.178:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.2.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fd4f8f6c9 code=0x0 [ 316.756902][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.987306][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.993737][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.428238][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 318.576500][ T7467] UHID_CREATE from different security context by process 526 (syz.2.906), this is not allowed. [ 318.724734][ T7364] team0: Port device team_slave_0 added [ 318.977213][ T7364] team0: Port device team_slave_1 added [ 319.303048][ T6321] device hsr_slave_0 left promiscuous mode [ 319.310092][ T6321] device hsr_slave_1 left promiscuous mode [ 319.327366][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.421402][ T7481] loop1: detected capacity change from 0 to 512 [ 319.526192][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.012800][ T7481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.036341][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.093955][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.341818][ T6321] device bridge_slave_1 left promiscuous mode [ 320.351619][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.362840][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 320.427595][ T6321] device bridge_slave_0 left promiscuous mode [ 320.453481][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.502227][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 320.680460][ T6321] device veth1_macvtap left promiscuous mode [ 320.690031][ T6321] device veth0_macvtap left promiscuous mode [ 320.711322][ T6321] device veth1_vlan left promiscuous mode [ 320.717258][ T6321] device veth0_vlan left promiscuous mode [ 322.077875][ T26] audit: type=1326 audit(1762241426.678:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 322.328919][ T7525] Bluetooth: MGMT ver 1.22 [ 322.521392][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 322.531711][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 322.781056][ T41] usb 3-1: device descriptor read/64, error -32 [ 323.378144][ T26] audit: type=1326 audit(1762241426.678:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.410590][ T26] audit: type=1326 audit(1762241426.678:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.566613][ T26] audit: type=1326 audit(1762241426.678:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.598808][ T26] audit: type=1326 audit(1762241426.678:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.643768][ T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 323.781738][ T26] audit: type=1326 audit(1762241426.678:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.811967][ T26] audit: type=1326 audit(1762241426.678:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.859887][ T26] audit: type=1326 audit(1762241426.678:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.889481][ T26] audit: type=1326 audit(1762241426.678:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.918522][ T26] audit: type=1326 audit(1762241426.678:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 323.974951][ T41] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 323.995005][ T41] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 324.009985][ T41] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 324.031067][ T41] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.038060][ T41] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 324.051031][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.081886][ T41] usb 3-1: config 0 descriptor?? [ 324.438986][ T41] usb 3-1: string descriptor 0 read error: -71 [ 324.472964][ T41] usb 3-1: USB disconnect, device number 6 [ 327.487103][ T7575] loop2: detected capacity change from 0 to 512 [ 328.072348][ T7575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 328.312124][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 328.507870][ T4328] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 328.680082][ T6321] team0 (unregistering): Port device team_slave_1 removed [ 328.716332][ T4328] usb 2-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 328.742644][ T4328] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 328.753876][ T4328] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 328.784855][ T4328] usb 2-1: config 0 interface 0 has no altsetting 0 [ 328.791776][ T4328] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 328.811529][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.834151][ T4328] usb 2-1: config 0 descriptor?? [ 328.930192][ T6321] team0 (unregistering): Port device team_slave_0 removed [ 329.055973][ T4328] usb 2-1: string descriptor 0 read error: -71 [ 329.071474][ T4328] usb 2-1: USB disconnect, device number 7 [ 329.123635][ T6321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.275800][ T6321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.534269][ T7609] loop2: detected capacity change from 0 to 512 [ 330.891684][ T7609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.127885][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 332.959911][ T6321] bond0 (unregistering): Released all slaves [ 333.110476][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.118344][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.145369][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.206834][ T7637] loop2: detected capacity change from 0 to 512 [ 333.775734][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 333.796666][ T7637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 333.818459][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.853806][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.871208][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.007292][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.052023][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 334.069237][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.153803][ T7647] fuse: Bad value for 'fd' [ 334.230532][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.185596][ T7364] device hsr_slave_0 entered promiscuous mode [ 335.232269][ T7364] device hsr_slave_1 entered promiscuous mode [ 335.271142][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.278796][ T7364] Cannot create hsr debugfs directory [ 338.269617][ T7364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.813801][ T7364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.994353][ T7364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.050212][ T7364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 340.491171][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.529398][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.538195][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.576400][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.601801][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.659991][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.689513][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.696734][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.717302][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.767363][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.801445][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.844169][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.851367][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.894522][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.926113][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.952796][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.984854][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.012943][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.117851][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.133400][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.150449][ T7364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.162174][ T7364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.801860][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.841167][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.873783][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.883484][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.892710][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.973'. [ 341.924478][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.964860][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.988548][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.075937][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.489903][ T7748] loop1: detected capacity change from 0 to 1024 [ 343.669522][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.697283][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.711914][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.795979][ T7757] loop2: detected capacity change from 0 to 2048 [ 343.869549][ T6673] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 344.099606][ T6673] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 344.134423][ T6673] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 344.192269][ T6673] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 344.266799][ T6673] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.312530][ T6673] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 344.333625][ T6673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.354359][ T6673] usb 5-1: config 0 descriptor?? [ 344.475109][ T4521] hfsplus: b-tree write err: -5, ino 4 [ 344.495827][ T7757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.556768][ T7757] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 344.566200][ T6673] usb 5-1: string descriptor 0 read error: -71 [ 344.639035][ T7757] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 344.666344][ T6673] usb 5-1: USB disconnect, device number 4 [ 344.721119][ T7757] EXT4-fs (loop2): This should not happen!! Data will be lost [ 344.721119][ T7757] [ 344.787139][ T7757] EXT4-fs (loop2): Total free blocks count 0 [ 344.793561][ T7757] EXT4-fs (loop2): Free/Dirty block details [ 344.826382][ T7757] EXT4-fs (loop2): free_blocks=2415919104 [ 344.851188][ T7757] EXT4-fs (loop2): dirty_blocks=16 [ 344.856370][ T7757] EXT4-fs (loop2): Block reservation details [ 344.890831][ T7757] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 345.633842][ T4364] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 347.542447][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 347.604090][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.670251][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.559772][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.579172][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.749118][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.774780][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.869173][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.907090][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.929810][ T7364] device veth0_vlan entered promiscuous mode [ 348.969545][ T7364] device veth1_vlan entered promiscuous mode [ 349.003641][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 349.136694][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.147202][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.270612][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.331579][ T4328] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 349.640194][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.719398][ T7364] device veth0_macvtap entered promiscuous mode [ 349.793166][ T4328] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 349.801093][ T7364] device veth1_macvtap entered promiscuous mode [ 349.816638][ T4328] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 349.889043][ T4328] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 350.637088][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 350.637112][ T26] audit: type=1326 audit(1762241454.658:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.3.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1298f6c9 code=0x0 [ 350.672908][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.679767][ T4328] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 350.689532][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.694428][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.711710][ T7834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.729867][ T4328] usb 5-1: config 0 descriptor?? [ 350.745239][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.764414][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.804681][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.832431][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.850067][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.878061][ T7364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.934358][ T7364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.955573][ T4328] usb 5-1: string descriptor 0 read error: -71 [ 350.961770][ T7364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.961802][ T7364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.981068][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 351.013883][ T4328] usb 5-1: USB disconnect, device number 5 [ 351.236484][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.270798][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.335444][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.349777][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.358553][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.409361][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.388864][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1012'. [ 352.418266][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.478070][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.501559][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.285517][ T7873] loop6: detected capacity change from 0 to 164 [ 354.246882][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 354.818660][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 355.582490][ T22] usb 7-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 355.600976][ T22] usb 7-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 355.618341][ T22] usb 7-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 355.637785][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.654956][ T22] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 355.709601][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.753084][ T22] usb 7-1: config 0 descriptor?? [ 355.816615][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.024651][ T22] usb 7-1: string descriptor 0 read error: -71 [ 357.051029][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.066440][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.067875][ T22] usb 7-1: USB disconnect, device number 2 [ 357.381352][ T4283] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 357.390467][ T4283] Bluetooth: hci4: Injecting HCI hardware error event [ 357.400206][ T4277] Bluetooth: hci4: hardware error 0x00 [ 357.776062][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 360.418388][ T4277] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 361.632854][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.260918][ T7984] loop2: detected capacity change from 0 to 1024 [ 362.310127][ T7984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.468111][ T7984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 362.779579][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 364.399609][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 364.442222][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 364.481380][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.498694][ T8027] device bridge_slave_0 left promiscuous mode [ 364.525580][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.342439][ T8027] device bridge_slave_1 left promiscuous mode [ 365.355473][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.412986][ T8027] bond0: (slave bond_slave_0): Releasing backup interface [ 365.489813][ T8027] bond0: (slave bond_slave_1): Releasing backup interface [ 365.605611][ T8027] team0: Port device team_slave_0 removed [ 365.673376][ T8027] team0: Port device team_slave_1 removed [ 365.680346][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.694435][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.706717][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.717639][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.791217][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 369.706651][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.775543][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.805416][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.054310][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 372.407460][ T8133] loop1: detected capacity change from 0 to 128 [ 372.460744][ T8131] loop4: detected capacity change from 0 to 2048 [ 372.486229][ T8131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.549357][ T8133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 372.559508][ T8133] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.166059][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 375.619037][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 375.832795][ T22] usb 7-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 375.871420][ T22] usb 7-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 375.931103][ T22] usb 7-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 375.995217][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.025643][ T22] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 376.061116][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.221302][ T22] usb 7-1: config 0 descriptor?? [ 377.295478][ T22] usb 7-1: string descriptor 0 read error: -71 [ 377.300352][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 377.351354][ T22] usb 7-1: USB disconnect, device number 3 [ 378.603673][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610041][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.056819][ T8239] loop2: detected capacity change from 0 to 512 [ 384.159604][ T8239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 384.811398][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 385.999466][ T8250] loop4: detected capacity change from 0 to 512 [ 386.053410][ T8250] EXT4-fs (loop4): bad s_want_extra_isize: 1536 [ 386.197211][ T8256] loop2: detected capacity change from 0 to 512 [ 386.332804][ T8256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 386.349148][ T8256] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.491755][ T8265] EXT4-fs (loop2): shut down requested (2) [ 387.512999][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 389.106671][ T8282] loop2: detected capacity change from 0 to 256 [ 389.213140][ T8282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 393.572069][ T8343] loop6: detected capacity change from 0 to 512 [ 394.438202][ T8343] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 395.032155][ T7364] EXT4-fs (loop6): unmounting filesystem. [ 395.487682][ T8371] loop2: detected capacity change from 0 to 512 [ 395.629300][ T8371] EXT4-fs: Ignoring removed i_version option [ 395.638228][ T8374] loop6: detected capacity change from 0 to 256 [ 395.763012][ T8371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 395.871885][ T26] audit: type=1326 audit(1762241500.478:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.015988][ T26] audit: type=1326 audit(1762241500.478:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.054381][ T26] audit: type=1326 audit(1762241500.518:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.162352][ T26] audit: type=1326 audit(1762241500.518:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.256738][ T8386] loop4: detected capacity change from 0 to 512 [ 396.282476][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 396.293166][ T26] audit: type=1326 audit(1762241500.518:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.350716][ T8386] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.444871][ T26] audit: type=1326 audit(1762241500.518:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.650430][ T26] audit: type=1326 audit(1762241500.518:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.743934][ T26] audit: type=1326 audit(1762241500.518:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.861029][ T26] audit: type=1326 audit(1762241500.518:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 396.956408][ T26] audit: type=1326 audit(1762241501.558:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031938f6c9 code=0x7ffc0000 [ 397.880509][ T8412] loop4: detected capacity change from 0 to 256 [ 397.917479][ T8412] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.950972][ T8412] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 398.056132][ T8412] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 401.120388][ T8453] syz.4.1156 (8453) used greatest stack depth: 17184 bytes left [ 403.586797][ T8487] loop4: detected capacity change from 0 to 512 [ 403.630982][ T4277] Bluetooth: hci3: command 0x0405 tx timeout [ 403.713582][ T8487] EXT4-fs: Ignoring removed i_version option [ 403.719715][ T8487] ext4: Bad value for 'debug_want_extra_isize' [ 406.721272][ T8502] device batadv_slave_1 entered promiscuous mode [ 406.758265][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 407.999216][ T8501] device batadv_slave_1 left promiscuous mode [ 410.970079][ T8539] loop4: detected capacity change from 0 to 8 [ 411.320300][ T8548] loop4: detected capacity change from 0 to 512 [ 411.476228][ T8548] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1182: iget: bad i_size value: 38620345925642 [ 411.541104][ T8548] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1182: couldn't read orphan inode 15 (err -117) [ 411.565825][ T8548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 412.508434][ T8550] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 412.559124][ T56] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 412.618444][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 117 [ 412.635124][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 412.635124][ T56] [ 412.647837][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 5 with error 28 [ 412.674838][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 412.674838][ T56] [ 412.868837][ T56] EXT4-fs (loop4): Total free blocks count 0 [ 412.976326][ T56] EXT4-fs (loop4): Free/Dirty block details [ 413.046175][ T56] EXT4-fs (loop4): free_blocks=0 [ 413.051939][ T56] EXT4-fs (loop4): dirty_blocks=16021 [ 413.067957][ T56] EXT4-fs (loop4): Block reservation details [ 414.766824][ T8592] loop2: detected capacity change from 0 to 512 [ 416.779607][ T8609] loop2: detected capacity change from 0 to 16 [ 416.909245][ T6110] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.049034][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'. [ 423.640435][ T8677] loop6: detected capacity change from 0 to 1024 [ 423.828921][ T8677] hfsplus: xattr searching failed [ 423.868652][ T8677] process 'syz.6.1213' launched './file0' with NULL argv: empty string added [ 425.048271][ T8677] hfsplus: xattr searching failed [ 425.098766][ T8677] hfsplus: xattr searching failed [ 425.497921][ T8690] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1217'. [ 427.803158][ T8717] loop4: detected capacity change from 0 to 256 [ 430.823027][ T8738] loop1: detected capacity change from 0 to 1024 [ 431.805717][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 431.975975][ T56] hfsplus: b-tree write err: -5, ino 4 [ 432.981128][ T4277] Bluetooth: hci3: command 0x0405 tx timeout [ 435.800939][ T129] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 435.993968][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.028372][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.081064][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.174109][ T129] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.213556][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.263100][ T129] usb 2-1: config 0 descriptor?? [ 436.679181][ T129] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 436.932107][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 436.941039][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 437.790441][ T129] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 439.249015][ T8824] usb 2-1: USB disconnect, device number 8 [ 439.482896][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 439.903026][ T8835] binder: 8832:8835 ioctl 4018620d 0 returned -22 [ 440.176766][ T8835] IPv6: sit1: Disabled Multicast RS [ 440.632943][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.643046][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.759186][ T8820] fido_id[8820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 440.841717][ T4335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 442.051124][ T4335] usb 3-1: Using ep0 maxpacket: 16 [ 442.058950][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.120329][ T4335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.173653][ T4335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.223673][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.264188][ T4335] usb 3-1: Product: syz [ 442.268429][ T4335] usb 3-1: Manufacturer: syz [ 442.301792][ T4335] usb 3-1: SerialNumber: syz [ 442.507672][ T8857] loop6: detected capacity change from 0 to 128 [ 442.622228][ T4335] usb 3-1: cannot find UAC_HEADER [ 442.713092][ T4335] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 442.741765][ T4335] usb 3-1: USB disconnect, device number 7 [ 442.761460][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.262496][ T8869] Illegal XDP return value 4291518464 on prog (id 244) dev N/A, expect packet loss! [ 446.083426][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 449.746098][ T8954] device syzkaller0 entered promiscuous mode [ 449.902322][ T8968] loop2: detected capacity change from 0 to 2048 [ 449.981794][ T8968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 451.367338][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 452.308043][ T9020] loop2: detected capacity change from 0 to 128 [ 452.483867][ T9020] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 452.502823][ T9024] loop6: detected capacity change from 0 to 1024 [ 452.509299][ T9020] FAT-fs (loop2): Filesystem has been set read-only [ 452.530528][ T9020] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 452.573500][ T9024] hfsplus: xattr searching failed [ 458.581274][ T9093] loop6: detected capacity change from 0 to 256 [ 458.888307][ T9093] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1319'. [ 461.978417][ T9164] loop2: detected capacity change from 0 to 512 [ 462.532726][ T9164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 462.808273][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 463.135572][ T9186] loop2: detected capacity change from 0 to 16 [ 463.267748][ T6110] udevd[6110]: incorrect erofs checksum on /dev/loop2 [ 464.176693][ T9196] device gre1 entered promiscuous mode [ 464.961148][ T9209] loop4: detected capacity change from 0 to 128 [ 465.643554][ T9202] ipt_CLUSTERIP: Please specify destination IP [ 466.212590][ T9223] loop6: detected capacity change from 0 to 512 [ 466.445505][ T9223] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 466.837402][ T7364] EXT4-fs (loop6): unmounting filesystem. [ 469.631444][ T9263] mmap: syz.2.1361 (9263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 469.888976][ T9267] syz.4.1363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 470.084722][ T9271] loop6: detected capacity change from 0 to 256 [ 470.124591][ T9271] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1357'. [ 473.513776][ T9319] loop6: detected capacity change from 0 to 256 [ 473.737700][ T7364] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 473.765886][ T7364] FAT-fs (loop6): Filesystem has been set read-only [ 473.824158][ T9332] loop1: detected capacity change from 0 to 16 [ 473.836311][ T7364] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 473.924336][ T6110] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 476.558803][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 476.635520][ T9378] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 478.261071][ T129] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 478.328872][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.345725][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.443920][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.456694][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.466998][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 478.474493][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.490851][ T129] usb 2-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 478.501665][ T129] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 478.513336][ T129] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 478.544477][ T129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.556483][ T129] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 478.565953][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.579828][ T129] usb 2-1: config 0 descriptor?? [ 478.767656][ T9433] loop2: detected capacity change from 0 to 256 [ 478.788786][ T129] usb 2-1: string descriptor 0 read error: -71 [ 478.813914][ T129] usb 2-1: USB disconnect, device number 9 [ 478.814213][ T6182] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.022202][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 480.582784][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 481.043636][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.128298][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.192603][ T9421] device bridge_slave_0 entered promiscuous mode [ 481.207209][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.214524][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.232441][ T9421] device bridge_slave_1 entered promiscuous mode [ 481.375605][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.413380][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.584760][ T9421] team0: Port device team_slave_0 added [ 481.617597][ T9421] team0: Port device team_slave_1 added [ 481.678889][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.697971][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.728367][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.752914][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.780186][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.813647][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.881125][ T4431] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 482.006727][ T9421] device hsr_slave_0 entered promiscuous mode [ 482.029169][ T9421] device hsr_slave_1 entered promiscuous mode [ 482.036463][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.056443][ T9421] Cannot create hsr debugfs directory [ 482.085546][ T4431] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 482.150427][ T4431] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 482.331641][ T4431] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 482.499888][ T4431] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.595499][ T4431] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 482.636673][ T4431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.671354][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 482.675881][ T4431] usb 3-1: config 0 descriptor?? [ 483.672857][ T4431] usb 3-1: string descriptor 0 read error: -71 [ 483.712818][ T4431] usb 3-1: USB disconnect, device number 8 [ 484.203821][ T9421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.255771][ T9421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.297337][ T9421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.353337][ T9421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 484.610407][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.640236][ T9558] loop2: detected capacity change from 0 to 2048 [ 484.654185][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.674798][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.705564][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.737913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.750994][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 484.759813][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.769098][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.776268][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.785064][ T9558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.786144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.808245][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.700616][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.778969][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.786174][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.981391][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.997037][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.489870][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 486.500318][ T9421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.510775][ T9421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.543743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.603665][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.618138][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.636943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.669965][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.692870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.711999][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.820973][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 487.010978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.021042][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 487.045977][ T9582] device team1 entered promiscuous mode [ 487.058199][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.092165][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.450951][ T8824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 487.667014][ T8824] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 487.687222][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.692461][ T8824] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 487.709597][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.732341][ T8824] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 487.743424][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.790909][ T8824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 487.825894][ T8824] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 487.850895][ T8824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.860627][ T8824] usb 3-1: config 0 descriptor?? [ 487.987456][ T9630] [ 487.989854][ T9630] ====================================================== [ 487.996880][ T9630] WARNING: possible circular locking dependency detected [ 488.003920][ T9630] syzkaller #0 Not tainted [ 488.008341][ T9630] ------------------------------------------------------ [ 488.015361][ T9630] syz.1.1458/9630 is trying to acquire lock: [ 488.021344][ T9630] ffff88802f984c58 (&mm->mmap_lock){++++}-{3:3}, at: upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.031457][ T9630] [ 488.031457][ T9630] but task is already holding lock: [ 488.038833][ T9630] ffff8880782d4800 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 488.049742][ T9630] [ 488.049742][ T9630] which lock already depends on the new lock. [ 488.049742][ T9630] [ 488.060149][ T9630] [ 488.060149][ T9630] the existing dependency chain (in reverse order) is: [ 488.069165][ T9630] [ 488.069165][ T9630] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 488.077835][ T9630] down_write+0x36/0x60 [ 488.082503][ T9630] process_measurement+0x33c/0x1a10 [ 488.088211][ T9630] ima_file_mmap+0x104/0x150 [ 488.093304][ T9630] __se_sys_remap_file_pages+0x53e/0x770 [ 488.099436][ T9630] do_syscall_64+0x4c/0xa0 [ 488.104353][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.110770][ T9630] [ 488.110770][ T9630] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 488.118308][ T9630] __lock_acquire+0x2cf8/0x7c50 [ 488.123671][ T9630] lock_acquire+0x1b4/0x490 [ 488.128678][ T9630] down_write_killable+0x45/0x90 [ 488.134117][ T9630] upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.140340][ T9630] lock_mm_and_find_vma+0x117/0x2f0 [ 488.146046][ T9630] do_user_addr_fault+0x2db/0xb10 [ 488.151573][ T9630] exc_page_fault+0x60/0x100 [ 488.156672][ T9630] asm_exc_page_fault+0x22/0x30 [ 488.162025][ T9630] fault_in_readable+0x13e/0x1f0 [ 488.167467][ T9630] fault_in_iov_iter_readable+0xbb/0x2e0 [ 488.173605][ T9630] generic_perform_write+0x1d2/0x560 [ 488.179396][ T9630] __generic_file_write_iter+0x172/0x430 [ 488.185546][ T9630] generic_file_write_iter+0xab/0x2e0 [ 488.191428][ T9630] vfs_write+0x44c/0x960 [ 488.196172][ T9630] __x64_sys_pwrite64+0x191/0x220 [ 488.201699][ T9630] do_syscall_64+0x4c/0xa0 [ 488.206615][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.213006][ T9630] [ 488.213006][ T9630] other info that might help us debug this: [ 488.213006][ T9630] [ 488.223231][ T9630] Possible unsafe locking scenario: [ 488.223231][ T9630] [ 488.230659][ T9630] CPU0 CPU1 [ 488.236000][ T9630] ---- ---- [ 488.241339][ T9630] lock(&sb->s_type->i_mutex_key#12); [ 488.246778][ T9630] lock(&mm->mmap_lock); [ 488.253608][ T9630] lock(&sb->s_type->i_mutex_key#12); [ 488.261567][ T9630] lock(&mm->mmap_lock); [ 488.265874][ T9630] [ 488.265874][ T9630] *** DEADLOCK *** [ 488.265874][ T9630] [ 488.273995][ T9630] 2 locks held by syz.1.1458/9630: [ 488.279079][ T9630] #0: ffff88807b4a0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 488.287939][ T9630] #1: ffff8880782d4800 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 488.299225][ T9630] [ 488.299225][ T9630] stack backtrace: [ 488.305107][ T9630] CPU: 0 PID: 9630 Comm: syz.1.1458 Not tainted syzkaller #0 [ 488.312452][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.322503][ T9630] Call Trace: [ 488.325778][ T9630] [ 488.328690][ T9630] dump_stack_lvl+0x168/0x22e [ 488.333350][ T9630] ? load_image+0x3b0/0x3b0 [ 488.337835][ T9630] ? show_regs_print_info+0x12/0x12 [ 488.343017][ T9630] ? print_circular_bug+0x12b/0x1a0 [ 488.348202][ T9630] check_noncircular+0x274/0x310 [ 488.353121][ T9630] ? add_chain_block+0x940/0x940 [ 488.358036][ T9630] ? lockdep_lock+0xdc/0x1e0 [ 488.362606][ T9630] ? _find_first_zero_bit+0xcf/0x100 [ 488.367874][ T9630] __lock_acquire+0x2cf8/0x7c50 [ 488.372711][ T9630] ? verify_lock_unused+0x140/0x140 [ 488.377887][ T9630] ? mt_find+0x145/0x810 [ 488.382106][ T9630] ? __lock_acquire+0x7c50/0x7c50 [ 488.387111][ T9630] lock_acquire+0x1b4/0x490 [ 488.391594][ T9630] ? upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.397473][ T9630] ? cmp_ex_search+0x1a/0x70 [ 488.402047][ T9630] ? bsearch+0x8a/0xb0 [ 488.406099][ T9630] ? read_lock_is_recursive+0x10/0x10 [ 488.411452][ T9630] ? search_extable+0x8c/0xd0 [ 488.416108][ T9630] ? trim_init_extable+0x3b0/0x3b0 [ 488.421213][ T9630] ? up_read+0x20/0x20 [ 488.425280][ T9630] ? upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.431162][ T9630] down_write_killable+0x45/0x90 [ 488.436084][ T9630] ? upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.441959][ T9630] upgrade_mmap_lock_carefully+0xbb/0x140 [ 488.447660][ T9630] lock_mm_and_find_vma+0x117/0x2f0 [ 488.452843][ T9630] do_user_addr_fault+0x2db/0xb10 [ 488.457848][ T9630] ? _raw_spin_unlock_irq+0x1f/0x40 [ 488.463034][ T9630] exc_page_fault+0x60/0x100 [ 488.467607][ T9630] asm_exc_page_fault+0x22/0x30 [ 488.472438][ T9630] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 488.478139][ T9630] Code: 48 e7 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 27 e7 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 0a e7 [ 488.497736][ T9630] RSP: 0018:ffffc90003fa7a90 EFLAGS: 00050287 [ 488.503788][ T9630] RAX: ffffffff81bbef39 RBX: 0000000000001000 RCX: 0000000000080000 [ 488.511742][ T9630] RDX: ffffc90005789000 RSI: 000000000000054d RDI: 000000000000054e [ 488.519690][ T9630] RBP: 0000000000000000 R08: ffff888028659dc0 R09: 0000000000000002 [ 488.527640][ T9630] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000003000 [ 488.535591][ T9630] R13: dffffc0000000000 R14: 00002000000010c0 R15: 0000200000002000 [ 488.543544][ T9630] ? fault_in_readable+0x139/0x1f0 [ 488.548640][ T9630] fault_in_iov_iter_readable+0xbb/0x2e0 [ 488.554255][ T9630] generic_perform_write+0x1d2/0x560 [ 488.559519][ T9630] ? atime_needs_update+0x780/0x780 [ 488.564698][ T9630] ? generic_file_direct_write+0x660/0x660 [ 488.570480][ T9630] ? __file_remove_privs+0x5b0/0x5b0 [ 488.575748][ T9630] ? preempt_count_add+0x8d/0x190 [ 488.580750][ T9630] ? rwsem_write_trylock+0x12f/0x1b0 [ 488.586016][ T9630] ? clear_nonspinnable+0x60/0x60 [ 488.591019][ T9630] ? generic_write_checks_count+0x3d9/0x4c0 [ 488.596894][ T9630] __generic_file_write_iter+0x172/0x430 [ 488.602508][ T9630] generic_file_write_iter+0xab/0x2e0 [ 488.607859][ T9630] vfs_write+0x44c/0x960 [ 488.612084][ T9630] ? file_end_write+0x250/0x250 [ 488.616913][ T9630] ? __fget_files+0x44a/0x4d0 [ 488.621571][ T9630] ? __fdget+0x17c/0x200 [ 488.625791][ T9630] ? __x64_sys_pwrite64+0xec/0x220 [ 488.630892][ T9630] __x64_sys_pwrite64+0x191/0x220 [ 488.635902][ T9630] ? ksys_pwrite64+0x1b0/0x1b0 [ 488.640643][ T9630] ? lockdep_hardirqs_on+0x94/0x140 [ 488.645823][ T9630] do_syscall_64+0x4c/0xa0 [ 488.650216][ T9630] ? clear_bhb_loop+0x60/0xb0 [ 488.654872][ T9630] ? clear_bhb_loop+0x60/0xb0 [ 488.659522][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.665398][ T9630] RIP: 0033:0x7f031938f6c9 [ 488.669806][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.689393][ T9630] RSP: 002b:00007f031a2bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 488.697784][ T9630] RAX: ffffffffffffffda RBX: 00007f03195e5fa0 RCX: 00007f031938f6c9 [ 488.705736][ T9630] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 488.713684][ T9630] RBP: 00007f0319411f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.721655][ T9630] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 488.729608][ T9630] R13: 00007f03195e6038 R14: 00007f03195e5fa0 R15: 00007ffca63dc578 [ 488.737563][ T9630] [ 488.762602][ T8824] usb 3-1: string descriptor 0 read error: -71 [ 488.801639][ T8824] usb 3-1: USB disconnect, device number 9 [ 488.994136][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 489.002959][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.023540][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 489.032283][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.043771][ T9421] device veth0_vlan entered promiscuous mode [ 489.050273][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 489.059000][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 489.072601][ T9421] device veth1_vlan entered promiscuous mode [ 489.094817][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 489.106684][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 489.115781][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 489.125766][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 489.136544][ T9421] device veth0_macvtap entered promiscuous mode [ 489.148507][ T9421] device veth1_macvtap entered promiscuous mode [ 489.165243][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.173865][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.183975][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.193940][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.202825][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.217030][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.225098][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.235289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.246861][ T9421] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.256825][ T9421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.265860][ T9421] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.275235][ T9421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.306511][ T9421] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 489.333439][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.341538][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.342861][ T9421] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 489.378977][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.382344][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.391260][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.412131][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready